Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
File:                     5ADgGnlalXLPsazYWWya0zxhJlk.mft (raw, json)
Hash identifier:          Wzg5vWj2/D89PmiyvxBKXrx+gPq3vrnZDKErDI+cChE=
Subject key identifier:   C9:37:89:37:DD:62:3D:FD:22:C1:D2:B2:DA:09:61:CE:E8:80:22:44
Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
Certificate issuer:       /CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Certificate serial:       01A1298CC1CC84F4DED4F01CF128E34B721B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
Manifest number:          042D
Signing time:             Sun 11 Oct 2026 06:00:52 +0000
Manifest this update:     Sun 11 Oct 2026 06:00:52 +0000
Manifest next update:     Mon 12 Oct 2026 06:00:52 +0000
Files and hashes:         1: 5ADgGnlalXLPsazYWWya0zxhJlk.crl (hash: Tdpf0t6sZzSL5y/pBjeofWWiFuGeRAw3AYZDqEu/6O8=)
                          2: NUAjVMxo6Ucd4xsIT8RtOeLkos4.roa (hash: RLlBvyKQk7ZpNWvbBgNGnwpHL3NkcCrqlw1bbIkW97k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:8c:c1:cc:84:f4:de:d4:f0:1c:f1:28:e3:4b:72:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659
        Validity
            Not Before: Oct 11 06:00:52 2026 GMT
            Not After : Oct 12 06:00:52 2026 GMT
        Subject: CN=c9378937dd623dfd22c1d2b2da0961cee8802244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:e2:91:6c:ce:c6:63:a6:df:db:68:c6:70:
                    e3:07:7f:7f:8f:64:f9:bd:7f:cd:47:6c:28:67:0c:
                    84:7b:59:d1:da:69:3b:d0:32:a2:01:f9:fe:d5:3a:
                    7b:54:11:02:d3:55:a8:1e:32:63:6a:87:51:ce:aa:
                    bd:d7:9d:d4:2f:3f:51:2f:b6:30:f7:7c:e6:68:fc:
                    96:fa:81:61:d1:20:7e:c3:ad:d7:cf:c8:b2:52:f9:
                    4e:9e:d7:fb:24:a6:49:9a:1c:f4:b6:22:ff:b0:9a:
                    f6:e0:9a:d5:ec:eb:be:84:53:36:ee:77:97:be:08:
                    13:ee:f3:13:2c:87:14:e2:d5:a9:bf:fb:8e:d7:08:
                    56:cf:32:aa:f4:de:e8:52:27:1f:83:ed:d2:58:7f:
                    e1:e6:35:47:65:b8:3c:bc:c9:f4:d9:14:7d:ed:bd:
                    50:2a:95:c3:92:26:34:b2:5c:14:b6:d5:fb:ca:75:
                    70:d3:b2:dd:15:f2:8e:d0:31:c7:25:fe:0d:69:f3:
                    9c:5d:a4:f2:5f:46:17:45:98:8c:fb:cc:21:86:f8:
                    bb:22:d4:82:3f:d6:04:93:92:3b:c6:1c:e6:24:53:
                    9b:96:69:e3:3b:0b:8d:54:dc:72:ce:34:c4:99:f6:
                    57:cb:34:2e:11:1b:d2:26:7f:4e:7e:03:50:07:82:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:37:89:37:DD:62:3D:FD:22:C1:D2:B2:DA:09:61:CE:E8:80:22:44
            X509v3 Authority Key Identifier:
                keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:36:19:62:38:70:24:8a:8a:9e:69:e9:fc:d3:0e:bf:2a:53:
         7c:18:95:e7:20:c0:84:17:3c:b7:06:83:5e:b8:d9:73:3e:c1:
         bd:42:ca:ea:cc:5a:00:dc:bd:87:ac:47:72:04:ce:d7:16:08:
         a2:fc:d8:73:13:e4:e6:a2:35:8f:e7:87:75:7d:8e:50:cb:4c:
         c7:d7:36:35:0c:84:9c:f5:9e:0d:0c:0d:c0:e1:ee:0c:8d:aa:
         83:1e:d8:da:dc:98:1c:85:e2:f6:40:61:2d:bd:b0:29:d2:4c:
         54:df:cb:6c:df:d5:64:07:37:8b:d2:86:2e:bf:90:e5:8e:ec:
         d0:d6:0a:cb:f3:44:0f:fd:be:bb:f5:a8:09:49:7f:94:28:b3:
         74:9f:77:3f:f2:00:2a:06:f5:1a:74:a6:0d:1b:c7:98:94:d4:
         06:88:94:cc:d6:4a:64:b8:34:36:03:85:a3:ab:75:df:3f:b6:
         fb:dd:a4:2e:08:a6:32:a9:31:66:58:f9:cc:25:9c:2a:6c:79:
         40:ca:8f:80:91:3d:51:c7:5f:0d:4c:14:d8:c4:a2:04:0d:1c:
         cc:1d:ed:42:25:cd:94:cc:b0:67:72:ec:0c:14:6d:8e:62:e6:
         39:9d:24:d6:24:28:e7:42:80:a2:88:8c:30:6e:fa:71:43:21:
         06:93:87:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:07:14 2026 by rpki-client