Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File:                     5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier:          26LrkdKIM8bU/nkT+FDEhxkj/hZCStL/ME1aFAfLacw=
Subject key identifier:   73:C7:83:A3:6C:58:C2:89:72:04:77:EA:E7:50:91:3D:42:25:F1:1C
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer:       /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial:       01A104A51CE9B902A8CCE89C6832CEB2AF4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number:          0A88
Signing time:             Sun 04 Oct 2026 02:01:32 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:32 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:32 +0000
Files and hashes:         1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: DWQvJJkhdjfrXWLF6HmdCUn47cqCwLedYjvdoCGM2LU=)
                          2: om31b6FWDBGxEuwor71QHsugvxY.roa (hash: nmUcpfkGCJ2B9JhtJKk02OVz3WisKOfii97PhUxXZVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a5:1c:e9:b9:02:a8:cc:e8:9c:68:32:ce:b2:af:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
        Validity
            Not Before: Oct  4 02:01:32 2026 GMT
            Not After : Oct  5 02:01:32 2026 GMT
        Subject: CN=73c783a36c58c289720477eae750913d4225f11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:33:29:fd:4a:59:d6:be:d7:94:61:a9:0e:
                    14:bf:2e:a6:59:43:1f:df:7e:b6:c1:1b:25:d9:ce:
                    43:23:c8:99:9c:41:04:18:65:6d:1a:64:3f:3f:33:
                    5e:45:df:a5:ad:66:3b:04:d6:92:55:f3:b7:81:31:
                    1a:36:40:5b:83:99:8f:01:76:01:e3:d9:79:2b:8c:
                    ef:a5:9a:12:d2:88:c3:2b:87:0c:4a:45:2f:96:cb:
                    ee:0a:7d:3b:e6:61:11:22:7a:ca:be:42:39:02:73:
                    d6:b1:63:83:4a:5f:f3:b5:d7:39:30:9b:19:6c:36:
                    f7:d9:9c:64:11:b6:d8:fd:bb:b2:cf:47:61:51:38:
                    9b:0e:3e:dc:cf:9b:4a:a5:5d:fb:1d:d8:d3:61:a1:
                    da:67:0e:60:34:f5:98:ae:de:1e:df:89:80:35:4c:
                    c8:34:93:43:4d:56:5e:df:06:05:6e:26:32:d0:40:
                    56:9c:6a:01:23:57:66:3e:26:a0:bf:2f:82:61:df:
                    1b:b5:b6:c0:64:7f:96:6d:b8:e6:8a:5c:91:e8:3e:
                    00:34:cf:fc:5f:30:cc:40:e2:9a:ef:46:d7:a6:69:
                    b0:bd:41:90:f2:ab:2a:0f:9a:50:94:13:f3:99:52:
                    93:d5:33:dd:59:c8:8e:f8:08:c0:aa:9f:cd:c2:cb:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C7:83:A3:6C:58:C2:89:72:04:77:EA:E7:50:91:3D:42:25:F1:1C
            X509v3 Authority Key Identifier:
                keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:7f:f7:d8:8c:3c:c6:35:3f:2f:98:36:8e:ae:23:ff:c5:
         27:bb:53:81:8d:1d:45:7f:b3:7f:09:eb:d9:36:fe:a4:32:6c:
         ee:84:54:9e:92:56:50:b3:e8:df:f8:c8:3f:f8:65:e7:7d:e9:
         d9:d3:15:1c:7c:52:15:fc:9a:05:5c:06:3c:de:71:80:2f:6e:
         72:e8:19:ce:07:54:99:fa:96:fb:6a:b8:2f:e8:99:de:6a:87:
         28:33:5b:44:44:2d:2b:f9:68:a4:66:b9:2c:0d:aa:5f:5a:0e:
         3e:40:a8:09:eb:15:1a:aa:48:4f:78:22:b3:96:4c:31:aa:b7:
         4c:3a:a3:46:16:55:d0:cc:96:ff:91:a4:b1:dc:51:4d:e4:c8:
         ba:73:d9:d2:25:4e:7c:79:77:6e:8e:5c:5c:b7:8b:71:41:ab:
         a9:58:d4:01:9c:5e:3f:ed:b8:ff:19:ce:d1:6d:15:86:87:3b:
         41:c3:fa:c9:83:52:7e:87:4a:fa:09:12:28:ce:bb:d0:1e:c1:
         59:48:7e:1f:ae:f3:fe:5a:86:52:0d:61:f6:b9:60:4a:68:41:
         77:f2:98:18:e5:35:a9:08:3a:27:9b:02:52:46:02:b9:36:57:
         1a:46:27:8a:ba:c0:c7:5c:ae:91:39:b9:7d:75:2a:a2:7b:1c:
         4c:55:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:35:03 2026 by rpki-client