Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft
File:                     5iZBnHp8u1opWmA-HiCrWIBGqNU.mft (raw, json)
Hash identifier:          OkHUESHW24IvfD8SEAar7VIfGQWB1oMYXsvAcGc2akY=
Subject key identifier:   86:E6:62:6B:58:8C:DF:B0:5D:9C:F2:96:73:67:13:73:57:FA:5A:21
Authority key identifier: E6:26:41:9C:7A:7C:BB:5A:29:5A:60:3E:1E:20:AB:58:80:46:A8:D5
Certificate issuer:       /CN=e626419c7a7cbb5a295a603e1e20ab588046a8d5
Certificate serial:       01A132222E591D56DBD0905BD95AE6554DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft
Manifest number:          46
Signing time:             Mon 12 Oct 2026 22:01:03 +0000
Manifest this update:     Mon 12 Oct 2026 22:01:03 +0000
Manifest next update:     Tue 13 Oct 2026 22:01:03 +0000
Files and hashes:         1: 5iZBnHp8u1opWmA-HiCrWIBGqNU.crl (hash: 8gNe2j2u7NyXA1cvyKmWtojjZgbbd5hJKAIs5uHXKv4=)
                          2: R_VE7I1x806EwoUXiVIa0NbmKcE.roa (hash: ZLm5fL0I7xiA37P8uAbGttpZNuJsPoY5cD/EgAdWn4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:22:2e:59:1d:56:db:d0:90:5b:d9:5a:e6:55:4d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e626419c7a7cbb5a295a603e1e20ab588046a8d5
        Validity
            Not Before: Oct 12 22:01:03 2026 GMT
            Not After : Oct 13 22:01:03 2026 GMT
        Subject: CN=86e6626b588cdfb05d9cf2967367137357fa5a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:b9:9b:da:08:ca:df:ea:d9:7b:e3:74:20:
                    6c:eb:44:98:65:f1:c4:2b:eb:f6:16:71:e7:26:09:
                    3e:89:ac:a2:b9:be:d9:d1:db:d2:b0:09:cd:23:bb:
                    d3:0e:66:17:08:d6:fd:bd:e5:e4:7b:e6:76:9c:2f:
                    17:cc:fb:20:f0:68:7f:59:ba:f3:27:d0:fe:cb:37:
                    0e:59:82:42:a5:2d:39:19:a3:0c:77:c8:8b:4d:b4:
                    2f:21:6b:55:17:f0:e9:d4:fb:b6:3a:e9:08:ed:2e:
                    47:c3:a3:5f:74:a1:dd:f1:f0:98:b1:4e:21:5c:e3:
                    c5:e2:6f:30:99:2f:ba:bd:53:92:51:cd:71:99:8c:
                    eb:47:f0:57:af:ed:d1:69:3d:b4:d5:05:8e:c0:cc:
                    f8:68:5d:72:9f:40:43:81:4e:15:fb:09:6c:5c:48:
                    8a:d5:25:cc:07:4c:b9:a9:ff:78:8a:eb:02:18:b5:
                    bb:23:bb:21:52:5d:5c:b1:c4:50:f6:86:7e:8e:c6:
                    30:24:83:92:4a:7e:1b:0c:38:d5:98:d7:a8:21:fd:
                    4a:ef:87:d3:7a:72:68:83:fc:c9:2d:ef:3c:0a:45:
                    c9:32:d6:d0:11:2a:b1:6c:fe:6a:74:5d:a2:3d:00:
                    c2:44:74:fc:4e:23:1a:51:29:4c:4b:fa:17:6b:03:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E6:62:6B:58:8C:DF:B0:5D:9C:F2:96:73:67:13:73:57:FA:5A:21
            X509v3 Authority Key Identifier:
                keyid:E6:26:41:9C:7A:7C:BB:5A:29:5A:60:3E:1E:20:AB:58:80:46:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:e9:4e:b1:b0:ba:62:4d:f8:1c:e2:b2:23:c5:2b:b4:1c:
         d6:75:a5:7a:68:81:5b:05:c1:ab:19:d4:cb:9c:dc:42:10:26:
         43:52:64:fb:b6:ac:c5:ef:49:19:6b:5f:2d:19:84:5a:d2:97:
         44:ea:bc:32:c3:73:d8:9c:b0:97:36:0c:4b:f1:3c:96:e6:cd:
         07:a8:e4:dc:25:e2:b8:8e:77:5f:05:b5:99:ab:ec:b9:2c:9c:
         06:bb:83:9e:72:53:06:57:59:97:dd:3e:dd:98:38:d6:47:52:
         c4:4f:f9:b6:32:a1:ef:1d:75:c3:3e:24:46:c7:2f:b6:bf:b3:
         1d:e8:d9:8d:93:3b:0a:4e:00:2f:17:bd:6e:5c:b3:40:a8:0e:
         ff:4a:09:0f:cf:5a:4c:65:b6:a2:88:60:39:90:55:43:08:05:
         05:9b:82:bf:13:37:36:e9:5d:d7:7d:c5:25:45:9a:88:6b:6e:
         0e:30:dd:b4:e3:10:b6:db:77:f6:47:69:59:7e:49:3c:ad:e7:
         74:a2:dd:39:3a:bb:85:1e:09:11:93:73:8f:12:fe:00:36:6f:
         34:4e:9d:1e:cf:61:c6:7f:41:78:dd:45:de:70:ae:08:a2:7a:
         04:84:64:2f:9c:f0:ec:da:93:d4:cb:ac:33:b7:c1:9c:af:43:
         17:9d:2b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:14:09 2026 by rpki-client