Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File:                     AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier:          g7kNa9sEBwquAvBYM2z5LofzQ+Uvk12klEslJth+VEo=
Subject key identifier:   F2:64:EB:27:A9:80:D8:26:44:B1:3E:D9:23:0E:2B:AA:4C:18:E1:D0
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer:       /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial:       01A1483C555C30088B8CF1FA23CB2606D4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number:          0682
Signing time:             Sat 17 Oct 2026 05:01:15 +0000
Manifest this update:     Sat 17 Oct 2026 05:01:15 +0000
Manifest next update:     Sun 18 Oct 2026 05:01:15 +0000
Files and hashes:         1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: /4c2otplkxfCY29RquZBAxAnGdSX4JIDXjccxZcr7YA=)
                          2: CmiC5mJyQYGGKAJggm-od_rF7aY.roa (hash: VDuSSA+oUsQz/2iqadrnhGgyrgM5bD5FatxlCOVAvTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:3c:55:5c:30:08:8b:8c:f1:fa:23:cb:26:06:d4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030b00e6074502e6538391feab18358281a3279b
        Validity
            Not Before: Oct 17 05:01:15 2026 GMT
            Not After : Oct 18 05:01:15 2026 GMT
        Subject: CN=f264eb27a980d82644b13ed9230e2baa4c18e1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:4d:27:ea:e8:bb:6f:6a:71:25:f9:8f:1c:
                    ba:3a:03:7e:3e:9a:6e:0a:eb:0b:a7:82:75:df:71:
                    a6:77:fc:16:d9:d1:ce:1f:79:f0:e0:17:df:de:ff:
                    da:cb:db:41:12:b7:3c:1a:0b:a9:b1:60:5a:03:85:
                    bf:9d:0f:6a:ec:4a:3e:c0:8e:a7:ec:a8:07:3f:7b:
                    99:2c:fb:fa:20:3d:03:b9:0b:ca:24:34:9b:2a:29:
                    72:01:df:09:93:07:da:45:b4:e4:f2:27:20:41:ca:
                    47:cf:20:2c:6b:f8:40:e5:1f:dd:88:b4:2e:f3:51:
                    4b:fc:93:78:bb:6e:98:dc:82:7b:cd:a2:4d:15:a4:
                    62:31:e8:ba:6e:dc:43:40:55:1e:85:ff:8a:f0:cd:
                    f6:eb:32:1e:57:09:0b:aa:d1:a4:99:59:50:0e:23:
                    3d:d2:3d:51:d7:34:e5:61:3f:6d:83:63:3f:e8:99:
                    07:18:44:ea:38:d8:f6:80:4d:0d:af:98:52:1e:ff:
                    3d:e0:a1:30:98:d9:b3:e4:9f:33:82:81:29:1f:ec:
                    8c:68:0a:11:bd:ba:c3:b7:d6:04:be:96:7c:cd:d5:
                    54:79:66:ae:fd:df:3b:89:86:8f:e5:9b:eb:ef:ff:
                    92:fe:ae:e3:9c:de:23:75:70:91:98:91:8e:25:59:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:64:EB:27:A9:80:D8:26:44:B1:3E:D9:23:0E:2B:AA:4C:18:E1:D0
            X509v3 Authority Key Identifier:
                keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:11:02:d8:31:61:6f:5e:0d:67:9f:7b:ba:3b:ec:a3:22:
         78:f0:f6:28:6b:9c:c6:8b:fb:e8:8e:b1:b5:c4:51:4a:00:1f:
         7d:93:91:66:10:6e:fd:60:8a:0e:70:46:b5:c6:97:0d:51:db:
         ef:59:c9:73:0a:da:57:e4:fc:07:86:e1:30:29:5d:b4:e3:f6:
         37:3f:a5:55:29:ee:23:94:64:7b:24:22:f2:cd:0e:4f:48:d8:
         cf:35:1c:7d:4f:42:27:04:a8:10:83:c8:12:46:b4:9a:02:3e:
         e0:e3:e2:19:9d:6c:51:e6:06:3c:50:7e:c9:1f:b4:45:4d:43:
         93:c8:56:13:07:b0:11:7c:64:87:95:2c:b8:9e:7c:02:45:64:
         e1:75:cc:05:da:83:05:35:f1:f2:6b:14:94:34:9f:5e:e8:ae:
         e6:b4:85:85:fa:9e:fe:8f:db:a4:9b:f5:72:eb:ea:83:7d:7e:
         bf:48:5e:5b:ef:4c:8c:ba:da:ed:48:36:66:54:b4:3c:a8:26:
         56:b4:04:ed:de:fc:b1:ce:aa:a9:60:8e:bb:21:80:4b:bd:a0:
         f5:17:f6:2e:b0:01:85:6a:c1:1e:0c:67:a0:1e:9b:64:31:58:
         b0:1b:cc:7c:e8:c6:37:56:60:38:98:b1:6c:63:c2:ed:65:d5:
         0f:98:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:39:53 2026 by rpki-client