Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File:                     5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier:          n24BFfhZ//hRiFknMcE4v376lb0ZOa5jEMexcXctTl8=
Subject key identifier:   9C:8F:68:48:1E:6F:C9:C5:5A:94:35:A2:12:ED:C9:63:2B:65:FD:6A
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer:       /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial:       01A142A828A3E8EFF2AB530248E49510E30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number:          10AE
Signing time:             Fri 16 Oct 2026 03:01:19 +0000
Manifest this update:     Fri 16 Oct 2026 03:01:19 +0000
Manifest next update:     Sat 17 Oct 2026 03:01:19 +0000
Files and hashes:         1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: bOKzlfqSYuyCZU2+OpwQRA50lXx/Dx6HBkfWIUk4j2k=)
                          2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:a8:28:a3:e8:ef:f2:ab:53:02:48:e4:95:10:e3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
        Validity
            Not Before: Oct 16 03:01:19 2026 GMT
            Not After : Oct 17 03:01:19 2026 GMT
        Subject: CN=9c8f68481e6fc9c55a9435a212edc9632b65fd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:29:f0:5c:92:c1:ce:d7:db:69:6a:34:bb:
                    4d:d1:7e:5c:f5:58:43:ab:ff:1d:5d:6b:68:11:5f:
                    da:9f:d7:6b:6e:e2:ec:9d:79:ef:e0:52:79:9c:e8:
                    f0:82:25:3a:d6:4b:92:d5:63:d8:63:c4:48:cd:30:
                    76:a8:d4:11:df:b3:1c:29:ea:57:30:26:e9:2a:ad:
                    18:8a:99:58:77:e0:f9:18:27:32:38:09:59:50:8f:
                    bb:5b:c1:ce:2c:99:9b:a0:81:90:4b:1c:85:ef:c8:
                    b4:81:b1:14:69:e8:d5:4e:75:69:ef:14:87:c6:b5:
                    88:42:94:17:23:b5:a5:02:6c:02:6f:9e:b4:05:4f:
                    c4:59:80:03:ca:cb:66:fa:dd:31:05:fa:b7:6d:b1:
                    7a:18:8c:76:54:24:f3:ec:d3:78:c5:ba:5a:0f:7c:
                    3c:5f:59:10:b1:0c:8c:65:52:da:12:0c:1a:b1:93:
                    df:61:c6:16:ed:a1:69:68:7d:38:21:f0:a5:35:1a:
                    9f:50:70:a9:10:7b:7c:ff:b6:ab:53:15:42:9c:d5:
                    cd:89:c4:4c:34:c1:a0:9b:ed:71:0b:69:9c:c7:5f:
                    7e:5f:69:d0:35:41:b0:b0:36:ed:4d:d7:8f:fb:5d:
                    f9:4a:a1:40:06:39:e2:4c:55:70:00:d4:ae:4f:c2:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8F:68:48:1E:6F:C9:C5:5A:94:35:A2:12:ED:C9:63:2B:65:FD:6A
            X509v3 Authority Key Identifier:
                keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:85:86:db:6f:c2:d8:05:d3:67:08:0a:79:dc:40:60:dc:6c:
         fc:d7:b4:f5:99:a9:4f:85:21:0a:6f:ab:d0:36:42:48:f9:6a:
         38:ed:f4:dc:ac:61:8d:42:3f:75:5c:a2:dd:64:bd:fc:67:b1:
         6c:a8:e6:64:e4:d0:76:98:15:9b:0b:ed:b7:9f:29:ca:0d:a7:
         35:73:74:c0:84:fa:5f:9b:b4:a1:57:8f:61:09:14:25:f8:db:
         1f:2c:34:e5:96:4f:57:4a:08:e8:29:00:dc:71:c8:5a:63:84:
         9a:f5:c9:d9:05:f4:49:4e:26:f1:bf:6b:5e:40:31:7f:5b:49:
         28:5a:f7:57:fd:37:6e:2a:f0:07:bc:22:0c:c3:b7:57:0f:5f:
         a8:f3:25:3a:22:0f:e9:b9:d3:71:cf:a0:d0:dd:d4:cd:24:62:
         7f:4b:77:82:2f:26:c5:e5:0e:ab:32:fa:f5:c4:26:37:6a:ed:
         7e:d0:8c:02:e4:cf:a1:85:71:f8:8b:d6:b5:7a:ec:61:fd:3f:
         8b:03:07:18:f5:7b:dd:cf:8d:5f:67:5b:f0:ca:68:0d:fb:37:
         e2:a9:26:38:ab:35:8a:77:70:09:51:db:be:ff:6a:f4:20:81:
         5e:5d:3c:24:b9:f6:8b:f9:91:5f:18:d9:38:0c:01:bc:a8:7d:
         99:93:93:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCqCij6O/yq1MCSOSVEOMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjE1OGVmZmM2YjM4ODJhMjU5MGMxZTY5MDZhY2ExMDhl
MThlYzIwHhcNMjYxMDE2MDMwMTE5WhcNMjYxMDE3MDMwMTE5WjAzMTEwLwYDVQQD
Eyg5YzhmNjg0ODFlNmZjOWM1NWE5NDM1YTIxMmVkYzk2MzJiNjVmZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTwp8FySwc7X22lqNLtN0X5c9VhD
q/8dXWtoEV/an9drbuLsnXnv4FJ5nOjwgiU61kuS1WPYY8RIzTB2qNQR37McKepX
MCbpKq0YiplYd+D5GCcyOAlZUI+7W8HOLJmboIGQSxyF78i0gbEUaejVTnVp7xSH
xrWIQpQXI7WlAmwCb560BU/EWYADystm+t0xBfq3bbF6GIx2VCTz7NN4xbpaD3w8
X1kQsQyMZVLaEgwasZPfYcYW7aFpaH04IfClNRqfUHCpEHt8/7arUxVCnNXNicRM
NMGgm+1xC2mcx19+X2nQNUGwsDbtTdeP+135SqFABjniTFVwANSuT8LLoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyPaEgeb8nFWpQ1ohLtyWMrZf1qMB8GA1UdIwQY
MBaAFOTxWO/8aziColkMHmkGrKEI4Y7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAt
YzY5MzI0OTY1MWQ1LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAtYzY5MzI0OTY1MWQ1
LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoWG22/C
2AXTZwgKedxAYNxs/Ne09ZmpT4UhCm+r0DZCSPlqOO303KxhjUI/dVyi3WS9/Gex
bKjmZOTQdpgVmwvtt58pyg2nNXN0wIT6X5u0oVePYQkUJfjbHyw05ZZPV0oI6CkA
3HHIWmOEmvXJ2QX0SU4m8b9rXkAxf1tJKFr3V/03birwB7wiDMO3Vw9fqPMlOiIP
6bnTcc+g0N3UzSRif0t3gi8mxeUOqzL69cQmN2rtftCMAuTPoYVx+IvWtXrsYf0/
iwMHGPV73c+NX2db8MpoDfs34qkmOKs1indwCVHbvv9q9CCBXl08JLn2i/mRXxjZ
OAwBvKh9mZOTOA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 08:10:18 2026 by rpki-client