Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File:                     5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier:          yD9u0JNeY/Ws0DjfWB3yOpsEmUu/dKyycnkvOMsQz9o=
Subject key identifier:   F5:C7:57:46:F7:F9:7E:FC:F1:6C:5A:F5:77:E4:72:0B:E8:1B:E6:BB
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer:       /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial:       019F1A1F533F28FA0DA2CF04C5C58E6F4D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number:          198B
Signing time:             Tue 30 Jun 2026 20:01:28 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:28 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:28 +0000
Files and hashes:         1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: MYygkHGULgkM72X+qM3DZnDZ3hRf9vtBX+WJ3BBfRDU=)
                          2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:53:3f:28:fa:0d:a2:cf:04:c5:c5:8e:6f:4d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
        Validity
            Not Before: Jun 30 20:01:28 2026 GMT
            Not After : Jul  1 20:01:28 2026 GMT
        Subject: CN=f5c75746f7f97efcf16c5af577e4720be81be6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:f9:34:8f:ad:6f:9d:9a:0a:fb:ae:a4:44:
                    19:e1:3c:31:63:b3:29:8d:c8:63:6e:35:d8:b6:7e:
                    90:40:35:9b:18:8e:0e:4d:92:05:2c:3e:1a:17:f9:
                    9c:38:ee:1b:46:6c:58:b7:63:af:6b:0d:c7:69:8c:
                    9f:11:6b:79:08:49:32:19:f2:4b:d9:eb:2e:3e:98:
                    7e:d3:8c:09:5a:70:68:23:60:9a:6b:e5:c5:d2:5d:
                    67:46:fe:3d:5f:bd:42:c4:d8:ce:67:3f:83:ce:b9:
                    31:1c:7f:2e:ab:54:9a:36:b6:53:4e:db:ec:e1:28:
                    a7:50:85:57:4d:e8:4b:52:81:d1:d6:0f:66:9f:b2:
                    91:41:34:e1:1b:fd:2d:df:9e:d9:6b:68:cc:9c:83:
                    7c:32:a7:56:cc:b2:c4:7c:c3:5a:d3:10:cd:9a:ab:
                    da:55:da:e6:b8:7a:63:c7:62:03:27:67:3c:f3:43:
                    48:f8:2e:7d:34:59:13:a8:7e:30:1a:3d:b9:67:84:
                    bd:05:65:de:9d:bf:b1:3c:95:ba:0c:99:0b:bb:db:
                    e7:91:8e:82:65:b1:c7:3e:36:6f:07:a9:c1:21:1c:
                    fa:c7:92:0e:d5:19:57:83:5d:9e:0f:75:eb:ee:d3:
                    d6:9e:5e:35:48:b9:35:06:88:46:93:1e:1c:35:ea:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:57:46:F7:F9:7E:FC:F1:6C:5A:F5:77:E4:72:0B:E8:1B:E6:BB
            X509v3 Authority Key Identifier:
                keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a5:30:97:dd:65:35:75:64:dc:0b:ae:91:96:3a:97:46:ec:
         59:ad:03:38:f2:bb:eb:a8:42:cc:ce:ad:02:d3:2e:f1:9a:2b:
         7f:6b:28:5f:23:6a:90:a6:88:16:ca:04:ee:22:7b:7d:d1:3d:
         a0:a3:89:28:7f:ee:9b:0d:5e:eb:72:6b:4d:b0:dc:2a:44:65:
         05:b6:50:82:38:f1:e8:a6:8c:29:ab:ea:af:81:31:71:88:17:
         fc:ca:33:d3:68:31:0e:79:5c:ea:d7:6b:12:12:91:9e:0c:d0:
         cf:8b:86:4f:65:50:11:74:b4:e7:a8:3d:b1:fb:e3:84:d6:12:
         0f:d5:ad:9c:5b:29:5a:db:f3:5b:53:dc:12:10:d7:e2:f9:9e:
         bd:99:95:d0:c7:92:bf:09:46:0e:02:06:5f:f0:bc:55:27:34:
         98:47:6c:7d:bd:e7:3c:86:02:fc:b5:a6:31:0b:b3:fb:ab:42:
         02:fb:a9:42:54:f8:68:13:bc:ef:0f:31:0d:f6:9f:fa:12:42:
         89:12:74:6b:92:87:73:bd:98:36:fd:2b:36:3c:3d:4c:8b:2b:
         13:0e:d0:73:b2:ce:5f:24:84:4f:7f:be:d7:1d:e7:f0:a3:03:
         a7:f6:21:20:06:a7:e6:86:0c:7d:0e:c1:2f:d2:01:10:4e:84:
         c7:70:10:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aH1M/KPoNos8ExcWOb01iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NDY4MmFkYjAyMzhjYzc3MmQxYzViNDk4NmM3YTMzOTg2
MzY0YTAwHhcNMjYwNjMwMjAwMTI4WhcNMjYwNzAxMjAwMTI4WjAzMTEwLwYDVQQD
EyhmNWM3NTc0NmY3Zjk3ZWZjZjE2YzVhZjU3N2U0NzIwYmU4MWJlNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBr5NI+tb52aCvuupEQZ4TwxY7Mp
jchjbjXYtn6QQDWbGI4OTZIFLD4aF/mcOO4bRmxYt2Ovaw3HaYyfEWt5CEkyGfJL
2esuPph+04wJWnBoI2Caa+XF0l1nRv49X71CxNjOZz+DzrkxHH8uq1SaNrZTTtvs
4SinUIVXTehLUoHR1g9mn7KRQTThG/0t357Za2jMnIN8MqdWzLLEfMNa0xDNmqva
VdrmuHpjx2IDJ2c880NI+C59NFkTqH4wGj25Z4S9BWXenb+xPJW6DJkLu9vnkY6C
ZbHHPjZvB6nBIRz6x5IO1RlXg12eD3Xr7tPWnl41SLk1BohGkx4cNeqoGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXHV0b3+X788Wxa9XfkcgvoG+a7MB8GA1UdIwQY
MBaAFOZGgq2wI4zHctHFtJhsejOYY2SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTIt
YWNlY2FkNTNjODE1LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTItYWNlY2FkNTNjODE1
LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKUwl91l
NXVk3AuukZY6l0bsWa0DOPK766hCzM6tAtMu8Zorf2soXyNqkKaIFsoE7iJ7fdE9
oKOJKH/umw1e63JrTbDcKkRlBbZQgjjx6KaMKavqr4ExcYgX/Moz02gxDnlc6tdr
EhKRngzQz4uGT2VQEXS056g9sfvjhNYSD9WtnFspWtvzW1PcEhDX4vmevZmV0MeS
vwlGDgIGX/C8VSc0mEdsfb3nPIYC/LWmMQuz+6tCAvupQlT4aBO87w8xDfaf+hJC
iRJ0a5KHc72YNv0rNjw9TIsrEw7Qc7LOXySET3++1x3n8KMDp/YhIAan5oYMfQ7B
L9IBEE6Ex3AQKw==
-----END CERTIFICATE-----
Generated at Wed Jul 1 03:23:02 2026 by rpki-client