Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
File:                     5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json)
Hash identifier:          7wkrJzkt1+w5iouYynymH0G7Oq+MmHw3K82X9M7s97o=
Subject key identifier:   BA:33:D5:90:DB:E5:8E:0E:E8:C8:D4:D6:61:D2:C9:92:D3:DD:89:65
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Certificate issuer:       /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial:       01A13E5D2E294F47A35DFB95124E20B06763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
Manifest number:          090C
Signing time:             Thu 15 Oct 2026 07:00:56 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:56 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:56 +0000
Files and hashes:         1: 4p5MDgx80WrNV4qWtYD29zqy-Vk.roa (hash: 1uvtk+0FlzJu9XJBd0te2sWPClZtr04c0PqiVDd+kic=)
                          2: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: jvuHygRCO2tE476HJxJ+jkSfI0Ol+k3xRmFqnicNJOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5d:2e:29:4f:47:a3:5d:fb:95:12:4e:20:b0:67:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
        Validity
            Not Before: Oct 15 07:00:56 2026 GMT
            Not After : Oct 16 07:00:56 2026 GMT
        Subject: CN=ba33d590dbe58e0ee8c8d4d661d2c992d3dd8965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:30:d1:6e:39:0d:15:e2:36:40:b8:22:01:a9:
                    6d:c7:6b:70:19:ab:89:d4:e4:f3:05:dd:c1:7c:91:
                    30:cb:d5:8a:96:ad:2b:c0:ab:97:25:02:d3:3b:bb:
                    cb:d6:f5:17:d9:7c:47:eb:cb:40:b0:f7:4d:d5:1b:
                    92:99:10:89:4f:6f:39:84:74:bc:38:ff:aa:0a:42:
                    dd:fd:78:cb:c1:44:63:7e:ee:fb:73:da:6f:8b:b5:
                    a4:38:2f:e3:f2:70:3c:1a:aa:d9:0f:4c:dc:c7:c0:
                    b5:e1:57:2b:ac:e3:51:c3:f4:52:1e:78:1c:71:74:
                    4f:a2:38:3f:bc:dc:17:35:60:19:e4:4c:e3:df:09:
                    8b:62:45:61:46:b9:0c:6c:62:5d:93:f3:7d:21:a4:
                    98:f4:15:87:5a:7e:3a:40:7a:7e:85:e9:db:f6:2b:
                    d9:a8:28:0e:fa:bf:a3:c1:d7:d7:3a:86:95:eb:03:
                    aa:cf:ac:8e:a5:27:7c:fb:c9:9f:46:ec:d4:c7:a4:
                    26:1a:c3:65:ad:72:71:b5:02:75:07:da:ab:ce:ad:
                    5a:e9:fd:51:a4:4a:84:1c:fc:0f:d1:58:99:ca:92:
                    07:10:24:57:06:71:65:f3:a7:70:4f:a7:b9:3f:3c:
                    8e:16:2d:47:7b:25:6c:6c:db:04:96:c0:94:71:f7:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:33:D5:90:DB:E5:8E:0E:E8:C8:D4:D6:61:D2:C9:92:D3:DD:89:65
            X509v3 Authority Key Identifier:
                keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b5:98:6f:a2:5f:7f:51:73:3f:d4:4c:17:f7:a1:22:3d:3c:
         b7:57:75:46:7f:c2:f4:30:18:23:91:fb:c4:ad:76:a5:13:18:
         1b:5b:4a:6b:35:c9:b2:bb:79:2e:4c:a5:30:6e:62:b3:c2:42:
         ed:c2:8c:07:d2:8f:0f:87:cd:52:87:8a:a3:f3:fb:2e:6a:40:
         f7:2d:1b:8b:e5:a5:6d:13:cf:d5:8d:1e:64:66:9f:d1:51:95:
         55:d2:c5:08:73:3e:d5:93:22:6e:da:db:af:9a:59:6e:0f:95:
         5a:45:ca:05:44:d0:09:3e:e1:ec:63:84:89:06:4f:08:dd:20:
         49:0d:58:30:60:e1:8f:f3:26:75:95:0f:50:38:64:0d:fe:96:
         2b:e5:95:da:0f:c5:63:33:08:98:20:87:2f:61:95:5e:13:08:
         92:09:58:72:10:69:41:80:be:a3:83:87:68:92:ad:8e:02:ce:
         99:8b:64:fe:8f:d1:ed:06:ff:cb:8f:db:e1:40:fb:6a:e4:23:
         66:86:2e:9a:8d:1a:61:a3:81:80:b6:b9:90:a9:43:12:9d:e2:
         06:48:41:a2:b6:4b:fc:73:9d:e0:aa:23:72:e3:71:f0:48:c5:
         8a:f2:7d:6f:97:04:95:65:19:96:b7:ca:c4:c9:0e:11:c8:16:
         e3:77:f5:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XS4pT0ejXfuVEk4gsGdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZThhODE1ZmQzNThhZTc2ZDI3NGIwNDViMGE3MTViZDUx
YzYyNzgwHhcNMjYxMDE1MDcwMDU2WhcNMjYxMDE2MDcwMDU2WjAzMTEwLwYDVQQD
EyhiYTMzZDU5MGRiZTU4ZTBlZThjOGQ0ZDY2MWQyYzk5MmQzZGQ4OTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jDRbjkNFeI2QLgiAaltx2twGauJ
1OTzBd3BfJEwy9WKlq0rwKuXJQLTO7vL1vUX2XxH68tAsPdN1RuSmRCJT285hHS8
OP+qCkLd/XjLwURjfu77c9pvi7WkOC/j8nA8GqrZD0zcx8C14VcrrONRw/RSHngc
cXRPojg/vNwXNWAZ5Ezj3wmLYkVhRrkMbGJdk/N9IaSY9BWHWn46QHp+henb9ivZ
qCgO+r+jwdfXOoaV6wOqz6yOpSd8+8mfRuzUx6QmGsNlrXJxtQJ1B9qrzq1a6f1R
pEqEHPwP0ViZypIHECRXBnFl86dwT6e5PzyOFi1HeyVsbNsElsCUcff/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoz1ZDb5Y4O6MjU1mHSyZLT3YllMB8GA1UdIwQY
MBaAFOXoqBX9NYrnbSdLBFsKcVvVHGJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2Mt
Nzg2ZGUzZDFhYmU0LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2MtNzg2ZGUzZDFhYmU0
LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrWYb6Jf
f1FzP9RMF/ehIj08t1d1Rn/C9DAYI5H7xK12pRMYG1tKazXJsrt5LkylMG5is8JC
7cKMB9KPD4fNUoeKo/P7LmpA9y0bi+WlbRPP1Y0eZGaf0VGVVdLFCHM+1ZMibtrb
r5pZbg+VWkXKBUTQCT7h7GOEiQZPCN0gSQ1YMGDhj/MmdZUPUDhkDf6WK+WV2g/F
YzMImCCHL2GVXhMIkglYchBpQYC+o4OHaJKtjgLOmYtk/o/R7Qb/y4/b4UD7auQj
ZoYumo0aYaOBgLa5kKlDEp3iBkhBorZL/HOd4KojcuNx8EjFivJ9b5cElWUZlrfK
xMkOEcgW43f1Jg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:48 2026 by rpki-client