Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.mft
File:                     ek91buW9Qj6ekV9WvYenlhtYqTc.mft (raw, json)
Hash identifier:          Bo/HolCkTTSmqwN9cc8wXmxvhOME4YXdkdgAa7pdoBE=
Subject key identifier:   5D:D4:63:7A:62:6B:AB:17:3B:5C:33:95:F2:5A:EA:6D:45:C1:C8:89
Authority key identifier: 7A:4F:75:6E:E5:BD:42:3E:9E:91:5F:56:BD:87:A7:96:1B:58:A9:37
Certificate issuer:       /CN=7a4f756ee5bd423e9e915f56bd87a7961b58a937
Certificate serial:       01A1347F4C36B581D8088604EB0E3F359726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ek91buW9Qj6ekV9WvYenlhtYqTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.mft
Manifest number:          0119
Signing time:             Tue 13 Oct 2026 09:02:00 +0000
Manifest this update:     Tue 13 Oct 2026 09:02:00 +0000
Manifest next update:     Wed 14 Oct 2026 09:02:00 +0000
Files and hashes:         1: ek91buW9Qj6ekV9WvYenlhtYqTc.crl (hash: qJ6p/BFED7oKdUOXWHv6ZEywOSioCSWQo4Ed8uzBJU8=)
                          2: r3LCaibtpFjKCjqwMysqd2EY7CE.roa (hash: n3FX58nAP4iAPo8D51kxLs4kCK4nV7os6K467cBupbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ek91buW9Qj6ekV9WvYenlhtYqTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:7f:4c:36:b5:81:d8:08:86:04:eb:0e:3f:35:97:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a4f756ee5bd423e9e915f56bd87a7961b58a937
        Validity
            Not Before: Oct 13 09:02:00 2026 GMT
            Not After : Oct 14 09:02:00 2026 GMT
        Subject: CN=5dd4637a626bab173b5c3395f25aea6d45c1c889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:07:3c:9d:7f:cf:31:12:00:21:2e:fb:f0:
                    98:88:c1:6f:70:5f:20:c6:26:13:56:18:bd:8f:cc:
                    42:b0:f9:4d:98:b3:60:4c:fa:14:f7:bb:db:29:f3:
                    9f:cb:5c:76:10:75:98:ad:07:2f:c0:86:56:4b:df:
                    3c:40:fd:e0:07:13:6b:92:b3:47:73:90:c1:72:95:
                    03:41:38:07:c1:42:51:85:4f:4c:95:93:f8:0b:93:
                    3f:ac:5a:d8:24:4e:26:7d:67:ad:12:4c:a2:31:6e:
                    b5:88:e4:39:e6:d5:f8:e7:93:5c:ae:65:54:a2:5a:
                    06:d8:71:98:28:4e:f4:a0:23:8d:c5:39:79:9c:7d:
                    0d:51:32:55:3d:bf:bd:ef:54:e2:1f:bb:d1:93:8f:
                    bd:f5:a9:bf:df:22:12:de:88:cc:69:6c:dd:10:17:
                    5f:c9:ed:ba:21:f2:63:d8:79:53:67:80:e3:f7:83:
                    ed:63:ab:62:98:72:55:7e:f5:0b:b9:f9:81:0f:c9:
                    6b:62:a6:56:49:e7:c1:c0:40:07:66:b5:cb:30:29:
                    2c:38:c0:85:06:19:ea:30:fc:b9:5e:ed:74:50:a7:
                    44:30:1b:c5:da:ff:1f:36:70:59:2d:09:95:e9:87:
                    01:d3:70:df:10:45:58:39:7b:06:e7:97:f8:6f:8e:
                    8e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D4:63:7A:62:6B:AB:17:3B:5C:33:95:F2:5A:EA:6D:45:C1:C8:89
            X509v3 Authority Key Identifier:
                keyid:7A:4F:75:6E:E5:BD:42:3E:9E:91:5F:56:BD:87:A7:96:1B:58:A9:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ek91buW9Qj6ekV9WvYenlhtYqTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:a8:35:54:d5:44:61:75:17:97:0b:b5:90:1a:64:65:9b:
         8d:2d:d5:3a:9c:bb:e7:08:16:02:cb:89:fd:43:e9:fd:ab:6f:
         97:54:24:a1:09:1d:20:26:8c:7b:de:0d:c0:6f:4e:e9:d2:3e:
         f7:c1:76:ec:bf:0b:b3:99:cb:cb:80:eb:a2:01:16:fe:b9:86:
         78:cf:e5:5c:74:d3:bb:83:23:48:52:70:bd:1b:b3:12:a0:17:
         92:14:0f:00:25:20:ee:92:98:c7:6a:ee:b6:0e:11:ef:d6:81:
         2b:33:f1:ea:d0:89:82:60:de:17:fe:b6:39:e8:6c:ad:af:d4:
         87:aa:37:ef:14:87:6f:3f:da:d4:24:d9:77:75:d9:f7:9c:dc:
         72:ed:32:5e:59:83:86:36:6e:50:9f:75:ab:71:e6:72:d8:81:
         6a:ab:17:cc:d7:ac:15:30:b0:c7:88:4d:f1:f0:a7:64:8d:46:
         95:e2:56:57:6b:dd:c1:e5:a5:70:71:78:2c:33:7f:e5:b2:fa:
         ba:79:94:4f:66:b0:20:b3:0e:c1:c0:23:09:37:b4:4a:6d:e9:
         a5:16:e4:57:4f:88:c9:f3:2e:c3:7d:88:a7:df:7a:f4:0d:d0:
         2f:00:73:bc:32:b8:6e:0b:bc:f1:ec:81:a2:22:c8:00:3b:41:
         c5:cd:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:03:11 2026 by rpki-client