Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
File:                     0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft (raw, json)
Hash identifier:          RjyArVe0NOc6q9py6DlKAjOBE3tjzYGjA5tdk5jGmOo=
Subject key identifier:   5A:AD:C7:E1:14:02:AB:3A:9D:A0:B7:B2:EE:89:E4:A1:E0:9F:93:14
Authority key identifier: D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
Certificate issuer:       /CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Certificate serial:       01A189401829ACFA530D1A9B9B56C7D55226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
Manifest number:          023C
Signing time:             Thu 29 Oct 2026 20:00:41 +0000
Manifest this update:     Thu 29 Oct 2026 20:00:41 +0000
Manifest next update:     Fri 30 Oct 2026 20:00:41 +0000
Files and hashes:         1: 0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl (hash: 6XLB3cWT5O27KvSwUZ3ORy36VysehsLdQgcnbu39cOs=)
                          2: 1JGl546XdWjk0oOy56nI8pHJhWk.roa (hash: uscShTP+qNfU1RA7Q+pYfpaR8pLkQ13vtqeKOAQVAxU=)
                          3: MOJcdxQiBxAx2vvdcpdbYmiGD_A.roa (hash: ZIMOdFsqgaXvljzA+t76+XedwYdcjxI2Gj45XhDck7I=)
                          4: PiEU5bw5uemnzlSgvSZN2wdnxVM.roa (hash: ESXJVv37LFh+irhkVpNO1UdQQDqDJqxHQaBXkLgisEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:40:18:29:ac:fa:53:0d:1a:9b:9b:56:c7:d5:52:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
        Validity
            Not Before: Oct 29 20:00:41 2026 GMT
            Not After : Oct 30 20:00:41 2026 GMT
        Subject: CN=5aadc7e11402ab3a9da0b7b2ee89e4a1e09f9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:13:3b:3a:1c:54:c5:7a:b3:48:b2:dd:d4:
                    35:58:9a:77:41:eb:bf:02:db:21:d5:4a:08:ed:1a:
                    ef:db:16:15:7d:45:56:c3:97:3b:ad:f9:64:76:a8:
                    d0:d1:52:40:8a:7f:44:a3:81:95:06:69:61:a8:66:
                    e5:49:95:5a:bf:5d:3b:50:26:b6:d8:32:fa:6e:94:
                    31:23:e2:9a:ab:56:4e:4f:a1:1c:56:27:54:96:f0:
                    a9:25:e9:a6:57:62:b8:bd:3d:3a:e8:4c:c9:35:0e:
                    16:40:e7:8e:b5:88:a5:82:c8:f4:29:60:a6:df:f4:
                    ef:51:23:f9:01:59:16:9f:26:3a:fb:84:14:89:bb:
                    97:d8:89:a2:67:47:fc:4e:60:cf:aa:2f:46:fa:ff:
                    26:0e:d5:b3:f5:4f:9c:24:7b:9a:a8:d7:98:98:64:
                    48:60:cb:ac:6c:74:42:8c:76:8f:29:eb:74:ee:4a:
                    9b:e7:8e:26:c4:02:2f:d4:06:11:f7:eb:25:45:43:
                    ed:93:02:d4:6a:b8:81:4a:b9:0f:eb:58:4a:41:c3:
                    bf:e3:2c:bd:79:e0:3c:6c:80:da:a7:d4:16:28:47:
                    19:d0:ac:9b:b1:3e:f0:0c:3e:54:fe:cc:de:9b:e2:
                    39:3a:6e:b8:11:43:23:6b:a8:eb:57:b0:99:a6:81:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AD:C7:E1:14:02:AB:3A:9D:A0:B7:B2:EE:89:E4:A1:E0:9F:93:14
            X509v3 Authority Key Identifier:
                keyid:D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:56:92:69:fa:a0:73:f4:4a:c5:e7:cc:86:21:75:4e:33:85:
         b5:9f:6b:fd:19:46:13:08:05:12:79:09:46:87:55:36:44:7c:
         44:5b:ef:2d:81:8e:ed:ad:82:2d:1d:c6:6e:72:b1:21:85:6f:
         24:60:22:0f:5f:68:26:3c:53:10:9a:68:57:8f:34:45:32:26:
         cc:0b:07:61:f6:21:aa:47:a4:1a:a8:7e:27:22:3a:11:e8:9b:
         4e:9f:41:af:6e:98:c1:a5:a8:f5:02:ab:99:f0:3f:58:e7:2c:
         f4:fd:d1:34:00:1b:1f:33:e4:b7:f0:3a:4a:b7:18:d0:9d:74:
         d0:61:7a:0d:33:be:10:67:29:9a:b8:51:59:c8:bb:e2:91:6f:
         0b:ee:2e:95:13:a3:83:e3:b0:68:ea:67:a4:8f:d2:5c:57:82:
         b7:48:8a:ac:d2:58:84:81:37:68:55:0b:7f:8b:85:cc:4f:09:
         62:76:9a:56:f7:c5:50:04:a9:03:43:37:fb:7b:69:f4:95:cc:
         ce:52:c3:c6:6b:8a:6b:f1:22:20:d2:3b:3b:53:5b:08:96:9c:
         d7:d7:12:ed:c4:f4:a1:4c:3c:9c:36:74:54:37:6a:b9:e2:f2:
         44:97:d2:47:8f:67:12:89:d6:c4:20:2b:b8:0f:22:8e:a5:99:
         d3:17:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:08:14 2026 by rpki-client