Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          sQ/jQWbB2VWhfo+9SsIfBPpUI3nJJhp+xV5UPISfdFw=
Subject key identifier:   5A:83:91:7B:DA:58:6A:20:40:A3:F1:6F:63:06:7B:99:46:8E:96:A1
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       01A111F24A603D4A8AA1FD23CA21E8E16CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          0BD6
Signing time:             Tue 06 Oct 2026 16:00:53 +0000
Manifest this update:     Tue 06 Oct 2026 16:00:53 +0000
Manifest next update:     Wed 07 Oct 2026 16:00:53 +0000
Files and hashes:         1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: MKkSGJ0hqRAfi85NJnEIwIt4Bcb81bj+AsR253j6J/c=)
                          2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
                          3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
                          4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:f2:4a:60:3d:4a:8a:a1:fd:23:ca:21:e8:e1:6c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Oct  6 16:00:53 2026 GMT
            Not After : Oct  7 16:00:53 2026 GMT
        Subject: CN=5a83917bda586a2040a3f16f63067b99468e96a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:33:b8:44:4b:8b:9c:ff:7e:f1:d8:a8:37:
                    94:15:a8:c0:ab:1c:45:a6:9d:25:fb:a6:df:0e:a2:
                    ae:67:c8:d8:76:34:fe:a7:d7:02:a5:78:4c:19:77:
                    b5:1b:df:00:b6:81:28:de:60:ef:f5:4a:a0:5f:5d:
                    10:5e:6a:07:73:1a:f2:bb:53:9b:a4:e0:88:27:f1:
                    75:33:98:92:da:b5:0d:27:d9:03:e8:ff:b9:62:4a:
                    a2:53:a6:2e:d5:d6:1b:d3:b1:f6:14:39:19:d0:bc:
                    de:54:a6:20:89:30:3d:8a:0e:8d:39:18:6a:35:be:
                    a3:39:b8:e4:13:51:74:6e:bd:f7:ec:bf:07:3a:16:
                    06:69:1b:1c:e8:fb:f6:d4:46:0b:5d:df:d0:eb:fa:
                    6b:b1:78:2d:40:da:e6:da:a7:bc:6e:ad:9e:fe:30:
                    9a:d1:5f:d0:6e:2b:82:50:4f:9b:43:51:03:b7:e8:
                    cb:99:24:38:61:78:7d:25:ea:af:ed:f1:e6:11:37:
                    43:4b:35:7c:5a:a7:15:b7:14:cd:f8:0f:a6:05:fa:
                    12:b7:7d:45:21:4e:ab:72:75:51:54:fd:ce:4d:53:
                    b5:e1:bd:3a:f4:29:c2:49:af:d4:c3:6d:5d:ba:6c:
                    bb:0a:a1:02:bb:8a:e4:54:e9:69:e9:ab:c3:97:3b:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:83:91:7B:DA:58:6A:20:40:A3:F1:6F:63:06:7B:99:46:8E:96:A1
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:22:6f:c3:42:0c:a9:6f:43:71:a9:b0:4c:a1:be:07:75:e0:
         23:17:af:e9:17:50:f5:c0:f1:15:b0:02:d0:b9:0c:4a:77:16:
         41:77:f4:64:97:7e:19:10:b1:81:90:2b:df:74:72:9b:e7:de:
         4c:7e:09:e8:3c:ab:ce:62:a2:b8:62:0b:f7:3e:b8:32:49:23:
         71:2c:70:d0:82:ac:f8:91:d4:21:71:2a:13:4f:9e:bf:fd:25:
         29:a9:46:f8:7d:62:25:0b:3e:7a:b6:ed:c7:69:ec:57:99:26:
         ac:99:0e:f5:4c:68:e0:a6:a4:98:6c:f9:b8:80:3f:9b:65:b3:
         6b:5a:a2:3f:6f:34:c4:2c:ce:0f:d5:8e:42:52:aa:38:16:ef:
         b3:80:f8:f4:86:34:db:f8:93:62:61:af:7a:de:75:f4:7a:df:
         23:4b:ee:28:06:d4:a5:2e:70:27:35:8f:8f:00:ca:f0:d5:26:
         40:cd:fa:e8:56:12:ae:97:e9:4f:8c:05:0d:b6:d8:dc:93:1b:
         40:88:b4:fd:7b:92:2d:20:90:37:d6:d1:fc:cf:14:e8:43:33:
         89:af:57:fd:76:94:e1:74:b8:29:7e:27:ed:9c:af:cc:ca:b8:
         17:87:c3:65:0c:62:42:25:47:e0:f9:3f:a5:0b:4e:fd:27:37:
         9f:f6:e8:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaER8kpgPUqKof0jyiHo4Wz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj
YTE1NzYwHhcNMjYxMDA2MTYwMDUzWhcNMjYxMDA3MTYwMDUzWjAzMTEwLwYDVQQD
Eyg1YTgzOTE3YmRhNTg2YTIwNDBhM2YxNmY2MzA2N2I5OTQ2OGU5NmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0gzuERLi5z/fvHYqDeUFajAqxxF
pp0l+6bfDqKuZ8jYdjT+p9cCpXhMGXe1G98AtoEo3mDv9UqgX10QXmoHcxryu1Ob
pOCIJ/F1M5iS2rUNJ9kD6P+5YkqiU6Yu1dYb07H2FDkZ0LzeVKYgiTA9ig6NORhq
Nb6jObjkE1F0br337L8HOhYGaRsc6Pv21EYLXd/Q6/prsXgtQNrm2qe8bq2e/jCa
0V/QbiuCUE+bQ1EDt+jLmSQ4YXh9Jeqv7fHmETdDSzV8WqcVtxTN+A+mBfoSt31F
IU6rcnVRVP3OTVO14b069CnCSa/Uw21dumy7CqECu4rkVOlp6avDlzvWrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqDkXvaWGogQKPxb2MGe5lGjpahMB8GA1UdIwQY
MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct
NjY4M2M4ZmM5ZTViLzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi
LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiJvw0IM
qW9DcamwTKG+B3XgIxev6RdQ9cDxFbAC0LkMSncWQXf0ZJd+GRCxgZAr33Rym+fe
TH4J6DyrzmKiuGIL9z64MkkjcSxw0IKs+JHUIXEqE0+ev/0lKalG+H1iJQs+erbt
x2nsV5kmrJkO9Uxo4KakmGz5uIA/m2Wza1qiP280xCzOD9WOQlKqOBbvs4D49IY0
2/iTYmGvet519HrfI0vuKAbUpS5wJzWPjwDK8NUmQM366FYSrpfpT4wFDbbY3JMb
QIi0/XuSLSCQN9bR/M8U6EMzia9X/XaU4XS4KX4n7ZyvzMq4F4fDZQxiQiVH4Pk/
pQtO/Sc3n/boeA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:57:36 2026 by rpki-client