Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          ENytl4xZrhqPChyg4FevCV/Kr+yTc+3BZtpX0Et6kqo=
Subject key identifier:   C8:3D:AD:F1:42:99:41:69:C1:34:8C:D0:EF:AF:FA:F6:1E:A5:CF:98
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       01A1AAF02704D94594DB40E962F6A43E679A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          1A73
Signing time:             Thu 05 Nov 2026 09:00:27 +0000
Manifest this update:     Thu 05 Nov 2026 09:00:27 +0000
Manifest next update:     Fri 06 Nov 2026 09:00:27 +0000
Files and hashes:         1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: Bs/DXmzWFcw1sqRg4nQ/wLvl3O4pHxoPdyhWVzQTbB0=)
                          2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
                          3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
                          4: Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa (hash: ipV86oOkjGzli6pzk5Ar8vQYROabIbZnZILhX3gNwHo=)
                          5: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
                          6: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
                          7: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
                          8: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:f0:27:04:d9:45:94:db:40:e9:62:f6:a4:3e:67:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Nov  5 09:00:27 2026 GMT
            Not After : Nov  6 09:00:27 2026 GMT
        Subject: CN=c83dadf142994169c1348cd0efaffaf61ea5cf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:90:cc:9f:5c:90:66:77:88:0d:f5:49:f4:a0:
                    c6:10:35:d3:4c:ce:a6:a1:59:fb:c0:fb:7e:10:76:
                    fd:a7:d9:a8:2d:ab:18:8a:3e:98:db:97:9c:3d:5b:
                    2c:4b:c1:63:89:dd:0a:7b:34:b0:99:a0:6b:b0:b8:
                    61:5d:44:68:c4:79:88:77:74:5a:86:ef:92:0f:a8:
                    79:51:7d:4d:a2:e4:6f:71:6a:d4:65:d0:88:0c:a2:
                    12:b6:ce:14:df:a1:6c:55:68:ee:ea:37:9a:02:cd:
                    74:40:ee:01:f8:b3:73:e3:85:c1:f7:d2:57:32:47:
                    5a:92:f3:7f:17:ab:11:ef:bf:19:a7:dc:25:ae:99:
                    5c:3c:e1:aa:6e:ad:af:fe:08:3c:a7:82:95:9f:d8:
                    3f:bf:ea:ce:d9:49:c5:3a:8f:af:d6:da:ef:4e:27:
                    bc:c5:36:08:d5:57:91:c4:f0:f6:cf:c2:b6:81:5e:
                    df:c2:48:26:ba:da:96:76:18:49:7f:a9:8c:b1:ce:
                    e7:35:ea:ab:03:0b:9c:7f:cf:17:ee:79:33:a9:26:
                    c4:df:fb:a1:44:4d:c4:f3:57:aa:6b:1a:c3:e4:c8:
                    87:7e:5c:7b:15:49:c2:dc:a8:80:4d:e3:1a:36:44:
                    7c:15:72:e6:13:60:fe:06:7c:96:61:e2:0d:00:cd:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3D:AD:F1:42:99:41:69:C1:34:8C:D0:EF:AF:FA:F6:1E:A5:CF:98
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:46:15:25:55:b9:71:47:58:58:77:be:9e:4e:62:5c:d1:
         30:07:5f:50:1e:0b:fe:61:6b:c0:77:7b:dc:d8:ac:3f:95:e2:
         b4:f5:25:74:c1:a2:8b:85:c0:8e:34:54:f2:a0:27:1f:cb:91:
         3d:52:f4:f7:4a:ba:7d:ce:96:35:dc:93:f5:0a:0f:e9:76:94:
         4e:aa:61:db:23:81:a0:f3:cf:8c:50:a9:b1:42:c2:65:3f:bd:
         c2:e3:47:0f:2e:23:84:b7:37:bd:9f:dc:9f:39:e0:1c:09:19:
         0f:b5:36:48:42:8a:2f:de:1c:e7:88:1a:52:7e:58:be:2e:c9:
         49:5c:c6:3b:70:e7:b9:84:1d:5f:16:d5:b9:e9:88:be:71:1a:
         bb:c9:bf:62:97:9c:60:b4:33:a7:04:de:48:9d:e2:b6:71:02:
         6d:c3:2f:12:b7:2b:85:91:fc:03:de:e7:72:14:a1:83:0a:58:
         8d:e3:ee:1d:1b:45:9e:6e:ee:9d:60:09:0a:e7:f3:db:56:7f:
         6b:6a:0c:a8:72:d4:62:c8:2f:65:18:53:77:85:bb:01:cc:96:
         84:ce:6a:d0:53:02:56:50:4e:8a:6f:22:3e:ed:89:b8:72:bf:
         14:c3:d4:20:b5:bd:63:b1:7c:91:15:4c:c7:a2:6a:98:97:cc:
         8c:7c:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:52:12 2026 by rpki-client