Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File:                     5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier:          3FCnY0aaRbFfaQhGywJqbmaRVwM3uazDWAJEM+XmQUc=
Subject key identifier:   C3:A7:0F:E6:5F:26:19:A4:F1:72:E5:3C:20:06:0E:85:CC:1D:EC:75
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer:       /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial:       01A13ECB5DD035CA7A95523C20869FC68A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number:          10AC
Signing time:             Thu 15 Oct 2026 09:01:17 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:17 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:17 +0000
Files and hashes:         1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: CPo+G2QnpY9D9CqG4xxg9sYwmwNJv986hEJPp93iPgA=)
                          2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:5d:d0:35:ca:7a:95:52:3c:20:86:9f:c6:8a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
        Validity
            Not Before: Oct 15 09:01:17 2026 GMT
            Not After : Oct 16 09:01:17 2026 GMT
        Subject: CN=c3a70fe65f2619a4f172e53c20060e85cc1dec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:df:a2:c6:87:33:30:01:34:db:3c:47:29:
                    9f:e0:c2:83:61:ac:20:4e:36:50:6e:84:fd:fc:c1:
                    d8:87:b0:bc:a1:a5:47:cc:3b:ff:16:b0:7e:d1:74:
                    1e:f1:8c:63:a0:77:94:7d:23:0c:5e:72:6f:bf:59:
                    49:af:1c:a2:ff:26:c2:fd:fc:60:af:5a:9c:7a:95:
                    ec:22:d9:b8:53:be:ab:b1:ba:db:9f:fb:49:9c:b2:
                    53:bb:0e:b1:ab:8a:31:a4:e1:4c:e4:00:da:5c:7a:
                    41:5c:43:20:25:c2:a5:af:47:69:b2:15:1d:20:90:
                    b5:72:9a:a3:e2:e1:18:f2:0c:ac:3a:37:ad:9c:59:
                    27:4a:6b:0d:de:25:f5:ac:4a:fb:f3:3c:ad:39:1f:
                    9f:47:e9:b1:3e:c1:c6:9b:12:0f:50:3f:b1:d0:0f:
                    43:2a:5e:33:9b:56:cc:9b:dc:69:e2:25:dc:8b:40:
                    6f:b3:8b:fd:0c:20:c6:f1:a4:b0:fb:56:3b:50:f7:
                    3f:bc:0f:52:e4:33:82:e0:46:b4:38:16:5b:cb:ee:
                    92:d5:1b:a5:5b:bd:de:42:2b:b8:0b:78:34:ee:97:
                    6e:c8:03:95:a6:c7:2e:19:0e:24:0d:b3:85:df:a4:
                    a1:96:43:bd:a9:b1:1b:83:da:d6:ed:7b:6c:50:58:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A7:0F:E6:5F:26:19:A4:F1:72:E5:3C:20:06:0E:85:CC:1D:EC:75
            X509v3 Authority Key Identifier:
                keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:99:e9:07:25:1a:01:52:bc:ac:aa:92:14:98:0d:cf:f7:4e:
         3e:5d:a4:0d:9e:e9:8a:32:04:5b:71:22:3f:61:1f:e0:7e:9b:
         7e:11:2a:e4:b9:3e:78:0d:53:55:55:d1:55:13:45:ab:84:7c:
         7c:31:6f:82:a5:aa:7f:e0:96:74:ff:95:e9:f8:82:aa:d1:85:
         da:9b:a1:98:37:a5:ff:98:d4:fc:e7:10:9e:8d:89:81:ac:3c:
         5c:b5:56:01:e3:cb:02:ea:7c:6e:ec:6f:97:e0:01:b9:73:d6:
         0e:98:b9:e8:af:c7:4e:2e:82:0a:1d:96:6e:32:9a:27:fd:bf:
         e6:25:cf:38:ce:16:20:fa:1e:25:53:3c:0b:81:37:21:16:d1:
         5c:9b:81:ed:b3:e3:f8:ce:25:5b:54:60:67:95:38:2a:e0:9b:
         83:bf:d8:7d:2e:6f:d7:8b:db:52:68:13:2d:25:3b:de:f3:7a:
         0c:9a:d7:f5:da:5e:46:73:5d:b8:4d:fa:c7:e9:aa:4a:b9:a6:
         a1:24:6b:8a:be:97:14:2c:e8:2f:a9:24:f4:c5:57:ec:29:74:
         37:2a:93:25:4f:77:93:0f:41:70:ec:91:a0:fa:f3:a4:24:9d:
         d4:81:ae:2e:a9:f0:cd:9e:0d:09:35:a8:b8:76:85:6a:0a:ac:
         3b:d3:7e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y13QNcp6lVI8IIafxooIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjE1OGVmZmM2YjM4ODJhMjU5MGMxZTY5MDZhY2ExMDhl
MThlYzIwHhcNMjYxMDE1MDkwMTE3WhcNMjYxMDE2MDkwMTE3WjAzMTEwLwYDVQQD
EyhjM2E3MGZlNjVmMjYxOWE0ZjE3MmU1M2MyMDA2MGU4NWNjMWRlYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaffosaHMzABNNs8Rymf4MKDYawg
TjZQboT9/MHYh7C8oaVHzDv/FrB+0XQe8YxjoHeUfSMMXnJvv1lJrxyi/ybC/fxg
r1qcepXsItm4U76rsbrbn/tJnLJTuw6xq4oxpOFM5ADaXHpBXEMgJcKlr0dpshUd
IJC1cpqj4uEY8gysOjetnFknSmsN3iX1rEr78zytOR+fR+mxPsHGmxIPUD+x0A9D
Kl4zm1bMm9xp4iXci0Bvs4v9DCDG8aSw+1Y7UPc/vA9S5DOC4Ea0OBZby+6S1Rul
W73eQiu4C3g07pduyAOVpscuGQ4kDbOF36ShlkO9qbEbg9rW7XtsUFgVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOnD+ZfJhmk8XLlPCAGDoXMHex1MB8GA1UdIwQY
MBaAFOTxWO/8aziColkMHmkGrKEI4Y7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAt
YzY5MzI0OTY1MWQ1LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAtYzY5MzI0OTY1MWQ1
LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZnpByUa
AVK8rKqSFJgNz/dOPl2kDZ7pijIEW3EiP2Ef4H6bfhEq5Lk+eA1TVVXRVRNFq4R8
fDFvgqWqf+CWdP+V6fiCqtGF2puhmDel/5jU/OcQno2Jgaw8XLVWAePLAup8buxv
l+ABuXPWDpi56K/HTi6CCh2WbjKaJ/2/5iXPOM4WIPoeJVM8C4E3IRbRXJuB7bPj
+M4lW1RgZ5U4KuCbg7/YfS5v14vbUmgTLSU73vN6DJrX9dpeRnNduE36x+mqSrmm
oSRrir6XFCzoL6kk9MVX7Cl0NyqTJU93kw9BcOyRoPrzpCSd1IGuLqnwzZ4NCTWo
uHaFagqsO9N+Og==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:25:35 2026 by rpki-client