Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File:                     5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier:          z6vd++UvVEhd3YOHwgfFGQPTyQITgC5Io9T0l8vl06w=
Subject key identifier:   AB:DB:45:13:74:02:23:06:39:11:26:10:E5:95:9E:37:A9:95:2B:70
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer:       /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial:       01A0005C563CAA649DAA14B5B4D0F1C6B4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 13:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:46 +0000
Files and hashes:         1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
                          2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: u+tJ2TwW3JD7QyBD5kDht53A1rO42hq6yiEOWuKaDx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:56:3c:aa:64:9d:aa:14:b5:b4:d0:f1:c6:b4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
        Validity
            Not Before: Aug 14 13:00:46 2026 GMT
            Not After : Aug 15 13:00:46 2026 GMT
        Subject: CN=abdb45137402230639112610e5959e37a9952b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:de:c9:74:75:a2:a4:47:7d:95:42:ab:dd:
                    54:b5:e7:58:03:d3:f3:c3:7c:bc:42:76:81:a5:26:
                    2a:fe:14:62:2c:60:fb:f9:ce:9e:60:bc:64:84:ee:
                    b9:d4:ed:a5:bb:50:e1:58:8f:d0:e0:e7:e4:33:bd:
                    91:8e:98:79:64:1e:58:84:27:d6:85:fd:80:f7:95:
                    1b:74:a2:d4:7f:44:21:fc:10:86:3d:7b:55:a5:98:
                    a1:f6:38:06:99:07:3e:84:21:99:f6:1d:7b:21:5e:
                    ef:b1:cf:c8:eb:37:b0:f7:e1:1c:4c:a0:16:ad:54:
                    7d:8b:d9:e2:df:ca:b4:c9:32:a6:43:ad:b7:58:f6:
                    ca:8a:62:db:62:e0:ea:e1:31:a6:c0:e6:31:d3:0f:
                    85:89:50:d1:68:44:99:2f:9a:6c:78:37:54:cb:bd:
                    6d:81:b9:34:68:e2:1f:4d:a4:f3:be:22:7c:45:c3:
                    ac:75:eb:0d:49:2e:9b:f7:e4:49:22:35:f0:34:23:
                    59:f6:87:df:80:4d:5f:30:61:2c:2b:3d:ae:32:ee:
                    aa:fb:aa:ae:ae:20:39:59:94:35:d1:b7:91:ec:27:
                    20:58:41:e6:0d:ab:d9:89:cf:87:d5:f6:6a:b0:11:
                    96:83:95:2e:8f:ce:5f:98:f0:04:4f:e7:bb:3b:5e:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DB:45:13:74:02:23:06:39:11:26:10:E5:95:9E:37:A9:95:2B:70
            X509v3 Authority Key Identifier:
                keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:82:3a:aa:47:95:11:61:d5:97:39:1b:5f:82:86:2e:ba:96:
         07:64:8c:20:59:02:c8:73:99:cc:2e:4c:dc:57:8a:a5:b1:8e:
         51:0e:7d:90:fe:f7:0b:2d:31:9e:ab:a7:82:3c:db:77:17:f3:
         a2:15:d7:5e:71:7c:6f:5b:eb:07:98:88:4e:77:12:39:66:a3:
         9c:3c:7f:40:f9:f5:e7:a0:a7:7c:b8:3e:06:31:c9:bf:97:2c:
         4b:39:ba:c0:95:8f:63:d2:37:d6:f6:db:e0:65:06:d2:5b:43:
         2e:68:b0:57:55:19:88:e9:e0:e9:66:46:23:81:5f:e3:e7:af:
         a4:91:cf:ad:59:ad:fd:59:44:24:97:23:93:e9:90:d1:d4:5d:
         fd:ea:f6:4a:33:9a:d7:47:cf:83:97:5a:fb:9a:f7:07:ad:2f:
         31:00:d2:ab:86:5a:43:10:3a:b9:d1:aa:85:91:58:cf:e6:4d:
         74:8a:26:1b:0a:1e:9d:70:00:a6:bb:5a:9f:20:cd:9d:9e:ed:
         1e:30:42:07:29:f8:bb:09:38:9b:1b:4c:de:26:d9:9e:be:35:
         a1:13:95:9f:a4:a9:4f:64:c0:1e:3c:df:ee:bd:31:32:bb:81:
         ee:e2:4b:17:fa:03:d5:b5:75:cf:cc:59:7c:1e:24:b8:f7:9a:
         84:3d:78:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXFY8qmSdqhS1tNDxxrT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2ZlMzM1MWE1ZTYyNjRhMWY4MTI5YzEwMjUxZDllODk2
ZTgwNjIwHhcNMjYwODE0MTMwMDQ2WhcNMjYwODE1MTMwMDQ2WjAzMTEwLwYDVQQD
EyhhYmRiNDUxMzc0MDIyMzA2MzkxMTI2MTBlNTk1OWUzN2E5OTUyYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6LeyXR1oqRHfZVCq91UtedYA9Pz
w3y8QnaBpSYq/hRiLGD7+c6eYLxkhO651O2lu1DhWI/Q4OfkM72Rjph5ZB5YhCfW
hf2A95UbdKLUf0Qh/BCGPXtVpZih9jgGmQc+hCGZ9h17IV7vsc/I6zew9+EcTKAW
rVR9i9ni38q0yTKmQ623WPbKimLbYuDq4TGmwOYx0w+FiVDRaESZL5pseDdUy71t
gbk0aOIfTaTzviJ8RcOsdesNSS6b9+RJIjXwNCNZ9offgE1fMGEsKz2uMu6q+6qu
riA5WZQ10beR7CcgWEHmDavZic+H1fZqsBGWg5Uuj85fmPAET+e7O16UwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvbRRN0AiMGOREmEOWVnjeplStwMB8GA1UdIwQY
MBaAFOc/4zUaXmJkofgSnBAlHZ6JboBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgt
MDI0YzFlZGQ2MmVjLzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgtMDI0YzFlZGQ2MmVj
LzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy4I6qkeV
EWHVlzkbX4KGLrqWB2SMIFkCyHOZzC5M3FeKpbGOUQ59kP73Cy0xnqungjzbdxfz
ohXXXnF8b1vrB5iITncSOWajnDx/QPn156CnfLg+BjHJv5csSzm6wJWPY9I31vbb
4GUG0ltDLmiwV1UZiOng6WZGI4Ff4+evpJHPrVmt/VlEJJcjk+mQ0dRd/er2SjOa
10fPg5da+5r3B60vMQDSq4ZaQxA6udGqhZFYz+ZNdIomGwoenXAAprtanyDNnZ7t
HjBCByn4uwk4mxtM3ibZnr41oROVn6SpT2TAHjzf7r0xMruB7uJLF/oD1bV1z8xZ
fB4kuPeahD145w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:52 2026 by rpki-client