Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File:                     5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier:          N2xdw8jesKMuUepxsLr4OVVlghWCecRhlT4Wm6lBvz0=
Subject key identifier:   84:B1:7E:72:BC:A2:F6:D9:F3:49:3B:35:2B:DA:5F:87:63:0A:A8:95
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer:       /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial:       01A13334F6AA6E6A1765580632F3CAC985DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number:          082B
Signing time:             Tue 13 Oct 2026 03:01:11 +0000
Manifest this update:     Tue 13 Oct 2026 03:01:11 +0000
Manifest next update:     Wed 14 Oct 2026 03:01:11 +0000
Files and hashes:         1: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: biRe2K8+d9jHKST69+i49DGrxvSmebs0+GBk7Lzr8Lw=)
                          2: y4_u6MP25DDbYftrjo0-BN4CqP0.roa (hash: P3A69WpiF0MyDiVo1cBJGQBqn5Zv2zHMeyZO0MmbAb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:34:f6:aa:6e:6a:17:65:58:06:32:f3:ca:c9:85:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
        Validity
            Not Before: Oct 13 03:01:11 2026 GMT
            Not After : Oct 14 03:01:11 2026 GMT
        Subject: CN=84b17e72bca2f6d9f3493b352bda5f87630aa895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:51:41:be:44:33:cc:01:eb:5b:c2:db:2a:
                    4c:07:26:68:df:bd:79:5b:3e:c8:90:88:92:38:97:
                    11:f1:98:e1:9f:e0:5f:4d:de:1c:96:c7:e6:10:2d:
                    29:df:1a:8b:ee:7e:c0:6e:bf:3c:40:59:75:7d:ed:
                    0f:dc:db:72:25:df:f2:b4:8e:d8:7e:c9:3d:64:f0:
                    94:15:77:26:13:33:35:9d:f9:48:38:d7:3c:61:33:
                    20:47:86:60:26:72:a7:a5:3b:b8:55:9e:7a:51:b3:
                    06:e4:f7:72:ff:a9:d5:50:0c:2e:94:7e:09:a9:61:
                    7d:ca:ee:cb:41:57:84:91:a4:79:e6:84:21:53:ac:
                    b3:01:f2:57:db:98:53:5e:43:b3:63:28:d0:93:a9:
                    c1:3a:f5:c4:4e:cb:a9:49:cc:0e:7e:4b:ee:78:e4:
                    1a:b0:1b:c1:33:7b:ec:c9:8e:a2:2f:ec:e1:e4:68:
                    b6:13:94:7c:41:5b:3b:e1:4f:97:80:f7:3a:b2:52:
                    08:b5:7b:3b:d2:20:46:ce:47:2c:ba:13:b1:06:e3:
                    96:ba:6a:30:63:d1:ea:98:e8:d3:49:eb:02:e8:1f:
                    f1:14:7c:4e:22:c7:15:84:29:fb:c6:2b:2e:30:dc:
                    b5:f2:1f:26:21:ad:44:d6:13:a5:50:6c:0d:ca:e2:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:7E:72:BC:A2:F6:D9:F3:49:3B:35:2B:DA:5F:87:63:0A:A8:95
            X509v3 Authority Key Identifier:
                keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:19:29:e3:b9:54:7f:cb:fb:d7:1e:58:aa:15:3b:d7:15:02:
         4e:6f:8b:30:24:b0:d5:77:c6:52:eb:82:60:52:65:5c:08:1d:
         99:10:77:2d:f1:fd:bd:b8:47:30:db:01:6f:bc:40:bf:12:dd:
         35:00:ec:61:0c:ec:16:a9:5a:07:d0:6b:60:14:04:45:ef:f4:
         45:d5:a6:e9:93:2e:96:f2:a8:94:30:f0:31:e1:3a:24:9e:29:
         cd:46:a0:e6:5c:67:12:a0:41:d5:c3:d3:4b:6d:90:ea:86:b0:
         d7:b0:9a:09:ea:dd:c6:34:b4:ef:fd:dc:a5:02:c1:18:f1:4c:
         6e:e4:1c:c1:06:5b:a5:f8:1d:44:08:5c:67:32:24:fc:2d:8e:
         20:8d:0f:96:c1:de:f4:08:f9:e2:6f:fe:1d:d9:c2:bb:9c:28:
         d1:1c:26:36:f4:73:e1:af:d8:18:dc:4e:49:c4:51:c4:8e:0d:
         13:39:a2:08:3c:fd:5c:90:0c:98:0b:98:5a:99:0f:2c:ed:01:
         1c:46:e4:fb:70:f2:9a:3a:1e:1f:fb:9d:70:66:80:6e:ef:e0:
         c2:1a:0c:cb:9b:0f:5d:c9:23:a1:93:d0:f4:23:6b:7f:dc:d3:
         7d:33:29:76:78:e3:c0:f0:0e:d6:d8:eb:ff:4e:6a:59:bb:76:
         04:65:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:14:44 2026 by rpki-client