Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.mft
File:                     5Mkn8ZGFb4wziggnQYDrLCMwFP4.mft (raw, json)
Hash identifier:          8lXTxJNJ1hg8qQuJ7d0n5qeDYcNfy0jqWlNPhUR+JCI=
Subject key identifier:   88:5F:83:56:E9:45:80:63:C1:EE:A8:CF:F9:90:B8:EE:20:AD:4A:AE
Authority key identifier: E4:C9:27:F1:91:85:6F:8C:33:8A:08:27:41:80:EB:2C:23:30:14:FE
Certificate issuer:       /CN=e4c927f191856f8c338a08274180eb2c233014fe
Certificate serial:       01A114F3974C2B24EABB77BA28D391F3A85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.mft
Manifest number:          23
Signing time:             Wed 07 Oct 2026 06:01:10 +0000
Manifest this update:     Wed 07 Oct 2026 06:01:10 +0000
Manifest next update:     Thu 08 Oct 2026 06:01:10 +0000
Files and hashes:         1: 5Mkn8ZGFb4wziggnQYDrLCMwFP4.crl (hash: CT1jFNX42l6tlT1GBl+QeYgHp//h+GPpJFnX5TC75FQ=)
                          2: Qrnbtg1ABIRqYEEbSpq4u-PwtAo.asa (hash: 4hMIFS3L1XCWD3JKP9t7vK5pQjHsvDgvvQ/XNCbuhMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:f3:97:4c:2b:24:ea:bb:77:ba:28:d3:91:f3:a8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c927f191856f8c338a08274180eb2c233014fe
        Validity
            Not Before: Oct  7 06:01:10 2026 GMT
            Not After : Oct  8 06:01:10 2026 GMT
        Subject: CN=885f8356e9458063c1eea8cff990b8ee20ad4aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:79:50:f1:58:22:36:75:e6:9c:97:53:67:
                    6a:04:74:d1:13:a9:a7:85:e1:15:18:79:1e:be:fb:
                    37:ec:19:d6:e8:15:a1:ef:f5:d9:3b:32:10:dd:c4:
                    45:36:59:f3:b4:39:ca:ec:c3:f3:e2:23:78:0e:46:
                    b5:b9:35:68:34:71:33:9d:98:6e:68:2e:a5:4c:63:
                    a7:87:ab:bc:71:37:15:e7:0a:c1:1d:62:d1:7b:5e:
                    85:f9:27:d1:6e:41:94:d9:79:42:b1:98:73:ee:2d:
                    16:e9:e4:04:9b:05:b3:e5:52:6b:32:c5:21:0e:ad:
                    86:33:d5:40:e5:30:bd:ad:c0:05:82:ba:60:d0:92:
                    e0:08:cc:cd:dc:05:c1:8e:ba:e8:30:ee:e9:79:01:
                    ab:b5:a2:71:32:53:06:1e:eb:b0:df:7c:eb:0a:96:
                    ca:e1:48:ec:93:53:6f:76:56:d7:24:a8:65:65:24:
                    87:b2:a9:34:23:2b:6a:f0:39:e6:82:d3:4a:04:d6:
                    80:54:6d:23:21:1a:6e:ba:36:a8:7c:9c:3a:d8:4f:
                    03:d2:86:6b:4b:a7:a3:40:8f:38:f8:34:ad:2e:8b:
                    c4:c5:c0:b5:69:c8:42:d6:2c:19:77:77:cd:e3:f4:
                    cf:a0:db:08:26:23:f8:b6:15:6d:2f:0b:9e:22:61:
                    16:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5F:83:56:E9:45:80:63:C1:EE:A8:CF:F9:90:B8:EE:20:AD:4A:AE
            X509v3 Authority Key Identifier:
