Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
File:                     5EV2NuWtZuHw-7LBDfKQleY-mS8.mft (raw, json)
Hash identifier:          mwyvj51Mfj0NO1eH80z5RdCK+drG0PV2/wY3tOuozXI=
Subject key identifier:   9C:AF:32:EA:4D:4C:A2:06:F0:83:05:6D:3F:B6:36:80:BC:0C:92:C3
Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
Certificate issuer:       /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Certificate serial:       01A00137E6F20E5E9A31A2D84EE3FE97FDC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
Manifest number:          1386
Signing time:             Fri 14 Aug 2026 17:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:35 +0000
Files and hashes:         1: 5EV2NuWtZuHw-7LBDfKQleY-mS8.crl (hash: 684m/DqzfJ9oHESPIxzIyiYk07SQJwkiGVu/au13cP0=)
                          2: xu9m0hgW8GLJqqV5sAEGFCWL3iM.roa (hash: jbb1Ol93Bc4F6xDnWgQv6CKjC8B2J+BLxGOlCtqLSLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:e6:f2:0e:5e:9a:31:a2:d8:4e:e3:fe:97:fd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
        Validity
            Not Before: Aug 14 17:00:35 2026 GMT
            Not After : Aug 15 17:00:35 2026 GMT
        Subject: CN=9caf32ea4d4ca206f083056d3fb63680bc0c92c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:97:09:0e:04:02:9f:6f:00:79:42:a5:7f:
                    00:0b:9f:a4:20:b9:44:40:6f:10:19:c3:6e:c3:ca:
                    ee:74:7b:bb:87:c3:ff:27:f4:32:96:3e:5a:87:91:
                    41:c6:c9:0b:eb:f8:f8:73:36:82:94:ef:a2:09:d8:
                    39:ad:fb:65:18:0e:35:6f:63:4f:95:0c:30:a2:ea:
                    80:e8:bb:c8:8f:4e:dc:55:15:9a:f4:e2:62:b3:da:
                    c9:80:65:72:0b:48:fb:93:52:7d:25:b7:00:75:f3:
                    12:b9:45:f4:96:0d:b7:9d:bd:50:60:7f:f6:93:2d:
                    0f:58:cf:29:be:4e:9f:f2:95:b7:e2:d9:1d:ab:88:
                    a4:ce:34:69:6f:23:5c:1e:11:19:ff:05:49:8b:dd:
                    3b:c6:6d:c6:2d:71:ad:cc:6b:81:ad:26:a0:aa:de:
                    bb:27:87:5f:ac:e2:91:18:57:31:2f:7c:1f:81:36:
                    5e:17:e2:58:80:a1:41:5b:84:5e:d2:5a:d1:2e:16:
                    99:73:5c:e5:12:75:9b:3f:d4:b7:e1:35:4a:6c:48:
                    fe:07:70:87:ce:d9:18:fb:44:2c:28:92:73:69:6a:
                    67:1d:93:f0:6b:fc:ec:25:9c:60:7a:64:10:b9:56:
                    eb:1d:a9:93:10:5d:0a:42:02:c9:35:91:45:b4:a6:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AF:32:EA:4D:4C:A2:06:F0:83:05:6D:3F:B6:36:80:BC:0C:92:C3
            X509v3 Authority Key Identifier:
                keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:98:66:0c:3f:c6:d0:58:b8:4e:f9:52:11:64:25:d9:d6:1e:
         7e:2e:92:65:55:94:13:b3:36:8c:70:ea:db:8d:c6:33:6a:41:
         4c:2a:7d:5f:2a:e0:f1:86:2a:b1:67:c2:6e:1f:52:42:55:94:
         01:35:d0:45:64:2b:e5:8a:4d:0b:54:e4:27:ab:1b:68:75:64:
         c4:fa:20:0e:69:e9:2e:43:96:fb:bd:da:0c:98:ab:b0:71:79:
         86:de:24:c5:d9:85:6c:52:bd:2f:6a:06:5f:5c:a5:9a:32:54:
         b3:86:99:36:5b:17:b6:78:f9:e1:81:c0:4e:d1:35:c4:da:1e:
         b7:3c:e2:ca:e6:07:69:54:97:fb:59:48:24:11:2e:27:bc:8a:
         bf:c3:59:f5:13:bf:18:ed:70:51:ae:05:70:ae:73:31:b8:ce:
         63:55:0b:77:40:24:41:89:f3:9e:48:fd:32:2e:a3:61:51:82:
         e7:d7:55:21:b2:8a:ef:eb:d6:a4:23:83:bf:bb:5a:a6:3a:87:
         c9:45:3b:00:51:b8:74:8b:6c:72:0a:09:72:34:b2:13:56:26:
         ad:f9:7b:d0:e3:9f:33:41:98:55:6f:ab:23:7e:c8:21:61:8b:
         01:06:cd:50:a3:4d:13:35:f5:19:46:1a:2e:0e:8c:b1:24:46:
         a1:fe:43:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABN+byDl6aMaLYTuP+l/3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NDU3NjM2ZTVhZDY2ZTFmMGZiYjJjMTBkZjI5MDk1ZTYz
ZTk5MmYwHhcNMjYwODE0MTcwMDM1WhcNMjYwODE1MTcwMDM1WjAzMTEwLwYDVQQD
Eyg5Y2FmMzJlYTRkNGNhMjA2ZjA4MzA1NmQzZmI2MzY4MGJjMGM5MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA2XCQ4EAp9vAHlCpX8AC5+kILlE
QG8QGcNuw8rudHu7h8P/J/Qylj5ah5FBxskL6/j4czaClO+iCdg5rftlGA41b2NP
lQwwouqA6LvIj07cVRWa9OJis9rJgGVyC0j7k1J9JbcAdfMSuUX0lg23nb1QYH/2
ky0PWM8pvk6f8pW34tkdq4ikzjRpbyNcHhEZ/wVJi907xm3GLXGtzGuBrSagqt67
J4dfrOKRGFcxL3wfgTZeF+JYgKFBW4Re0lrRLhaZc1zlEnWbP9S34TVKbEj+B3CH
ztkY+0QsKJJzaWpnHZPwa/zsJZxgemQQuVbrHamTEF0KQgLJNZFFtKbYsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyvMupNTKIG8IMFbT+2NoC8DJLDMB8GA1UdIwQY
MBaAFORFdjblrWbh8PuywQ3ykJXmPpkvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEt
YjBkNWU4YmU4NTNjLzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEtYjBkNWU4YmU4NTNj
LzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVphmDD/G
0Fi4TvlSEWQl2dYefi6SZVWUE7M2jHDq243GM2pBTCp9Xyrg8YYqsWfCbh9SQlWU
ATXQRWQr5YpNC1TkJ6sbaHVkxPogDmnpLkOW+73aDJirsHF5ht4kxdmFbFK9L2oG
X1ylmjJUs4aZNlsXtnj54YHATtE1xNoetzziyuYHaVSX+1lIJBEuJ7yKv8NZ9RO/
GO1wUa4FcK5zMbjOY1ULd0AkQYnznkj9Mi6jYVGC59dVIbKK7+vWpCODv7tapjqH
yUU7AFG4dItscgoJcjSyE1Ymrfl70OOfM0GYVW+rI37IIWGLAQbNUKNNEzX1GUYa
Lg6MsSRGof5Dxg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:03 2026 by rpki-client