Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File:                     peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier:          VOjV/UJ+i55B+qIRzuR20+gQc7DZ61rIGosIWsA4Ym4=
Subject key identifier:   03:F2:21:41:A1:6C:59:AE:DB:C3:D0:5E:BF:C9:38:79:2B:42:FC:B5
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer:       /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial:       01A13CA583A7110538D4ABD8608FF5CE65D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number:          1AA6
Signing time:             Wed 14 Oct 2026 23:00:42 +0000
Manifest this update:     Wed 14 Oct 2026 23:00:42 +0000
Manifest next update:     Thu 15 Oct 2026 23:00:42 +0000
Files and hashes:         1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
                          2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: rHbKZ9LswHzx1+s1QtkgHfqOhVMEdhUedz6vd9nufy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:a5:83:a7:11:05:38:d4:ab:d8:60:8f:f5:ce:65:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
        Validity
            Not Before: Oct 14 23:00:42 2026 GMT
            Not After : Oct 15 23:00:42 2026 GMT
        Subject: CN=03f22141a16c59aedbc3d05ebfc938792b42fcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:1f:e9:1e:bf:93:c7:29:52:7e:20:78:7a:
                    c4:6d:bc:aa:af:12:b4:c4:ef:61:60:01:2f:ff:b3:
                    95:cf:eb:2b:86:bf:89:04:60:fc:b4:32:d4:15:e7:
                    1a:95:2c:88:4b:de:4d:5e:79:38:9a:e4:57:ee:32:
                    f7:d2:a4:e3:a0:7c:2f:0b:9e:c2:6e:bd:48:bd:56:
                    a7:b5:f1:3a:7f:9d:99:95:b0:05:87:e7:df:62:30:
                    5d:03:bb:a0:13:88:dc:72:33:93:03:eb:3e:60:e3:
                    b9:13:09:d7:6d:3d:fb:bb:af:bb:63:0c:97:97:cf:
                    17:1e:63:c8:3f:84:b9:fe:86:6e:42:77:47:81:35:
                    c0:07:1b:12:92:98:5c:7f:c8:d5:1c:51:44:59:93:
                    6b:99:3c:c8:e0:6c:6d:9b:c9:ed:c0:7f:0a:26:58:
                    7a:b6:ec:ce:50:fc:5e:b6:cb:87:38:b6:f0:39:ac:
                    d2:5c:42:57:99:61:08:fc:85:54:51:a5:1d:c4:ab:
                    02:dc:28:60:a9:d8:73:3d:7f:ba:ff:69:b2:81:85:
                    72:1f:e2:42:34:c3:af:f5:1b:63:b5:6b:0b:a7:92:
                    ce:29:f0:f9:b7:aa:9a:7d:a4:36:87:f2:67:0b:4f:
                    ae:88:87:ae:80:fd:fb:50:36:22:0c:26:d3:03:37:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:21:41:A1:6C:59:AE:DB:C3:D0:5E:BF:C9:38:79:2B:42:FC:B5
            X509v3 Authority Key Identifier:
                keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:98:ef:49:bf:71:98:6d:7d:fb:2c:0a:ac:86:9c:07:df:
         83:3f:8e:6f:cd:fb:ec:2e:2c:8f:9b:c4:40:dd:d3:40:90:54:
         34:8a:0c:9c:e8:31:8b:ce:96:21:a1:8c:52:f0:66:32:31:41:
         e4:67:11:58:30:39:d9:c8:8d:2b:ba:58:1b:a4:fb:c9:bd:13:
         26:d7:dc:b2:72:fe:c6:b1:35:ba:a9:fb:80:17:3d:82:90:79:
         47:a5:ec:cf:77:36:31:80:a7:8b:89:9a:ed:d6:c7:3a:fa:c3:
         ee:21:bc:60:9c:1b:17:40:4d:4d:2b:b1:62:a9:db:f8:61:c3:
         4f:47:8f:b7:c2:18:4c:fc:d6:87:09:6f:af:f0:02:8f:6d:75:
         c2:2b:a3:00:07:fb:41:d8:5d:7a:39:c0:5a:ed:6d:0a:e0:d3:
         39:c4:6f:4f:ec:94:b3:14:b5:4f:f8:56:bf:88:3d:60:fd:db:
         85:d7:96:10:66:11:99:fa:e5:5a:f6:82:b7:6d:29:de:da:69:
         3f:86:c1:6a:7b:e8:88:53:d5:12:f8:4e:60:8a:9c:28:24:5d:
         82:7d:06:fd:d7:36:0a:e3:a8:de:30:5d:64:f5:6e:52:68:d9:
         42:57:26:43:39:29:3e:42:a3:79:da:7d:27:ea:b1:bb:9a:f1:
         74:44:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:09:38 2026 by rpki-client