Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File:                     RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier:          5M8GA0zl/bW5kv9WOHnCV/dbpZQj83VVGbzZsCvtelM=
Subject key identifier:   B7:CC:1E:61:27:BE:06:C3:35:D2:1E:38:9B:48:BE:B5:4B:D7:9E:07
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer:       /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial:       01A11673F8435D02702D1D0A2831344E7E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number:          19E4
Signing time:             Wed 07 Oct 2026 13:01:01 +0000
Manifest this update:     Wed 07 Oct 2026 13:01:01 +0000
Manifest next update:     Thu 08 Oct 2026 13:01:01 +0000
Files and hashes:         1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=)
                          2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: J36v3DxA3m2E6cCoIUjy8WMKcWxOFi1/WoKT4UkgJ8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:73:f8:43:5d:02:70:2d:1d:0a:28:31:34:4e:7e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
        Validity
            Not Before: Oct  7 13:01:01 2026 GMT
            Not After : Oct  8 13:01:01 2026 GMT
        Subject: CN=b7cc1e6127be06c335d21e389b48beb54bd79e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:69:15:46:55:b1:40:5d:36:ff:bf:14:67:
                    66:71:04:e1:b7:75:29:3c:c4:50:d5:5b:2d:d3:6b:
                    62:1a:57:fa:46:0f:6d:f9:5f:7f:f4:d1:4b:40:0d:
                    1d:5e:e3:65:18:c4:0a:bd:4f:c7:d9:48:25:8e:75:
                    cc:92:ed:fe:85:87:36:a7:cf:1c:2b:c8:0b:95:5f:
                    dc:37:f7:ec:90:4e:ff:61:d2:e7:bf:02:51:a1:f4:
                    6e:3b:ab:37:0b:b5:79:6f:5d:8f:3a:e5:29:5e:d1:
                    6c:c9:04:ad:15:97:21:fb:a3:f4:82:19:eb:48:e1:
                    45:90:0b:8c:c9:4a:44:77:7a:e7:18:ff:fd:37:8d:
                    d2:3c:69:25:e5:c1:b0:4b:0f:7e:c2:91:f5:e7:0e:
                    a0:97:ba:20:c2:19:6d:08:73:c1:67:29:31:a8:bf:
                    16:b9:4a:71:80:dd:74:dc:4e:e8:16:51:ba:b2:2f:
                    58:f5:0b:ae:f2:a7:08:24:ab:4b:e3:1f:40:d0:9a:
                    9b:4f:4d:54:90:8e:4f:c1:23:4d:ba:6f:2e:43:91:
                    db:38:7d:eb:42:fc:5e:de:9e:d3:55:58:78:be:7d:
                    4c:33:9f:25:13:79:17:93:3b:60:1d:55:63:44:a1:
                    ee:33:cd:11:03:1c:9b:ce:a4:27:d2:61:5c:af:56:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CC:1E:61:27:BE:06:C3:35:D2:1E:38:9B:48:BE:B5:4B:D7:9E:07
            X509v3 Authority Key Identifier:
                keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a2:78:a0:c7:90:6a:d3:41:2f:3a:6a:3a:09:ab:dc:d0:f5:
         a5:b1:be:c2:92:0b:aa:79:f3:f5:80:06:82:71:a9:3f:27:b7:
         2c:0b:f2:43:12:a1:b1:e5:a2:a4:08:0c:c0:bf:3e:90:0b:7e:
         58:a7:ad:5f:5e:af:5c:a5:06:89:bc:9e:d2:04:50:5e:9f:f1:
         c0:df:ee:e2:39:e0:d1:f8:c7:a5:18:88:69:ff:2f:88:f0:4a:
         03:e6:18:9f:ba:d1:76:b0:8b:c3:95:71:73:db:9e:e6:84:a6:
         3d:1a:93:79:98:b8:91:54:9f:3e:3d:f5:7a:f5:1c:a6:84:05:
         54:bd:b4:1d:1f:07:56:71:8a:be:71:b4:dd:da:0d:55:41:13:
         27:c5:e4:56:cf:85:e8:61:08:1d:3a:0a:eb:0e:9a:39:07:fd:
         39:89:df:1f:56:4e:46:46:eb:4f:c5:e9:da:cd:be:72:31:d4:
         c7:bf:08:1e:d9:9a:ee:01:0e:1d:17:3b:7a:09:08:0e:06:69:
         8e:33:1d:b2:cc:f6:a6:e5:aa:d6:6f:33:83:76:cd:24:bb:3c:
         c6:1d:3d:35:b5:01:6c:05:dc:1b:17:17:b4:3c:56:73:d3:88:
         79:bc:c1:79:3e:2a:e6:a1:86:a7:84:44:2a:8b:d2:92:f3:3a:
         ce:64:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:39:48 2026 by rpki-client