Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
File:                     5dasEgU_FIaz3nfxyHC1a538ORM.mft (raw, json)
Hash identifier:          Vhk9zswkxPC3ZU4eYnHCh3IML86bpergtH1zYmIWlZM=
Subject key identifier:   93:EE:DD:4C:AD:73:9C:3D:86:EA:F0:F4:87:20:DF:CC:53:0C:F9:7E
Authority key identifier: E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13
Certificate issuer:       /CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
Certificate serial:       01A1DF4C79E4F9872316A1E3C19FAA92E8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
Manifest number:          1AF5
Signing time:             Sun 15 Nov 2026 13:01:33 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:33 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:33 +0000
Files and hashes:         1: 1EN7TRD-aLVl5lkSCjm_nVcC3UU.roa (hash: MtswjThVcbS9+sptcfq3+1p1Rfy1WmBysgNNW6G/HTs=)
                          2: 5dasEgU_FIaz3nfxyHC1a538ORM.crl (hash: iYGmSLlv3oY7yjy2c1/mxMBAUZDjH5OJ9K1ruqb45c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:79:e4:f9:87:23:16:a1:e3:c1:9f:aa:92:e8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
        Validity
            Not Before: Nov 15 13:01:33 2026 GMT
            Not After : Nov 16 13:01:33 2026 GMT
        Subject: CN=93eedd4cad739c3d86eaf0f48720dfcc530cf97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:44:ce:2f:75:1a:af:be:ca:7f:92:27:6e:
                    95:41:01:dd:a8:e2:2e:bd:a4:90:db:e2:cc:96:31:
                    75:ae:b9:c5:66:0b:ae:ca:e2:30:63:6d:06:b5:ac:
                    da:a7:cf:b6:9b:45:62:35:e4:c5:f3:c0:46:41:e3:
                    80:d0:cc:a6:45:95:2f:b7:5c:47:4d:dd:50:8d:19:
                    b3:42:b0:ba:f4:5e:c6:22:37:b7:f8:a7:73:c3:75:
                    02:1f:4e:df:fd:00:4c:ff:96:03:bc:66:ca:69:e2:
                    4c:e5:6d:ae:45:65:7c:09:65:76:08:7f:7c:72:d0:
                    ca:59:09:f1:c0:d8:21:70:f6:7b:52:83:dc:2a:f4:
                    13:f4:ed:f1:70:9a:69:4b:b2:63:01:8b:e5:9f:5f:
                    cb:13:db:dd:e2:87:07:37:87:42:25:31:aa:37:b1:
                    74:1a:d7:5f:c4:c4:91:46:90:5a:33:97:20:44:85:
                    e3:c1:c6:f7:13:bb:3e:52:d9:43:72:37:0d:8a:00:
                    18:73:1a:6e:ee:09:45:7f:e2:05:96:60:86:2b:8d:
                    f7:34:c3:ed:2a:83:30:eb:dc:2c:99:6b:52:fc:01:
                    71:59:d5:25:45:8e:45:5c:43:77:6b:0d:86:97:41:
                    5d:49:09:db:77:b0:1c:de:c0:72:3f:1e:8f:fc:b9:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:DD:4C:AD:73:9C:3D:86:EA:F0:F4:87:20:DF:CC:53:0C:F9:7E
            X509v3 Authority Key Identifier:
                keyid:E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:a9:63:7e:d0:5f:fb:80:2e:5f:83:68:1a:9d:04:1b:ef:
         d3:f0:ad:34:09:c1:4d:5b:47:19:72:d7:5a:17:dd:b4:f4:41:
         fa:8e:77:19:ef:30:21:b8:f2:fe:e9:c8:04:f3:1d:00:60:a7:
         cb:04:1f:c5:e5:02:e8:7e:6d:44:4a:a3:8d:23:11:c1:fd:a1:
         49:5f:2e:d8:82:1e:9b:dd:82:13:ae:59:e4:4c:a1:a4:90:94:
         3a:d3:bb:02:23:f0:59:76:77:41:ed:5e:f9:c1:cf:59:9f:02:
         90:52:5e:59:54:e5:82:10:61:90:a2:ca:12:77:30:f9:77:a0:
         97:80:b2:2e:c0:4f:f0:e4:e2:79:4b:8c:40:0d:b1:1d:8d:0b:
         d5:a7:df:2b:ae:4c:4e:4e:c8:7c:25:6a:2c:97:ce:35:17:ce:
         d9:85:d5:1d:63:45:60:f0:70:a2:30:b5:99:31:2e:fa:9c:dc:
         e7:48:ca:90:65:83:17:bb:43:68:37:30:dc:aa:cd:54:3a:79:
         f1:16:7d:d0:96:73:77:89:0c:31:65:85:b4:63:1c:35:f0:59:
         46:26:67:d2:ca:cd:fd:92:1d:7d:fe:1b:4e:39:1c:4e:65:ed:
         94:be:63:8a:22:10:e3:d5:4c:df:57:1f:53:2f:36:8d:ba:e5:
         84:e7:d6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:34 2026 by rpki-client