Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
File:                     5LDTY6ChegaEUahRRc5PpGTX-hs.mft (raw, json)
Hash identifier:          5gTu1b8XubQbgiLVxU5/+MC0x2bpZnd1LOD8srUSCOI=
Subject key identifier:   14:2C:3C:86:5B:58:5A:44:57:C7:47:3D:10:D0:06:48:39:B4:5E:56
Authority key identifier: E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
Certificate issuer:       /CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Certificate serial:       01A13FA7BEC9D7F255983A2616F1EF6956F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
Manifest number:          13D6
Signing time:             Thu 15 Oct 2026 13:02:00 +0000
Manifest this update:     Thu 15 Oct 2026 13:02:00 +0000
Manifest next update:     Fri 16 Oct 2026 13:02:00 +0000
Files and hashes:         1: 5LDTY6ChegaEUahRRc5PpGTX-hs.crl (hash: L982y3HPtB+40JTQRjfjam+gevz/JdSp1h11aT05+A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:be:c9:d7:f2:55:98:3a:26:16:f1:ef:69:56:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
        Validity
            Not Before: Oct 15 13:02:00 2026 GMT
            Not After : Oct 16 13:02:00 2026 GMT
        Subject: CN=142c3c865b585a4457c7473d10d0064839b45e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:eb:64:d4:29:05:74:ce:9e:1d:13:32:b5:
                    2d:9a:41:6f:45:3d:09:6f:5d:fc:2e:8b:e2:be:fd:
                    ee:4c:7b:b9:70:37:76:88:e1:2b:57:f0:fe:e8:86:
                    b1:e1:08:a6:c1:e8:9e:f1:6b:fd:3e:9a:70:f3:53:
                    b3:91:a4:a4:40:d4:df:eb:a3:40:1e:ad:93:05:5b:
                    06:0f:ee:3d:da:c0:45:4c:57:d0:ec:06:9b:fa:fc:
                    1a:89:5f:08:64:40:38:ca:7c:5f:1c:0d:03:e0:79:
                    d7:46:52:13:d6:c0:7c:78:59:51:33:24:84:8f:4f:
                    94:94:c7:b1:22:41:8d:21:1e:35:d1:5a:49:86:ff:
                    29:e2:08:45:ff:05:09:32:7c:2e:9f:06:c1:ab:e1:
                    78:7d:a9:0a:33:c9:58:42:dc:e1:3b:70:7e:8e:ca:
                    90:50:7a:1f:00:6c:a2:39:c6:f9:02:e1:53:96:c1:
                    7c:7b:42:42:a6:37:98:0d:56:1c:5b:6d:f6:28:d5:
                    46:a6:32:ff:2c:6e:e7:fc:4a:aa:bc:d2:02:82:03:
                    5c:57:a6:c4:53:90:18:ed:0f:2d:09:cb:98:e8:41:
                    5c:00:33:2e:12:77:b8:ca:ab:61:e4:3e:4b:05:7b:
                    d1:21:ca:98:00:a8:b6:15:a2:f7:d4:75:83:53:8a:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2C:3C:86:5B:58:5A:44:57:C7:47:3D:10:D0:06:48:39:B4:5E:56
            X509v3 Authority Key Identifier:
                keyid:E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:24:af:c4:fe:21:90:9e:1d:41:1a:c1:ee:a5:95:5e:82:c5:
