Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier:          sc0Kwsg6Kt3Og8pZa1pPblmMmy06u6W+L/8GsqSFB/0=
Subject key identifier:   ED:A6:7B:3C:B9:DA:4F:5B:85:6F:D7:29:1D:1C:83:6D:4F:F7:54:DC
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer:       /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial:       01A107A63F863AF7E8043F7E8561B41094F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number:          14A3
Signing time:             Sun 04 Oct 2026 16:01:38 +0000
Manifest this update:     Sun 04 Oct 2026 16:01:38 +0000
Manifest next update:     Mon 05 Oct 2026 16:01:38 +0000
Files and hashes:         1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: 9wGXXiQwWFM9COa2a/jxMiDUaImxreJMwKL6AAVjDGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:a6:3f:86:3a:f7:e8:04:3f:7e:85:61:b4:10:94:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Validity
            Not Before: Oct  4 16:01:38 2026 GMT
            Not After : Oct  5 16:01:38 2026 GMT
        Subject: CN=eda67b3cb9da4f5b856fd7291d1c836d4ff754dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:fc:7e:4a:83:5f:f4:00:bf:d5:33:45:83:
                    34:a4:43:f1:d9:eb:44:9a:d1:d7:e9:a0:1e:96:d0:
                    65:a4:34:a2:e2:45:53:c2:5b:ce:c8:6d:6c:84:96:
                    fd:e4:18:d6:aa:01:24:00:a1:5d:2c:5b:4f:6f:5a:
                    cf:c9:4b:76:9f:46:86:04:a9:68:8b:18:1c:a8:a2:
                    b9:23:12:e0:bd:2f:f4:17:ff:2c:51:9f:f4:a1:32:
                    6d:12:a2:ab:6c:5e:8f:50:35:c8:ae:f9:14:40:4b:
                    64:37:73:33:f7:15:a3:79:3f:6c:4a:7b:32:64:2a:
                    59:93:5f:0c:23:4e:8c:e9:e7:64:20:ae:21:37:48:
                    8e:e7:f3:e4:41:57:e7:46:53:c0:e5:f0:1b:f1:74:
                    bd:8d:24:91:23:12:f4:eb:2d:38:57:ed:a2:54:89:
                    a1:4e:08:ed:c1:5b:ad:8d:90:dd:05:3f:06:5a:25:
                    78:a9:10:58:1b:d5:a6:a9:ca:e5:90:0b:3e:6e:92:
                    fa:bd:10:9f:5f:8c:03:cd:d6:fe:a2:17:3f:8a:d7:
                    e0:e2:19:1b:92:f8:81:65:58:6f:d2:8b:c1:d0:e4:
                    1c:cc:1a:05:d3:54:53:55:67:21:16:69:37:33:21:
                    25:22:50:65:b1:4b:67:d8:5a:d1:a5:56:9a:9b:28:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A6:7B:3C:B9:DA:4F:5B:85:6F:D7:29:1D:1C:83:6D:4F:F7:54:DC
            X509v3 Authority Key Identifier:
                keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f3:63:08:0a:96:a4:33:f3:ef:36:b3:82:1a:53:d0:ef:77:
         03:67:04:c7:36:36:2d:13:46:aa:09:8d:c6:b0:7d:9c:77:dd:
         b0:44:bf:6d:9d:5c:ca:f4:e2:f3:8c:66:fb:c7:ea:1f:c6:2f:
         a9:cd:c6:42:a2:e5:6a:df:7a:b8:eb:4f:5a:aa:35:dd:ed:29:
         4d:18:84:04:2f:cd:b4:13:3a:67:72:66:30:98:41:0d:e6:43:
         93:ee:a0:5e:05:98:69:cb:1a:81:23:a7:ee:f6:2a:5d:9c:d8:
         dc:48:ac:1e:93:e7:fb:e7:7b:d3:12:6f:7f:0b:45:df:7d:79:
         32:3a:ea:25:d1:a1:2d:ae:4b:b6:fd:a3:4f:6d:ca:b5:ea:8e:
         b4:cc:df:3b:c5:ea:ef:fb:f5:d5:6c:f3:43:32:79:08:fe:da:
         4c:36:c6:8a:9e:96:bc:f1:a2:7c:a8:19:ad:2f:e2:6b:7c:70:
         e8:2f:f0:99:12:f3:b0:4f:5f:b5:ae:b1:fa:ad:3f:d7:8d:37:
         7f:2d:32:c9:0e:ff:22:2d:a0:ff:8c:aa:ca:1d:c5:30:22:ed:
         77:05:54:28:d8:25:7f:a2:83:b7:28:0a:3d:1f:e0:54:f1:35:
         9f:03:a9:8a:0c:e4:7a:c9:f9:97:c8:53:12:5b:25:8c:6f:50:
         a7:89:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:14:57 2026 by rpki-client