Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File:                     5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier:          FrzyUepPdkxUyosQGRIIYVACJIu06CspkAfD12EMz2w=
Subject key identifier:   0C:C0:F5:0F:8D:8B:AD:CB:92:9F:C5:C0:74:FD:EE:BB:CE:16:48:B0
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer:       /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial:       01A15365266E13D01162532A49A087BAA866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number:          15F3
Signing time:             Mon 19 Oct 2026 09:01:40 +0000
Manifest this update:     Mon 19 Oct 2026 09:01:40 +0000
Manifest next update:     Tue 20 Oct 2026 09:01:40 +0000
Files and hashes:         1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: DMeMqHME+QSvgWG1xozCZPYPJaghLmVbjE80jNb8dBA=)
                          2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
                          3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
                          4: a6ZdqqnUZq7Xf8v413mOD4gnuIc.roa (hash: /YCERQ9X6MgXLxlcuxTGu+1tVQk1kXYJeSvr9xZddks=)
                          5: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
                          6: zhx_i8-hMUtVtHxFFqKV6pWlvfI.roa (hash: jXE8lQ9PxcnmjRW7Jbdjl6pEn7gNBMRFi9VitvgBzcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 09:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:65:26:6e:13:d0:11:62:53:2a:49:a0:87:ba:a8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
        Validity
            Not Before: Oct 19 09:01:40 2026 GMT
            Not After : Oct 20 09:01:40 2026 GMT
        Subject: CN=0cc0f50f8d8badcb929fc5c074fdeebbce1648b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:f1:cb:c7:ee:4e:ab:ed:89:09:58:48:42:
                    15:a3:e2:8d:d1:b9:0d:36:b3:cf:b8:46:08:1d:b5:
                    fd:fa:40:d0:c0:41:7e:3b:b2:34:5b:ca:02:ce:82:
                    b4:d1:ea:3c:4a:8f:29:46:b8:ef:74:88:f8:84:ce:
                    1f:11:04:c2:b4:5a:2f:8f:d7:a5:9a:e7:ab:97:02:
                    e3:e4:f7:4a:da:db:86:42:14:a1:6f:53:d5:f2:a6:
                    3a:d0:71:5d:cf:13:55:cf:fc:c8:58:fd:21:a9:90:
                    6b:03:65:85:58:c1:cf:64:d4:ad:38:0c:3e:77:2d:
                    38:7a:cd:02:77:14:64:4f:6d:f9:bf:64:0a:a6:05:
                    0c:e1:0b:ba:64:cb:5c:8c:a9:78:48:eb:5f:0e:1c:
                    ba:e9:ee:c4:47:dc:2f:0a:1a:79:8f:05:af:6e:0d:
                    36:9a:b4:60:4c:37:d5:33:2e:92:17:70:30:ef:58:
                    3e:78:c6:9a:c6:ee:01:51:9a:b8:55:46:3a:64:d4:
                    f8:ef:3a:0c:e7:36:57:92:6d:ae:19:f6:9d:31:f6:
                    28:ff:2e:1e:79:bc:27:cb:30:74:df:46:8a:75:47:
                    1f:40:b5:e4:74:fc:18:1b:c3:8d:9a:6d:56:bd:8a:
                    b4:92:54:e5:80:2f:18:a3:92:71:34:ed:3d:35:20:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C0:F5:0F:8D:8B:AD:CB:92:9F:C5:C0:74:FD:EE:BB:CE:16:48:B0
            X509v3 Authority Key Identifier:
                keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:00:47:b0:8f:f8:ec:30:07:f9:ca:ee:69:98:e3:f3:6a:1b:
         79:4b:b2:1c:28:69:de:62:46:7f:90:4a:9f:c6:68:d4:45:05:
         05:c2:75:4b:bc:d0:7d:13:5e:a9:33:78:2b:dd:1a:d6:5b:4c:
         57:bc:ac:89:9e:30:0e:57:0e:0d:4e:ac:95:9f:6c:fc:3b:9b:
         64:82:46:6a:33:1d:3d:84:47:75:b3:80:3b:d4:9a:27:0a:a1:
         fd:93:1c:f2:d4:a7:4d:e5:87:d3:e8:05:c8:f4:4e:b8:13:bf:
         04:b8:e2:2d:3e:a2:66:8a:20:40:23:43:25:e5:d5:7e:5e:44:
         75:64:70:14:0a:d8:2d:51:d5:ce:18:3e:29:e4:43:f1:55:28:
         a7:44:71:1f:36:16:bd:cb:c2:e6:68:6d:48:8b:61:34:b8:7a:
         2e:52:cc:3e:9a:bd:31:7b:63:29:05:16:45:82:6c:28:7a:36:
         1b:1c:07:91:27:13:6d:f5:98:2a:f7:ed:aa:d0:97:07:45:dd:
         70:31:85:46:0b:7e:dc:0d:8c:19:e4:03:e6:9d:9c:0b:e9:af:
         85:00:1e:30:2d:5d:31:b8:a2:20:35:23:94:79:f2:e9:1c:f6:
         86:aa:85:77:93:0c:c8:58:ae:aa:f6:76:af:86:ff:83:6c:93:
         76:07:3a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFTZSZuE9ARYlMqSaCHuqhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjYxMDE5MDkwMTQwWhcNMjYxMDIwMDkwMTQwWjAzMTEwLwYDVQQD
EygwY2MwZjUwZjhkOGJhZGNiOTI5ZmM1YzA3NGZkZWViYmNlMTY0OGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZjxy8fuTqvtiQlYSEIVo+KN0bkN
NrPPuEYIHbX9+kDQwEF+O7I0W8oCzoK00eo8So8pRrjvdIj4hM4fEQTCtFovj9el
muerlwLj5PdK2tuGQhShb1PV8qY60HFdzxNVz/zIWP0hqZBrA2WFWMHPZNStOAw+
dy04es0CdxRkT235v2QKpgUM4Qu6ZMtcjKl4SOtfDhy66e7ER9wvChp5jwWvbg02
mrRgTDfVMy6SF3Aw71g+eMaaxu4BUZq4VUY6ZNT47zoM5zZXkm2uGfadMfYo/y4e
ebwnyzB030aKdUcfQLXkdPwYG8ONmm1WvYq0klTlgC8Yo5JxNO09NSCAFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzA9Q+Ni63Lkp/FwHT97rvOFkiwMB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQBHsI/4
7DAH+cruaZjj82obeUuyHChp3mJGf5BKn8Zo1EUFBcJ1S7zQfRNeqTN4K90a1ltM
V7ysiZ4wDlcODU6slZ9s/DubZIJGajMdPYRHdbOAO9SaJwqh/ZMc8tSnTeWH0+gF
yPROuBO/BLjiLT6iZoogQCNDJeXVfl5EdWRwFArYLVHVzhg+KeRD8VUop0RxHzYW
vcvC5mhtSIthNLh6LlLMPpq9MXtjKQUWRYJsKHo2GxwHkScTbfWYKvftqtCXB0Xd
cDGFRgt+3A2MGeQD5p2cC+mvhQAeMC1dMbiiIDUjlHny6Rz2hqqFd5MMyFiuqvZ2
r4b/g2yTdgc6Lw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:43:21 2026 by rpki-client