Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier:          AUMkdLSzl/OtoNSvG6h/PrxRTFMtxY8E/eFKxiBM5yI=
Subject key identifier:   DB:FD:18:A9:67:90:49:BB:E0:11:EB:D6:04:40:C0:78:2A:0B:BD:1B
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer:       /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial:       01A1DD951CC1E01E475D51947705BE2188AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number:          110D
Signing time:             Sun 15 Nov 2026 05:01:39 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:39 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:39 +0000
Files and hashes:         1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: HVHiBNwm1OaSa+i68dUbJDbLdufTfkOt1fS2I/KWKIk=)
                          2: KdkSplDy4QjMpE4fLCxjhJLFG-A.roa (hash: GJjKbZNtY1x/kWqwNINR2VUda7Jb8+5oqTMBWfwhVbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:95:1c:c1:e0:1e:47:5d:51:94:77:05:be:21:88:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Validity
            Not Before: Nov 15 05:01:39 2026 GMT
            Not After : Nov 16 05:01:39 2026 GMT
        Subject: CN=dbfd18a9679049bbe011ebd60440c0782a0bbd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:22:0b:31:ae:d5:5d:ec:bc:6c:26:3b:63:
                    2c:5b:47:18:e8:9d:5c:a7:ea:65:74:35:4f:34:3d:
                    f2:53:0f:b2:b5:8e:76:f0:97:75:a6:be:0a:3e:4e:
                    82:c1:98:4f:d9:e2:8d:5a:b8:f4:b6:32:63:ff:61:
                    db:55:ce:42:b4:ed:da:a8:9c:36:af:ce:f6:4d:83:
                    ed:2f:11:04:57:4c:f2:52:a9:ea:fb:00:a8:68:9f:
                    9c:c5:e9:15:97:6a:ef:1c:bd:19:cc:55:60:8c:ef:
                    7e:dc:f2:3a:fd:9e:d4:21:d5:56:92:ac:60:6e:69:
                    ec:05:31:c8:b1:c9:eb:99:b7:44:d9:5b:c9:66:28:
                    03:4c:aa:ec:f6:75:3a:3d:3a:3f:d4:0a:06:44:cf:
                    55:37:26:b2:49:e0:cc:a4:87:20:1c:0d:00:b6:31:
                    8d:7e:83:73:44:88:1b:56:a1:7e:09:4a:7e:b4:5e:
                    e1:67:c5:5d:00:2e:59:c9:5b:0f:cf:13:ed:22:a5:
                    94:9e:2b:3f:f3:8d:f1:d8:a7:4f:49:62:f5:38:27:
                    11:e8:63:c4:14:16:3b:68:2a:47:f7:ec:d9:42:e3:
                    a2:e1:14:70:b8:e5:a3:20:53:d4:27:25:55:20:42:
                    2a:45:9f:e3:72:8c:00:92:e1:00:4e:fe:98:05:dd:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FD:18:A9:67:90:49:BB:E0:11:EB:D6:04:40:C0:78:2A:0B:BD:1B
            X509v3 Authority Key Identifier:
                keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8e:0b:e8:dc:8f:f3:bd:b5:d8:bc:7e:75:57:31:31:45:c2:
         22:b4:9b:30:55:e9:f5:93:e9:62:8c:2b:ca:46:0e:aa:89:34:
         5b:18:d8:a5:d4:5a:a4:2a:2b:d0:cf:0e:8f:ba:5f:80:6e:d9:
         80:18:4f:9b:73:23:a1:9c:a8:42:93:45:9d:83:c1:40:ca:ac:
         ab:60:b7:f2:eb:01:e2:b0:fd:7a:5b:a6:73:e8:2c:fb:30:93:
         d2:0f:c7:51:b1:6b:ba:f2:ad:fa:24:31:9d:4b:80:ab:68:b8:
         b5:7b:e6:98:a3:b2:e9:46:12:f0:d7:92:b6:a9:1f:32:9d:9c:
         e9:3a:37:e0:48:fa:f1:2b:86:9d:1f:73:fc:d1:a1:20:0f:8c:
         25:d3:02:4b:4a:3d:95:d0:4d:69:86:7d:aa:62:7d:bf:90:3f:
         4e:fe:62:aa:d6:02:5b:f4:7b:8f:50:65:11:b6:4f:a8:09:48:
         f2:ac:78:e3:f8:25:0f:0a:a4:bc:8c:4f:df:44:7f:bd:27:2d:
         3b:a6:0e:f6:47:fe:80:79:e6:1d:34:24:c1:b4:3c:51:b9:27:
         aa:1d:e3:2a:0d:51:44:4c:16:4f:cb:ad:60:73:e5:d3:8d:21:
         c0:e8:f3:56:2c:c9:56:45:31:8d:5f:d6:8a:8f:26:22:26:d5:
         44:31:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:19:25 2026 by rpki-client