         26:bd:8e:cf:6a:ff:18:3e:33:ac:eb:26:44:82:77:55:b8:93:
         34:e5:ee:9e:e0:b9:c7:29:86:8f:10:92:b9:ce:ec:1e:85:a9:
         33:d7:1c:de:48:e1:98:1d:8c:44:de:51:66:8f:36:f5:a7:e9:
         93:23:29:dd:6d:30:90:05:46:63:59:49:91:b6:b6:17:67:36:
         71:3f:f4:c1:47:71:a6:39:d8:62:bc:fd:00:ba:d0:cc:be:88:
         01:34:6d:9a:4d:dd:b4:19:4d:b2:01:ee:06:06:b2:2f:db:82:
         13:c8:78:72:3a:88:ca:5e:58:6c:6a:55:ea:91:03:94:db:eb:
         90:ce:10:55:79:76:a7:bb:c1:73:bf:9f:54:e2:d1:7e:87:c6:
         e8:13:fd:29:a8:37:44:82:85:97:4c:f6:d9:de:6a:39:27:7e:
         d4:2d:d9:bd:b9:d1:2e:3a:2b:bb:85:3b:19:a0:76:9e:98:05:
         9e:69:bd:a3:5f:8a:83:e8:ba:1f:9f:1a:57:d1:53:6e:09:64:
         7a:c0:98:c5:6b:15:a3:9e:12:81:89:22:d6:0f:dd:fa:62:b1:
         21:e4:31:8e:f7:d4:ab:d2:18:5a:23:7b:a2:19:9e:59:bd:4f:
         8c:0e:75:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p77J1/JVmDomFvHvaVb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjBkMzYzYTBhMTdhMDY4NDUxYTg1MTQ1Y2U0ZmE0NjRk
N2ZhMWIwHhcNMjYxMDE1MTMwMjAwWhcNMjYxMDE2MTMwMjAwWjAzMTEwLwYDVQQD
EygxNDJjM2M4NjViNTg1YTQ0NTdjNzQ3M2QxMGQwMDY0ODM5YjQ1ZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu7rZNQpBXTOnh0TMrUtmkFvRT0J
b138Lovivv3uTHu5cDd2iOErV/D+6Iax4Qimweie8Wv9Pppw81OzkaSkQNTf66NA
Hq2TBVsGD+492sBFTFfQ7Aab+vwaiV8IZEA4ynxfHA0D4HnXRlIT1sB8eFlRMySE
j0+UlMexIkGNIR410VpJhv8p4ghF/wUJMnwunwbBq+F4fakKM8lYQtzhO3B+jsqQ
UHofAGyiOcb5AuFTlsF8e0JCpjeYDVYcW232KNVGpjL/LG7n/EqqvNICggNcV6bE
U5AY7Q8tCcuY6EFcADMuEne4yqth5D5LBXvRIcqYAKi2FaL31HWDU4p8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQsPIZbWFpEV8dHPRDQBkg5tF5WMB8GA1UdIwQY
MBaAFOSw02OgoXoGhFGoUUXOT6Rk1/obMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxEVFk2Q2hlZ2FFVWFoUlJjNVBwR1RYLWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80NzUzZDMtYTFlOS00ZmQ1LWFlZmUt
N2M3ZDhhNzhhOTYzLzEvNUxEVFk2Q2hlZ2FFVWFoUlJjNVBwR1RYLWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS80NzUzZDMtYTFlOS00ZmQ1LWFlZmUtN2M3ZDhhNzhhOTYz
LzEvNUxEVFk2Q2hlZ2FFVWFoUlJjNVBwR1RYLWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiSvxP4h
kJ4dQRrB7qWVXoLFJr2Oz2r/GD4zrOsmRIJ3VbiTNOXunuC5xymGjxCSuc7sHoWp
M9cc3kjhmB2MRN5RZo829afpkyMp3W0wkAVGY1lJkba2F2c2cT/0wUdxpjnYYrz9
ALrQzL6IATRtmk3dtBlNsgHuBgayL9uCE8h4cjqIyl5YbGpV6pEDlNvrkM4QVXl2
p7vBc7+fVOLRfofG6BP9Kag3RIKFl0z22d5qOSd+1C3ZvbnRLjoru4U7GaB2npgF
nmm9o1+Kg+i6H58aV9FTbglkesCYxWsVo54SgYki1g/d+mKxIeQxjvfUq9IYWiN7
ohmeWb1PjA51Tg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:06 2026 by rpki-client