Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File:                     5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier:          LQsTTDk0mBAGsyVV8VtfX1yPa75gIfJsfPx6bZOHwTI=
Subject key identifier:   ED:02:A0:2C:A3:FE:B4:09:D2:D0:33:1A:80:74:D5:B1:F8:FB:DE:54
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer:       /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial:       01A1AA4C793D8C930487381B118A78033F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number:          030F
Signing time:             Thu 05 Nov 2026 06:01:40 +0000
Manifest this update:     Thu 05 Nov 2026 06:01:40 +0000
Manifest next update:     Fri 06 Nov 2026 06:01:40 +0000
Files and hashes:         1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
                          2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: kNnLVLQfQ5X69KYUoHhIzz3m5qHe4aQ3WCoaWvU93v4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 06:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:4c:79:3d:8c:93:04:87:38:1b:11:8a:78:03:3f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
        Validity
            Not Before: Nov  5 06:01:40 2026 GMT
            Not After : Nov  6 06:01:40 2026 GMT
        Subject: CN=ed02a02ca3feb409d2d0331a8074d5b1f8fbde54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:ba:d3:3f:fd:b6:f2:b6:54:89:82:e4:21:
                    0f:ef:ed:38:41:b8:8e:65:26:f4:26:95:10:53:ed:
                    b1:1e:be:3c:57:32:da:0c:c5:c3:4a:c7:5c:8c:51:
                    1a:aa:4c:a1:1c:e9:49:ae:b7:b2:35:de:24:2f:4f:
                    2a:15:4d:92:c7:c1:b8:62:84:2a:c2:d1:36:6c:bf:
                    29:ca:55:85:45:13:fd:33:da:be:ec:69:ef:e9:3e:
                    46:d9:28:cb:74:65:34:fa:db:b7:8d:e4:24:4f:3a:
                    a6:35:ed:33:4a:e3:79:b3:39:36:d1:9f:cb:7f:40:
                    cb:56:ab:2a:ff:fe:4e:ae:25:37:e4:04:84:e3:49:
                    b3:7a:d4:a4:9d:06:11:9a:5b:2a:8b:98:65:7a:09:
                    64:de:ce:aa:a1:55:de:0a:3d:e3:a5:88:2b:99:f6:
                    e7:ad:9f:e3:b6:0a:46:c1:b0:40:ec:b8:68:ca:d0:
                    f3:23:25:6d:85:dc:a0:d4:53:24:00:9e:59:95:86:
                    53:2b:9c:26:08:2e:4e:d1:56:19:59:57:5a:25:0e:
                    c2:19:ce:f5:f8:a3:9e:78:fc:0e:67:a5:0e:97:7d:
                    e5:b0:6d:36:17:7f:af:5c:bd:76:42:48:52:2c:f5:
                    f1:a9:f6:2a:00:47:4b:11:27:9d:66:02:70:eb:63:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:02:A0:2C:A3:FE:B4:09:D2:D0:33:1A:80:74:D5:B1:F8:FB:DE:54
            X509v3 Authority Key Identifier:
                keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:64:64:f5:5b:20:ba:f6:d3:2d:1b:cb:53:ee:d2:c7:a0:56:
         c5:93:8f:c9:53:2b:80:08:69:b3:13:c2:3c:92:bd:4c:10:61:
         9c:a8:8f:ed:36:eb:83:c4:d4:d7:2a:c0:bd:0d:da:2f:43:3d:
         3d:28:d7:fb:74:ac:f6:c1:b9:7f:b4:d4:88:b8:d0:ce:0b:3c:
         84:19:c9:be:2f:2a:1a:e6:a8:7c:5b:43:4a:3d:fe:f3:be:8a:
         64:ad:8e:08:34:70:0f:24:d4:91:4a:7d:1e:0e:a2:b3:47:e1:
         ed:61:fe:59:a9:62:40:36:91:24:51:6e:9a:88:db:03:87:99:
         37:ef:10:8e:c1:5a:e5:66:4b:9c:cc:2c:f4:a3:71:9a:e6:db:
         56:fa:43:8c:c6:b5:20:75:c2:39:da:fc:10:0b:a1:d5:80:1b:
         86:a7:ab:a8:6e:44:da:bf:ec:24:9a:96:07:e4:29:d0:af:ea:
         23:31:ed:ed:71:8e:9d:92:db:cf:ee:32:bd:48:2d:08:ae:dc:
         3f:80:7a:7d:b0:26:79:c9:8f:52:96:88:c1:f2:c6:b5:57:7f:
         93:14:bf:83:d5:a3:90:ee:c4:d8:55:de:0e:78:75:e3:99:fd:
         cd:c6:f0:04:e5:8d:54:aa:14:50:4e:4a:39:92:4e:1e:8a:5d:
         36:df:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:12:20 2026 by rpki-client