Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File:                     H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier:          mAf+wQAklTiJj11Hya8HFvKo6dqsyVcbg+y1R5ScVc4=
Subject key identifier:   9B:1C:87:FC:DA:DC:54:B0:43:EF:96:CB:82:44:44:8F:EE:8B:F8:E1
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer:       /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial:       01A16CB63CE4BC2A92CE5F9833AB7DB3A3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number:          11C6
Signing time:             Sat 24 Oct 2026 07:00:44 +0000
Manifest this update:     Sat 24 Oct 2026 07:00:44 +0000
Manifest next update:     Sun 25 Oct 2026 07:00:44 +0000
Files and hashes:         1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: Ld0v6h8TC27i5LSYXJeMnFz+aRfDWA996iE+Y62spsM=)
                          2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:b6:3c:e4:bc:2a:92:ce:5f:98:33:ab:7d:b3:a3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
        Validity
            Not Before: Oct 24 07:00:44 2026 GMT
            Not After : Oct 25 07:00:44 2026 GMT
        Subject: CN=9b1c87fcdadc54b043ef96cb8244448fee8bf8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:dd:b7:77:9a:68:d2:41:d3:4f:d4:9f:0a:
                    c5:85:60:6e:d4:38:dd:d5:fe:e2:44:09:fc:9b:4c:
                    e7:26:a9:fb:9b:de:32:58:56:04:9d:7f:e8:de:78:
                    70:04:f6:c4:98:5b:3b:77:c2:59:b2:8d:5a:37:75:
                    12:12:34:45:c3:2b:40:55:db:c4:b7:3f:74:5c:84:
                    aa:a4:12:8b:27:f7:8e:72:9b:0c:6c:54:13:f6:6c:
                    2d:d5:c6:55:0a:13:33:b4:cf:26:b4:80:fc:39:3a:
                    5e:b9:f3:37:5f:95:09:82:fa:60:dc:c9:c5:c7:22:
                    79:b9:ca:95:86:34:15:16:e4:79:dc:6c:98:c1:b4:
                    d1:4a:3a:a4:2f:8f:8f:35:8a:d2:2e:cf:5e:68:82:
                    e3:cb:5c:3e:f8:be:45:e6:f3:54:b0:fc:1a:eb:8a:
                    05:df:06:ff:20:eb:57:81:2b:03:c1:65:93:62:ea:
                    1b:14:66:5e:e2:ce:d6:90:45:36:be:42:33:27:50:
                    c4:76:d2:e9:6b:6a:db:f8:5e:64:65:68:88:e3:4c:
                    02:8f:9c:3d:9a:3a:d4:55:26:47:cb:83:42:3d:f8:
                    5d:77:ab:c2:95:dd:e4:70:22:5b:9f:45:2c:b4:9f:
                    2f:f9:17:cb:5d:ed:5d:1d:d7:ce:ef:c0:ff:15:a7:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:87:FC:DA:DC:54:B0:43:EF:96:CB:82:44:44:8F:EE:8B:F8:E1
            X509v3 Authority Key Identifier:
                keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:b8:f4:2e:6e:58:de:40:56:47:08:72:3d:21:32:ce:53:
         09:f8:68:64:6e:f0:14:fd:51:42:9c:58:db:f4:67:6e:3e:50:
         d7:1f:5b:aa:bf:16:f6:10:2a:1e:02:f9:07:1b:ef:0b:a4:a7:
         da:72:c3:1d:a3:f6:ab:64:a7:c4:32:5e:a6:31:ef:3a:bc:20:
         b8:7b:7d:01:ec:77:28:7b:90:0c:bf:ed:01:6f:6e:3e:dc:14:
         d7:ca:4e:cc:1f:ac:41:bb:4b:51:54:10:5c:a5:be:86:83:1e:
         9e:9d:e6:1c:ac:e1:0a:39:a7:fe:e9:dd:69:98:7e:f8:8b:f7:
         c0:45:a6:af:a5:48:a6:f0:dd:c1:87:8f:73:e4:46:3d:22:4a:
         71:1f:4d:2c:c7:a4:8a:39:83:bd:bd:84:8f:80:55:cf:b1:f7:
         d9:df:3b:4a:91:ec:a6:98:16:4a:eb:81:8d:3e:41:31:4a:99:
         07:eb:7c:a1:47:dc:f9:7d:42:74:6c:9e:a2:c3:c9:04:eb:6f:
         00:b2:ab:db:ee:68:65:25:b4:ed:9f:bd:71:da:53:ca:f7:8d:
         ae:68:d1:d6:ca:d6:c2:e7:0f:e6:17:b2:ab:8c:fe:c8:bc:24:
         8c:51:2f:53:1b:7c:1c:9f:b9:4a:dc:46:ec:aa:41:a8:99:d3:
         be:2c:ef:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFstjzkvCqSzl+YM6t9s6PCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0
MDQ0NjYwHhcNMjYxMDI0MDcwMDQ0WhcNMjYxMDI1MDcwMDQ0WjAzMTEwLwYDVQQD
Eyg5YjFjODdmY2RhZGM1NGIwNDNlZjk2Y2I4MjQ0NDQ4ZmVlOGJmOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s/dt3eaaNJB00/UnwrFhWBu1Djd
1f7iRAn8m0znJqn7m94yWFYEnX/o3nhwBPbEmFs7d8JZso1aN3USEjRFwytAVdvE
tz90XISqpBKLJ/eOcpsMbFQT9mwt1cZVChMztM8mtID8OTpeufM3X5UJgvpg3MnF
xyJ5ucqVhjQVFuR53GyYwbTRSjqkL4+PNYrSLs9eaILjy1w++L5F5vNUsPwa64oF
3wb/IOtXgSsDwWWTYuobFGZe4s7WkEU2vkIzJ1DEdtLpa2rb+F5kZWiI40wCj5w9
mjrUVSZHy4NCPfhdd6vCld3kcCJbn0UstJ8v+RfLXe1dHdfO78D/FacpxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsch/za3FSwQ++Wy4JERI/ui/jhMB8GA1UdIwQY
MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct
N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx
LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby+49C5u
WN5AVkcIcj0hMs5TCfhoZG7wFP1RQpxY2/Rnbj5Q1x9bqr8W9hAqHgL5BxvvC6Sn
2nLDHaP2q2SnxDJepjHvOrwguHt9Aex3KHuQDL/tAW9uPtwU18pOzB+sQbtLUVQQ
XKW+hoMenp3mHKzhCjmn/undaZh++Iv3wEWmr6VIpvDdwYePc+RGPSJKcR9NLMek
ijmDvb2Ej4BVz7H32d87SpHsppgWSuuBjT5BMUqZB+t8oUfc+X1CdGyeosPJBOtv
ALKr2+5oZSW07Z+9cdpTyveNrmjR1srWwucP5heyq4z+yLwkjFEvUxt8HJ+5StxG
7KpBqJnTvizvAA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 14:31:46 2026 by rpki-client