Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
File:                     5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json)
Hash identifier:          csKsGhEfqW7ngylWnT+hUvfCx3ecKpMErHi64b1FCdk=
Subject key identifier:   14:4A:18:E9:55:13:59:90:83:5D:83:D2:31:4D:A9:EB:89:07:53:DA
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Certificate issuer:       /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial:       019FF7FE8A5ECAEB2E223F2A29F013F92B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
Manifest number:          0863
Signing time:             Wed 12 Aug 2026 22:01:21 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:21 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:21 +0000
Files and hashes:         1: 4p5MDgx80WrNV4qWtYD29zqy-Vk.roa (hash: 1uvtk+0FlzJu9XJBd0te2sWPClZtr04c0PqiVDd+kic=)
                          2: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: fJGQbvJQosEg1oUZogZRy0ZzJV9AwgxjgjrvkdFHPCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:fe:8a:5e:ca:eb:2e:22:3f:2a:29:f0:13:f9:2b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
        Validity
            Not Before: Aug 12 22:01:21 2026 GMT
            Not After : Aug 13 22:01:21 2026 GMT
        Subject: CN=144a18e955135990835d83d2314da9eb890753da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:33:20:79:fa:f8:61:9f:71:23:06:73:d3:
                    b2:ef:68:4a:cc:23:e0:02:32:4d:25:82:59:65:6d:
                    39:2b:36:b8:96:f5:3c:86:81:1e:24:34:fc:0a:c4:
                    94:e3:a4:4e:63:77:2d:8b:a4:fd:32:78:56:4a:3e:
                    c7:9b:3e:77:be:de:93:22:4f:84:b5:1d:55:b8:6c:
                    88:3f:8e:84:67:f2:b8:40:6c:7e:c1:37:db:1e:64:
                    14:b7:64:8f:3e:52:1b:bf:d1:93:09:40:4c:a8:fb:
                    ca:f6:88:9a:47:7d:c8:de:c6:05:ed:2e:bd:f8:08:
                    cd:56:b4:78:77:c5:20:a2:7e:a8:41:e1:62:0d:05:
                    9c:e5:97:99:05:e1:44:bd:3b:ca:60:70:3b:3f:87:
                    51:01:b2:f0:8f:6b:80:16:eb:3c:b5:a3:4c:aa:da:
                    93:81:71:c9:c4:00:18:99:83:48:62:8c:0e:b5:a1:
                    a3:15:b0:60:b8:68:f5:4e:01:60:51:5d:93:81:e5:
                    94:3d:97:5b:fc:f4:01:c5:5c:70:6a:35:ba:ae:43:
                    81:4f:32:b2:9a:3b:95:9d:ed:4c:c8:2a:75:e7:a2:
                    fa:4d:6a:67:ca:26:f9:9a:fe:32:1d:a5:24:eb:3e:
                    d6:05:ca:2c:5f:59:e9:6a:21:c5:41:36:2a:5b:d2:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4A:18:E9:55:13:59:90:83:5D:83:D2:31:4D:A9:EB:89:07:53:DA
            X509v3 Authority Key Identifier:
                keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:20:33:29:e1:15:f0:b6:5e:8f:9e:dc:91:fe:02:a5:65:14:
         fe:15:39:ae:10:fb:cf:88:87:fd:a4:57:fb:c2:c1:42:1e:4f:
         4d:84:cb:c7:63:82:59:91:f6:5d:6a:14:72:39:26:1d:1b:ee:
         f5:27:d8:38:71:97:d5:96:4b:a9:83:d4:bc:e9:55:8c:e9:60:
         e7:fc:c5:c0:bb:d9:80:e9:18:17:9c:40:4e:16:86:02:5e:d3:
         35:1d:41:6c:7b:4b:33:29:fa:a6:c5:ee:7d:e5:8e:a0:82:c3:
         7e:e6:01:e8:c0:26:24:b1:37:2a:7a:0a:d8:0c:cf:11:84:48:
         aa:8a:09:f4:85:93:65:37:15:d6:dd:ee:86:f6:30:cb:c3:f9:
         1b:45:fa:b7:ef:88:28:11:b5:3a:36:51:ad:c3:32:3d:84:16:
         11:90:8e:f4:e6:3c:0b:2f:61:f1:2b:4e:0f:26:03:71:e9:bf:
         09:cc:3e:ca:2e:30:11:e4:37:8d:7b:41:38:e5:bb:44:20:3e:
         1e:18:64:09:8e:22:22:a4:8d:9d:43:93:50:65:02:0b:7d:20:
         da:5a:a8:a1:09:d6:c5:26:58:fc:0e:44:9e:c7:9b:ba:79:0c:
         a8:f8:ba:e7:c3:19:9c:26:81:49:db:d9:b6:f1:75:75:40:a9:
         08:4a:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:28:10 2026 by rpki-client