Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
File:                     5wQefn0YTV261xQp42W58Kx2ylI.mft (raw, json)
Hash identifier:          G9DJuoLFSe9HtZqq+7VBCL5Zer8bIZcTsRRDGn19MA0=
Subject key identifier:   D5:35:0E:91:59:2F:7B:0D:28:30:6D:51:B3:F3:B6:87:32:B8:C2:69
Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
Certificate issuer:       /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Certificate serial:       01A130D85A350E0D28B09089F54835CAD0C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
Manifest number:          037C
Signing time:             Mon 12 Oct 2026 16:00:47 +0000
Manifest this update:     Mon 12 Oct 2026 16:00:47 +0000
Manifest next update:     Tue 13 Oct 2026 16:00:47 +0000
Files and hashes:         1: 5wQefn0YTV261xQp42W58Kx2ylI.crl (hash: PmepDvmPDVF9Y8wOc9yO9q+Ow+lMjLAILEfxuwLEfic=)
                          2: JGaj-VMF82BATvYd0lQOFLHFMc8.roa (hash: pT58jY5xAuPaGqFJHp5UHGx9TDCbSHrDu393sd5XVkQ=)
                          3: Tgyba4QUN4V8tZaz-LrXuKGglcI.roa (hash: 3N1ko+R/E9uyhb+olKiqz7rmkIhC5Q0D6JIxxMh2AjI=)
                          4: ng1Tkoik0468H1Ss1bWCZlgGMXA.roa (hash: syZ/2LZN01/WEB1S0lL+Wm4S4EZXka7JcoKvJG2ctoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:d8:5a:35:0e:0d:28:b0:90:89:f5:48:35:ca:d0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
        Validity
            Not Before: Oct 12 16:00:47 2026 GMT
            Not After : Oct 13 16:00:47 2026 GMT
        Subject: CN=d5350e91592f7b0d28306d51b3f3b68732b8c269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:6f:bd:c6:8e:20:18:c8:80:85:71:fc:af:
                    a8:93:69:8d:3b:f4:d1:9b:b1:79:6a:3a:96:46:9d:
                    c1:cb:c7:7d:2d:8c:b5:de:57:6c:26:f7:1c:6c:33:
                    cf:9b:78:d0:f1:6a:a2:3c:fb:55:4f:08:62:2e:4a:
                    42:a8:23:c8:65:5e:0d:d7:a6:a5:49:95:cd:54:10:
                    90:db:f4:d4:e1:48:a3:79:31:6d:e7:d9:f1:98:0f:
                    a4:9d:bd:2b:7e:0a:0d:64:6e:d9:e6:dc:ec:41:9b:
                    2c:ad:a7:b0:bc:27:83:09:b2:40:74:75:56:d7:d7:
                    0b:8a:c4:d6:cd:75:50:dc:43:c5:0a:20:5d:84:b5:
                    3f:78:80:25:ef:fa:2b:7d:89:63:ba:a9:03:bc:53:
                    c9:f6:ea:1b:28:62:a2:74:ff:4f:1b:ad:5c:82:96:
                    53:23:e6:ac:fe:bd:17:f1:95:e9:31:5d:83:36:42:
                    66:15:2f:aa:43:f5:5e:a3:2a:ce:6f:fa:17:27:f5:
                    e4:33:5d:31:f2:62:eb:23:7c:28:82:1d:b6:fa:5c:
                    24:c2:cb:31:9d:5e:c1:18:94:60:0b:fa:b3:6c:6b:
                    55:be:82:5c:63:48:3a:5d:20:8d:42:e0:c9:3f:93:
                    22:7f:10:79:64:23:0d:4b:05:4f:34:3f:3c:9e:e7:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:0E:91:59:2F:7B:0D:28:30:6D:51:B3:F3:B6:87:32:B8:C2:69
            X509v3 Authority Key Identifier:
                keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7d:90:f5:47:9d:7e:c9:c9:90:8e:f5:f7:c2:6d:0b:e2:0d:
         4f:88:25:54:99:c1:c7:95:0d:90:66:02:b1:cd:ee:81:ba:8d:
         4b:98:ee:26:cf:ed:a4:95:b0:79:0b:4a:ac:42:9c:a5:17:ce:
         62:26:cc:44:53:61:30:9d:8b:13:8a:e8:7d:6f:e3:50:4e:9f:
         0d:7a:40:36:1d:34:cd:2c:ed:08:11:b7:67:f7:d3:1b:db:78:
         48:25:28:68:00:af:8a:a8:7a:5d:05:5d:78:da:4e:35:75:4a:
         bf:ab:9e:05:a8:b1:07:aa:9e:7d:91:32:9f:2a:0c:a4:09:2a:
         a3:87:8d:0c:63:d0:10:5b:6d:7f:dd:99:71:c7:3e:1f:20:cc:
         4f:f8:e4:da:bd:2a:a1:b9:1b:4b:f5:d1:4f:f2:91:a0:9b:a3:
         90:2f:11:bc:f7:04:38:f0:f7:e0:4d:98:2e:f3:fa:9d:83:ef:
         16:81:e7:83:fe:6b:1f:55:78:83:0d:3e:de:70:86:d4:f2:fa:
         4c:c9:4b:9e:24:31:65:44:b2:3c:19:e2:e6:56:53:ff:49:d3:
         8f:cd:ab:de:46:d3:74:65:6d:b3:10:3c:96:7a:8e:3f:c9:28:
         75:88:b1:36:66:f5:81:49:b9:3f:0b:e6:72:d1:f0:81:64:80:
         0c:bc:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:42:59 2026 by rpki-client