Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier:          0fe/SERZ28a5jgDXS162qwiXd8i4y1Q+BKN9f/P0kiA=
Subject key identifier:   77:F9:A8:69:CD:50:C5:78:06:EF:93:E8:44:EE:92:C8:19:B4:9F:E4
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer:       /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial:       01A1494F0F4FA0CF6D557A526A71B74D0D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number:          14C5
Signing time:             Sat 17 Oct 2026 10:01:20 +0000
Manifest this update:     Sat 17 Oct 2026 10:01:20 +0000
Manifest next update:     Sun 18 Oct 2026 10:01:20 +0000
Files and hashes:         1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: Zm7ENMxUXKQW9RKvSpDO1L3CcAXH+8DLHVDem6UXwpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:4f:0f:4f:a0:cf:6d:55:7a:52:6a:71:b7:4d:0d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Validity
            Not Before: Oct 17 10:01:20 2026 GMT
            Not After : Oct 18 10:01:20 2026 GMT
        Subject: CN=77f9a869cd50c57806ef93e844ee92c819b49fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:e8:49:dd:83:fb:1b:55:66:7a:55:db:d1:
                    a9:b3:ae:77:37:15:69:d2:65:9d:a9:2f:42:e4:9e:
                    dc:65:4d:20:5b:53:4f:52:f1:33:c8:d5:fc:91:26:
                    3c:f7:13:82:34:ef:e4:d7:09:26:83:ce:25:90:25:
                    89:73:76:94:8c:aa:80:1b:6d:bd:b1:0b:48:34:46:
                    64:f8:a5:bc:b0:74:92:e4:34:4d:85:92:4e:6b:71:
                    3b:33:fa:67:64:0d:ad:3f:71:9e:9a:52:3d:3d:b7:
                    60:81:f9:42:61:ab:5d:13:eb:1f:0a:67:f6:c2:80:
                    18:2f:2c:d8:8f:e9:71:59:89:77:4e:42:03:6c:62:
                    a4:fd:0e:28:e1:2a:e5:8a:89:f0:d2:3b:0a:99:34:
                    e6:cc:60:8b:ae:05:f1:0d:80:dd:8e:f6:ff:ed:ea:
                    fe:3e:7c:7f:60:ed:b1:56:de:ef:6f:a0:ff:de:db:
                    d6:bc:11:74:14:3f:cc:28:76:e6:4c:6d:dc:1f:76:
                    87:87:96:5d:42:5b:d9:5a:d1:c3:b1:9b:21:ad:14:
                    83:dc:b8:0a:3f:a7:67:41:03:fa:45:fc:4b:99:16:
                    d8:f9:71:42:b6:ce:d3:28:91:73:ee:30:97:fe:22:
                    bb:ce:96:39:2c:20:57:f3:40:ad:19:f8:9b:9b:15:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F9:A8:69:CD:50:C5:78:06:EF:93:E8:44:EE:92:C8:19:B4:9F:E4
            X509v3 Authority Key Identifier:
                keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:60:5a:69:10:ea:c3:e4:f0:1e:f9:7c:b0:1a:fd:66:4c:19:
         a1:3f:16:42:49:0f:91:f3:40:ec:25:6d:50:ed:73:4b:2b:b0:
         10:2f:f5:9c:a0:61:88:1b:b6:60:21:96:4d:74:4a:e9:35:d0:
         75:2e:b1:36:05:ec:b7:7f:89:9e:52:3d:9f:de:3f:6b:6d:e2:
         c6:70:fb:5f:4e:1e:7e:cb:8e:a6:2c:3c:0a:3c:c0:77:c5:de:
         28:bc:06:1b:6b:64:24:f8:03:d7:17:25:91:e9:8b:9c:1c:e2:
         8f:22:1d:f2:92:9e:22:d0:47:e6:84:bd:84:11:e7:d3:24:ca:
         f3:9a:86:47:da:6b:9b:63:ff:9e:ff:eb:8b:2f:e7:a1:c5:bb:
         c1:7d:e4:f0:8b:20:37:e4:48:c9:56:b0:0e:f4:6b:6d:a8:a6:
         b4:46:ef:53:c7:a5:8a:1a:8e:c6:8c:2f:b3:db:02:06:8c:30:
         27:6c:51:42:e4:e0:5a:30:78:78:bc:2f:01:88:b3:1f:72:8d:
         31:cd:8e:53:9c:fc:f0:1a:3f:23:fa:6f:b1:29:30:52:9b:ac:
         be:51:0f:2b:86:b0:de:ec:47:f5:8a:ce:f7:4d:73:63:d2:f5:
         b0:0d:4f:bf:73:a5:de:f4:c0:f6:4e:5e:80:64:f0:56:fe:4d:
         25:c9:bc:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJTw9PoM9tVXpSanG3TQ08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZWZkMTg2OWVlYWZlNmY5ZjAzY2IzNDE4Njg5YmNiMGM2
OTEzNzAwHhcNMjYxMDE3MTAwMTIwWhcNMjYxMDE4MTAwMTIwWjAzMTEwLwYDVQQD
Eyg3N2Y5YTg2OWNkNTBjNTc4MDZlZjkzZTg0NGVlOTJjODE5YjQ5ZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNboSd2D+xtVZnpV29Gps653NxVp
0mWdqS9C5J7cZU0gW1NPUvEzyNX8kSY89xOCNO/k1wkmg84lkCWJc3aUjKqAG229
sQtINEZk+KW8sHSS5DRNhZJOa3E7M/pnZA2tP3GemlI9PbdggflCYatdE+sfCmf2
woAYLyzYj+lxWYl3TkIDbGKk/Q4o4Srlionw0jsKmTTmzGCLrgXxDYDdjvb/7er+
Pnx/YO2xVt7vb6D/3tvWvBF0FD/MKHbmTG3cH3aHh5ZdQlvZWtHDsZshrRSD3LgK
P6dnQQP6RfxLmRbY+XFCts7TKJFz7jCX/iK7zpY5LCBX80CtGfibmxWmqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf5qGnNUMV4Bu+T6ETuksgZtJ/kMB8GA1UdIwQY
MBaAFOXv0Yae6v5vnwPLNBhom8sMaRNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iNDdiZGEtNjViNi00YTQyLTk5MGYt
MDI0OTM1ZGRiOGM2LzEvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iNDdiZGEtNjViNi00YTQyLTk5MGYtMDI0OTM1ZGRiOGM2
LzEvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2BaaRDq
w+TwHvl8sBr9ZkwZoT8WQkkPkfNA7CVtUO1zSyuwEC/1nKBhiBu2YCGWTXRK6TXQ
dS6xNgXst3+JnlI9n94/a23ixnD7X04efsuOpiw8CjzAd8XeKLwGG2tkJPgD1xcl
kemLnBzijyId8pKeItBH5oS9hBHn0yTK85qGR9prm2P/nv/riy/nocW7wX3k8Isg
N+RIyVawDvRrbaimtEbvU8elihqOxowvs9sCBowwJ2xRQuTgWjB4eLwvAYizH3KN
Mc2OU5z88Bo/I/pvsSkwUpusvlEPK4aw3uxH9YrO901zY9L1sA1Pv3Ol3vTA9k5e
gGTwVv5NJcm8LA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:04:01 2026 by rpki-client