                keyid:E4:C9:27:F1:91:85:6F:8C:33:8A:08:27:41:80:EB:2C:23:30:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d3:d5:4f:c4:80:d6:05:90:32:e7:d7:7d:e4:4e:29:5d:c0:
         e6:84:3b:29:ee:8b:01:87:49:1b:08:b3:56:a9:b0:65:7d:60:
         d5:3b:f2:7d:bc:6e:0b:2a:bc:4c:bd:e3:eb:5c:54:c9:0e:22:
         42:f9:85:34:65:50:ab:dc:c2:f7:80:3b:7b:a7:97:00:46:3a:
         85:2e:ce:4d:0d:5f:91:63:31:47:27:f4:de:d4:64:8a:d8:13:
         9e:06:06:69:45:75:74:47:a9:90:e5:2b:83:26:53:20:1e:fa:
         fa:a7:28:05:6b:ec:1d:a7:83:5d:bb:f9:26:27:b3:92:b8:72:
         2e:cf:37:83:91:5a:4f:a7:c0:dc:6b:e3:d4:2e:cc:2a:d9:2e:
         b3:e9:94:85:4b:02:98:d1:d7:ae:1f:83:2a:1d:fe:df:bf:01:
         e5:41:10:fb:53:da:ac:e1:7d:f9:b0:fc:af:f1:35:a9:ac:bf:
         24:cc:d7:af:cd:45:64:c5:ff:cf:bb:05:7e:68:b0:1b:c7:8a:
         9c:c7:eb:f9:15:f0:8f:08:c3:bc:99:1c:b6:14:7e:c7:70:4d:
         91:80:60:05:d2:74:8a:52:4c:2c:22:f6:9a:80:9f:e8:1a:6d:
         84:53:a4:b6:49:25:d1:a1:bd:67:89:ea:2d:fd:03:cc:73:15:
         22:76:a0:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEU85dMKyTqu3e6KNOR86haMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YzkyN2YxOTE4NTZmOGMzMzhhMDgyNzQxODBlYjJjMjMz
MDE0ZmUwHhcNMjYxMDA3MDYwMTEwWhcNMjYxMDA4MDYwMTEwWjAzMTEwLwYDVQQD
Eyg4ODVmODM1NmU5NDU4MDYzYzFlZWE4Y2ZmOTkwYjhlZTIwYWQ0YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0N5UPFYIjZ15pyXU2dqBHTRE6mn
heEVGHkevvs37BnW6BWh7/XZOzIQ3cRFNlnztDnK7MPz4iN4Dka1uTVoNHEznZhu
aC6lTGOnh6u8cTcV5wrBHWLRe16F+SfRbkGU2XlCsZhz7i0W6eQEmwWz5VJrMsUh
Dq2GM9VA5TC9rcAFgrpg0JLgCMzN3AXBjrroMO7peQGrtaJxMlMGHuuw33zrCpbK
4Ujsk1NvdlbXJKhlZSSHsqk0Iytq8DnmgtNKBNaAVG0jIRpuujaofJw62E8D0oZr
S6ejQI84+DStLovExcC1achC1iwZd3fN4/TPoNsIJiP4thVtLwueImEWzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhfg1bpRYBjwe6oz/mQuO4grUquMB8GA1UdIwQY
MBaAFOTJJ/GRhW+MM4oIJ0GA6ywjMBT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1rbjhaR0ZiNHd6aWdnblFZRHJMQ013RlA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mMDBmNmYtOTU4MS00M2ZiLWFjNTct
MDI2Y2EyNmY1ZjRkLzEvNU1rbjhaR0ZiNHd6aWdnblFZRHJMQ013RlA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mMDBmNmYtOTU4MS00M2ZiLWFjNTctMDI2Y2EyNmY1ZjRk
LzEvNU1rbjhaR0ZiNHd6aWdnblFZRHJMQ013RlA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtPVT8SA
1gWQMufXfeROKV3A5oQ7Ke6LAYdJGwizVqmwZX1g1TvyfbxuCyq8TL3j61xUyQ4i
QvmFNGVQq9zC94A7e6eXAEY6hS7OTQ1fkWMxRyf03tRkitgTngYGaUV1dEepkOUr
gyZTIB76+qcoBWvsHaeDXbv5JiezkrhyLs83g5FaT6fA3Gvj1C7MKtkus+mUhUsC
mNHXrh+DKh3+378B5UEQ+1ParOF9+bD8r/E1qay/JMzXr81FZMX/z7sFfmiwG8eK
nMfr+RXwjwjDvJkcthR+x3BNkYBgBdJ0ilJMLCL2moCf6BpthFOktkkl0aG9Z4nq
Lf0DzHMVInagQw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:17 2026 by rpki-client