Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
File:                     5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft (raw, json)
Hash identifier:          uO7vwSH7M57tSdd3IrUpVxLqLuVwwlMisQBOPy+78uk=
Subject key identifier:   13:46:2E:EE:FC:00:DB:13:0E:9A:45:4E:84:69:A9:78:70:AF:17:E0
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       01A0D79654C323DE634F6A99482F801B08AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
Manifest number:          1AB4
Signing time:             Fri 25 Sep 2026 08:02:28 +0000
Manifest this update:     Fri 25 Sep 2026 08:02:28 +0000
Manifest next update:     Sat 26 Sep 2026 08:02:28 +0000
Files and hashes:         1: 5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl (hash: jEINd0KwvCELJvVaYzmGAm1m4B0J8OALsNKGQGgAIe4=)
                          2: KO4mia6vpCQ5fMg8P-ojUEmovkU.roa (hash: b7t7kGBW1DJSzBBc1XcCKIKNx+8AWkzeNhrLG3xW7cA=)
                          3: Ukp7cmdvPkEzNJphlYGregM89Lk.roa (hash: i/553d2qnprRZJF1uWLSLfvvW3PBjVt5T9cb7fhLihg=)
                          4: epI0wDY0-d1uIvfmr5mmAVqsGiI.roa (hash: qZSk2Sxje0LPm/2NfUgVPh13VAKA0WS/1PVdgw9jxTE=)
                          5: hcNgV5pro-JzVwRO6d1L6k9hBSE.roa (hash: USRsxqk8iLeOL2/A7LGzQ4Uv1QZgrw1Kv+J+q/x2MDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:54:c3:23:de:63:4f:6a:99:48:2f:80:1b:08:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Sep 25 08:02:28 2026 GMT
            Not After : Sep 26 08:02:28 2026 GMT
        Subject: CN=13462eeefc00db130e9a454e8469a97870af17e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3b:62:0b:4a:85:5c:76:49:3b:09:75:8b:0c:
                    2e:30:d1:92:2f:d9:85:18:f6:5a:ca:e8:11:d0:ed:
                    4d:1a:0a:9d:7d:a7:de:3a:a6:af:57:df:b6:2f:ca:
                    38:b4:09:35:54:51:e7:c5:55:99:24:1b:66:68:32:
                    bb:49:23:2e:d1:94:4e:c3:1e:1c:48:6f:d7:e7:d8:
                    7c:30:fe:a0:13:be:5b:fe:01:72:af:43:e2:38:e0:
                    1f:3c:fe:c3:61:85:7e:cf:81:d8:2a:22:c8:13:9a:
                    3d:eb:1a:06:17:7b:36:1d:98:e1:5f:b4:b2:58:ae:
                    f8:55:cc:99:d5:23:25:ac:e3:90:24:c5:82:98:65:
                    6d:c7:1b:9d:bc:10:c8:4d:e8:66:8e:07:82:6b:aa:
                    90:f7:dc:69:ad:c4:a9:7d:4d:96:1e:c1:ee:08:40:
                    36:6e:dd:2c:b5:d1:97:50:96:96:16:c7:05:26:66:
                    a5:f7:48:d7:a3:30:37:c8:29:fd:c2:77:97:23:f0:
                    70:8d:07:50:2d:21:88:8a:12:fd:76:fc:22:60:09:
                    7c:29:02:f6:23:3c:c9:a0:33:5a:ba:b4:2a:8c:55:
                    87:d7:27:5a:7f:8e:95:14:8f:05:0c:f7:4b:64:11:
                    21:47:da:51:e2:b9:ea:f7:5a:50:cd:1d:da:c0:76:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:2E:EE:FC:00:DB:13:0E:9A:45:4E:84:69:A9:78:70:AF:17:E0
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5f:b6:37:ce:21:16:3c:7c:d5:d0:82:df:d5:97:67:51:8d:
         71:ce:fd:99:d4:be:e7:1e:61:9e:15:3f:d5:12:45:d0:59:3f:
         a0:92:0a:3b:2b:67:95:a9:d2:51:d5:59:c1:88:ba:ed:38:d3:
         ad:c7:03:c9:60:23:66:57:ac:82:70:23:13:61:87:d6:69:27:
         e7:c7:52:71:2b:c3:06:b8:0f:4e:45:f8:83:69:53:9e:1e:b3:
         27:d9:69:5b:a1:1b:47:b1:30:b8:44:6a:6d:0a:eb:23:3e:be:
         b8:39:ec:e3:d9:df:42:51:50:14:27:a5:ba:2a:19:97:cb:04:
         e3:12:d4:92:97:61:23:99:da:47:d0:69:9b:a2:2f:5a:0b:dc:
         40:21:0d:52:45:a1:d1:db:ae:e3:50:15:08:f4:8c:49:e8:fc:
         2e:ed:7a:22:54:6f:83:99:83:b7:28:05:86:7f:6c:2e:87:51:
         79:40:75:a4:9a:78:dd:d9:d1:02:33:45:49:c5:f3:4b:3b:8c:
         93:ef:e6:30:3c:3a:c8:e3:91:1c:71:27:99:7b:6d:e8:91:d4:
         44:1d:b3:6b:13:76:38:3a:c7:6b:79:a0:f7:e8:4f:e0:b4:bc:
         cb:d8:fa:42:2e:7f:68:d7:12:d6:8e:74:d0:e2:9e:d2:5f:c9:
         c7:35:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:54:03 2026 by rpki-client