Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          KQmgG9UxV5AOugZOP9nE2GD7xz6xEHkt5z51GnkPAyk=
Subject key identifier:   32:97:DE:D1:61:F3:ED:FF:F2:71:D1:01:DA:55:7E:88:FA:F6:5C:15
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       01A020C3032528245E9332C84A904742C525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          14F1
Signing time:             Thu 20 Aug 2026 20:00:46 +0000
Manifest this update:     Thu 20 Aug 2026 20:00:46 +0000
Manifest next update:     Fri 21 Aug 2026 20:00:46 +0000
Files and hashes:         1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: xWP7bV2s2wbQnCO/Bh3kgpkhK+U6jExMmg+4usBxBB0=)
                          2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
                          3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
                          4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:c3:03:25:28:24:5e:93:32:c8:4a:90:47:42:c5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: Aug 20 20:00:46 2026 GMT
            Not After : Aug 21 20:00:46 2026 GMT
        Subject: CN=3297ded161f3edfff271d101da557e88faf65c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:b8:77:70:10:8d:84:d3:47:6d:00:a5:38:
                    57:bc:3a:12:e3:5b:8c:aa:82:bf:d1:d5:a6:bf:ab:
                    ad:81:9c:83:0a:51:13:1c:f1:2c:e9:87:3a:61:81:
                    83:ff:db:be:b4:19:bf:06:f1:db:d5:5f:a1:3c:4f:
                    e1:34:2d:2b:d2:fb:52:3b:32:62:fe:d0:4e:64:98:
                    ea:79:76:79:0d:0b:d0:c2:27:c5:7e:ba:9e:27:62:
                    46:a3:06:6d:bb:04:86:95:18:46:4b:22:f5:c1:ed:
                    ae:04:9a:ec:ec:ef:c8:ae:05:a5:34:73:bb:71:54:
                    bc:b2:fd:d9:23:da:64:ed:f3:d2:8e:48:12:5a:42:
                    65:78:57:86:5a:b6:bb:4c:b0:d9:44:33:18:17:e0:
                    20:31:f7:11:f3:f3:7e:03:fc:92:f6:aa:f0:b7:5a:
                    3b:2e:4a:3d:1c:44:df:91:0c:b3:73:7a:58:95:3c:
                    98:a5:53:16:28:f5:81:ed:4a:e8:ef:61:c2:4a:96:
                    de:44:e6:da:7b:48:74:8f:88:33:aa:ab:4d:91:14:
                    8a:96:04:07:0b:55:25:8c:38:17:30:bb:3f:7f:a6:
                    f3:1f:68:87:29:07:b3:76:86:3b:17:2e:f6:1e:1a:
                    6f:2a:d0:28:44:7b:e4:54:57:9d:60:38:07:26:87:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:97:DE:D1:61:F3:ED:FF:F2:71:D1:01:DA:55:7E:88:FA:F6:5C:15
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3c:c1:81:3b:24:31:72:e1:b4:fd:22:d3:f7:38:ec:a6:e1:
         b1:2f:bb:f4:3e:50:ee:02:b5:b7:8e:4b:1b:1d:dc:b1:95:59:
         dd:b0:04:2f:9e:b9:81:f8:8e:21:75:55:4c:b1:82:2e:b0:b2:
         1e:35:94:96:db:08:30:00:14:c9:69:c0:f5:66:b9:73:ca:13:
         17:9d:27:12:3f:de:55:4e:ed:8a:4c:bc:4e:40:d5:e5:25:9d:
         04:4f:77:c3:90:2b:fa:3c:a6:0b:bc:f5:60:0e:bb:41:b6:d5:
         16:db:5c:39:36:49:6f:4d:dd:11:1e:fd:24:f8:2b:c5:b5:48:
         87:7c:7c:a3:bd:ce:51:f5:ab:eb:99:10:91:d7:2c:8d:9e:1d:
         47:cc:2f:27:3c:34:01:49:e4:2a:4f:8b:52:dd:e6:77:2d:06:
         91:97:7a:12:df:2a:7a:71:2a:67:83:91:c9:cc:a4:c9:71:8d:
         66:a2:a7:a4:13:45:dc:98:bb:b7:7d:06:36:4f:c9:5d:1f:97:
         dc:de:ac:8f:39:d6:c9:bd:2e:9e:ca:14:2e:75:75:24:59:11:
         f6:43:40:64:a4:3e:0f:41:e0:d3:88:7c:68:28:f5:dc:82:12:
         63:4d:4b:01:8d:74:b4:58:36:2f:f4:33:72:98:23:3f:f1:52:
         50:dd:d9:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgwwMlKCRekzLISpBHQsUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm
YmNmOTcwHhcNMjYwODIwMjAwMDQ2WhcNMjYwODIxMjAwMDQ2WjAzMTEwLwYDVQQD
EygzMjk3ZGVkMTYxZjNlZGZmZjI3MWQxMDFkYTU1N2U4OGZhZjY1YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/64d3AQjYTTR20ApThXvDoS41uM
qoK/0dWmv6utgZyDClETHPEs6Yc6YYGD/9u+tBm/BvHb1V+hPE/hNC0r0vtSOzJi
/tBOZJjqeXZ5DQvQwifFfrqeJ2JGowZtuwSGlRhGSyL1we2uBJrs7O/IrgWlNHO7
cVS8sv3ZI9pk7fPSjkgSWkJleFeGWra7TLDZRDMYF+AgMfcR8/N+A/yS9qrwt1o7
Lko9HETfkQyzc3pYlTyYpVMWKPWB7Uro72HCSpbeRObae0h0j4gzqqtNkRSKlgQH
C1UljDgXMLs/f6bzH2iHKQezdoY7Fy72HhpvKtAoRHvkVFedYDgHJodalwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKX3tFh8+3/8nHRAdpVfoj69lwVMB8GA1UdIwQY
MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt
N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh
LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjzBgTsk
MXLhtP0i0/c47KbhsS+79D5Q7gK1t45LGx3csZVZ3bAEL565gfiOIXVVTLGCLrCy
HjWUltsIMAAUyWnA9Wa5c8oTF50nEj/eVU7tiky8TkDV5SWdBE93w5Ar+jymC7z1
YA67QbbVFttcOTZJb03dER79JPgrxbVIh3x8o73OUfWr65kQkdcsjZ4dR8wvJzw0
AUnkKk+LUt3mdy0GkZd6Et8qenEqZ4ORycykyXGNZqKnpBNF3Ji7t30GNk/JXR+X
3N6sjznWyb0unsoULnV1JFkR9kNAZKQ+D0Hg04h8aCj13IISY01LAY10tFg2L/Qz
cpgjP/FSUN3ZJA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:33 2026 by rpki-client