Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File:                     5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier:          EcZVOxB4CJVegZmnPIwlywNUipe4l9yeDajh/UEWBuQ=
Subject key identifier:   6B:7C:58:37:10:B1:1C:0C:7F:E6:FA:85:F5:03:95:05:18:8D:95:78
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer:       /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial:       01A13146414A7734F8F2D973563CEFC95AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number:          15F3
Signing time:             Mon 12 Oct 2026 18:00:50 +0000
Manifest this update:     Mon 12 Oct 2026 18:00:50 +0000
Manifest next update:     Tue 13 Oct 2026 18:00:50 +0000
Files and hashes:         1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: inYhAxD9kA6uhnUH5FYggfGD1tiBabChSYqLMDcp+ew=)
                          2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:46:41:4a:77:34:f8:f2:d9:73:56:3c:ef:c9:5a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
        Validity
            Not Before: Oct 12 18:00:50 2026 GMT
            Not After : Oct 13 18:00:50 2026 GMT
        Subject: CN=6b7c583710b11c0c7fe6fa85f5039505188d9578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:b8:db:9a:9d:d5:d6:4d:37:a5:e9:2f:98:
                    cf:40:a6:1e:14:d6:f1:85:9b:3a:c3:01:bc:df:50:
                    5e:6e:8c:f3:d8:26:67:8b:94:85:bb:a2:36:80:ab:
                    64:82:c5:d2:53:3d:af:3b:1d:9e:34:b5:38:b1:a3:
                    cc:fb:af:74:05:c2:aa:8d:23:9f:ee:4e:01:19:fe:
                    ed:00:1a:75:53:53:98:b4:2c:e2:e5:a7:62:a2:08:
                    5c:85:40:41:da:19:79:30:54:d3:be:3f:f6:ad:68:
                    4b:55:8b:35:9e:c9:d1:8b:41:d9:74:43:66:8f:fb:
                    d6:82:72:25:14:91:53:d9:d8:0a:ec:4d:ed:b6:02:
                    1b:6c:6f:d7:52:ad:17:96:12:1d:5f:fd:91:2e:f7:
                    f3:f0:db:fe:3b:80:50:82:50:fa:a9:e0:86:11:6d:
                    77:8d:ac:2a:99:c7:e1:6c:93:09:cb:cd:3f:ed:66:
                    b6:35:75:9c:dc:0a:0a:1b:9b:67:79:ca:74:33:e0:
                    8f:2a:a5:f1:6f:0a:8b:03:aa:63:c6:8d:eb:3a:7f:
                    41:03:5b:be:f2:8d:45:43:31:44:5d:79:65:7e:e9:
                    df:49:c9:8e:c8:bc:3d:f6:7e:1a:da:38:5a:ac:44:
                    be:38:9a:44:31:35:0b:2f:12:5f:b0:c9:06:a3:3e:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7C:58:37:10:B1:1C:0C:7F:E6:FA:85:F5:03:95:05:18:8D:95:78
            X509v3 Authority Key Identifier:
                keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2b:49:4b:ce:5d:4a:61:92:6e:be:85:38:23:42:8c:6e:3f:
         fd:5d:32:ee:2e:fb:a5:32:8a:46:af:29:a6:7b:87:67:e4:06:
         70:37:28:34:e4:74:81:21:0e:f2:8c:f8:67:4e:ce:fd:62:c8:
         c6:b5:3c:fa:ee:2d:1a:8e:7b:dd:14:91:c6:17:b1:aa:8c:4d:
         8e:7d:e3:e4:f2:61:f5:30:0a:0a:01:67:eb:4a:7f:ea:3e:72:
         0a:02:03:da:80:72:e8:cc:21:3d:97:44:fc:17:79:11:6b:e9:
         d8:ce:99:fc:21:34:0d:ce:20:18:89:b7:d1:f3:b4:02:38:6a:
         fd:ea:3e:b2:2e:a2:53:62:97:b8:4a:93:43:87:90:7a:79:97:
         07:c5:e2:26:b5:29:1f:60:62:14:75:e3:b4:4b:c8:a6:f0:81:
         39:d3:9e:c9:85:30:65:5e:c6:83:56:d7:ee:52:82:75:3d:d3:
         60:d7:c7:ee:b0:0d:31:f9:32:eb:e0:ba:da:b8:c4:be:21:d0:
         7c:a4:e9:11:b6:72:78:04:49:76:fa:84:8e:f6:91:15:c4:ac:
         29:0d:d1:a0:3c:cd:34:8b:d4:ca:6d:1b:22:94:31:b0:08:a5:
         0f:cc:13:26:1f:bf:01:cd:c6:99:d5:40:10:5c:c8:9f:e6:ac:
         d1:73:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:12:35 2026 by rpki-client