Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File:                     5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier:          5oB5be2TwulFxwCN48F4q0TI67j9hEEzByYr+cJEKiE=
Subject key identifier:   69:5E:8A:4B:82:4F:B7:2C:FE:91:30:29:77:46:BB:44:6B:25:9F:34
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer:       /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial:       01A12AD7128A84D4D34C7FC01C98A8619333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number:          146E
Signing time:             Sun 11 Oct 2026 12:01:40 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:40 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:40 +0000
Files and hashes:         1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: 1RNhHXskk6Bh6y6Grs4x1hV0GKhJIdS/8CkslgG1Aig=)
                          2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d7:12:8a:84:d4:d3:4c:7f:c0:1c:98:a8:61:93:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
        Validity
            Not Before: Oct 11 12:01:40 2026 GMT
            Not After : Oct 12 12:01:40 2026 GMT
        Subject: CN=695e8a4b824fb72cfe9130297746bb446b259f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:f1:5e:05:be:5d:dc:40:7c:6b:52:13:44:
                    bc:af:57:64:7f:8b:9e:c3:61:3b:08:00:45:6c:2e:
                    01:f4:db:2b:71:97:56:02:25:93:04:91:6c:e3:b3:
                    40:f3:8c:6a:49:d9:0d:f5:5e:25:b3:76:be:de:bf:
                    a6:3c:c6:8a:1d:8a:ee:b4:0a:9c:32:4e:80:4a:79:
                    16:08:f5:17:31:74:86:fb:18:f1:75:b0:ab:98:71:
                    52:a1:50:83:13:62:3b:b3:7c:13:da:2e:64:67:b2:
                    e3:a1:45:7b:0e:ca:2b:7c:a7:9f:d6:4a:90:8e:04:
                    f4:af:ce:88:f7:29:ec:7d:77:cb:86:bd:75:75:12:
                    5b:89:b4:d4:b1:56:d6:c6:b1:2c:cb:8d:86:88:1f:
                    e8:db:90:ef:be:bf:1b:f8:ee:87:74:53:c3:ae:dc:
                    6c:c6:a4:42:1d:2e:35:bc:19:cb:09:87:fd:56:8a:
                    0a:01:d4:9d:bf:fb:ff:91:7d:9b:c1:92:73:eb:04:
                    ee:f3:16:c2:29:28:8b:90:02:75:4b:ad:f0:ba:90:
                    43:bc:15:ea:5a:d5:ca:f5:93:57:95:67:e4:bf:b6:
                    2b:2d:a2:46:d3:85:7e:10:be:a4:de:6f:c8:e2:91:
                    3a:e8:2f:a9:55:2a:3f:89:e7:db:d7:75:bc:65:1f:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5E:8A:4B:82:4F:B7:2C:FE:91:30:29:77:46:BB:44:6B:25:9F:34
            X509v3 Authority Key Identifier:
                keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:02:47:92:d9:8c:75:e2:e5:ca:d7:7a:5e:a9:89:f2:bd:79:
         a3:66:ab:32:ef:bf:a7:68:21:20:5a:3c:f9:d8:1a:31:c6:55:
         19:42:85:e0:08:96:86:57:5b:c0:cc:bc:bb:58:49:bd:95:22:
         21:5d:43:4e:a4:d5:9b:c9:e5:11:6f:94:9e:e0:42:ad:cc:64:
         f9:db:d1:c4:0b:53:46:9f:29:14:5c:d8:05:c6:e5:d1:48:5c:
         e4:19:13:6d:a8:a7:d9:e7:97:b3:91:dd:5a:d3:b2:f3:e5:9a:
         a0:db:53:3a:a8:6a:8d:4f:67:42:22:db:15:ad:6a:ca:68:f1:
         a5:5f:99:ec:4d:4e:ae:13:69:fb:92:01:15:0a:b8:ef:de:ff:
         05:a3:3e:23:9c:59:20:64:46:ae:20:ed:d9:9c:65:3b:c3:5e:
         00:96:70:22:f2:97:25:3a:b8:17:f4:6d:3f:ca:25:28:24:da:
         a3:cb:d6:68:6f:f6:06:e3:53:22:9d:b7:7b:25:3c:a1:37:8f:
         d8:55:7e:03:f7:0b:36:6c:7c:f6:08:26:48:25:62:25:6e:0c:
         78:71:6d:f2:9f:46:dd:f9:21:b1:81:a1:a3:16:0f:0d:30:7e:
         b1:bc:60:0d:6e:58:53:e6:97:e8:97:43:4e:e6:5d:57:a4:21:
         5b:b8:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:40:04 2026 by rpki-client