Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          ZuRUwo9XEYzjXHNj0cUZ45v/b09rKuXWBm4fGn21eTM=
Subject key identifier:   5F:8C:60:DE:9D:03:14:BD:45:49:88:E9:D6:A8:24:C4:1E:AC:CE:28
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       01A00138818EC80C2BAF476FA758EA4A2BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          121F
Signing time:             Fri 14 Aug 2026 17:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:15 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: Uylr85tC7RC8gTl7V4EbJFUE55tJes8QjkPnFZXDFAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:81:8e:c8:0c:2b:af:47:6f:a7:58:ea:4a:2b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: Aug 14 17:01:15 2026 GMT
            Not After : Aug 15 17:01:15 2026 GMT
        Subject: CN=5f8c60de9d0314bd454988e9d6a824c41eacce28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:35:89:70:75:c7:aa:ae:fd:5d:4f:6c:20:
                    1b:fe:f1:c3:2d:36:1e:73:13:ef:47:57:2a:b2:4b:
                    9b:73:13:72:0e:73:95:53:dc:80:d3:a8:83:5c:c9:
                    28:31:ee:cf:c8:15:98:b3:84:34:b8:92:97:f0:90:
                    a3:9f:f4:f7:df:b6:89:50:53:3b:0f:9c:a2:99:94:
                    1b:50:09:3d:2a:8b:cc:6b:ec:c5:80:90:b7:e4:3f:
                    79:a7:bf:0c:08:c6:78:ad:e2:6e:e0:f0:b1:e9:9a:
                    71:c2:71:99:bb:6d:27:66:6d:29:4d:86:62:cb:89:
                    b5:18:bc:95:b2:59:7b:04:74:b3:b8:12:66:eb:4d:
                    eb:03:d2:f7:57:77:98:9d:aa:d9:5d:ac:3b:49:de:
                    6f:66:da:a6:77:9d:3f:f8:5f:3c:aa:77:a9:4b:d9:
                    63:11:13:1a:f3:9d:23:24:42:6a:df:da:de:ee:a1:
                    7e:36:2f:bc:31:c7:ef:ab:04:1e:ca:e7:8c:21:e8:
                    46:9e:a1:f2:12:cb:8b:f8:c3:21:a9:b3:b3:87:51:
                    6d:89:18:22:cf:bb:fa:de:d9:96:2c:2f:7d:f6:24:
                    d5:a2:9d:94:5c:75:bc:19:16:76:71:ce:5c:cc:c3:
                    54:be:0a:16:6c:6e:19:33:d8:70:35:10:a7:1a:eb:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8C:60:DE:9D:03:14:BD:45:49:88:E9:D6:A8:24:C4:1E:AC:CE:28
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:b6:16:e5:04:49:23:e5:d4:78:6c:61:e3:35:d8:5e:1a:54:
         64:90:42:15:27:9f:28:bf:36:8f:09:c4:f6:a1:4e:6f:01:2d:
         49:5a:4f:0f:5b:09:66:1e:a5:05:cd:06:17:16:dc:98:6e:fb:
         18:20:0e:60:ba:ca:38:7c:e3:5f:46:2a:0d:b3:b5:28:a0:3e:
         b0:50:2a:a1:d8:78:c4:18:5c:6f:f3:cf:e0:8a:a6:02:b2:ff:
         63:7e:9e:05:06:63:9f:b4:95:2f:90:0f:ee:e6:b5:08:79:fe:
         ca:4c:c2:cd:7f:f8:e7:b5:09:3d:80:91:cb:a3:28:63:6c:05:
         34:f5:f4:01:07:a3:e5:26:bd:bd:09:82:a5:d4:67:1f:00:3f:
         19:d1:29:0a:d5:bb:d5:fe:29:3b:d7:24:76:aa:e3:58:f8:66:
         42:24:a2:c5:82:6d:4a:5a:91:4e:7e:23:f7:78:11:d7:98:cf:
         51:22:9d:af:4f:1c:d0:f0:8b:21:64:c1:04:07:5e:7f:82:92:
         50:96:60:58:26:1d:f8:1f:54:71:fb:c5:63:f4:61:a3:a1:f7:
         79:98:ed:3d:da:85:57:87:53:21:ec:a9:27:23:3e:9a:06:d8:
         a8:cd:a9:09:38:73:0f:f9:37:1f:5b:cb:cc:29:0b:a0:28:a3:
         97:dd:8d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOIGOyAwrr0dvp1jqSiv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGU2NjkyZDk3MjhkYTgxZjVjNGY0OWUxNTA3NzNlMWFm
YmM4MGIwHhcNMjYwODE0MTcwMTE1WhcNMjYwODE1MTcwMTE1WjAzMTEwLwYDVQQD
Eyg1ZjhjNjBkZTlkMDMxNGJkNDU0OTg4ZTlkNmE4MjRjNDFlYWNjZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs701iXB1x6qu/V1PbCAb/vHDLTYe
cxPvR1cqskubcxNyDnOVU9yA06iDXMkoMe7PyBWYs4Q0uJKX8JCjn/T337aJUFM7
D5yimZQbUAk9KovMa+zFgJC35D95p78MCMZ4reJu4PCx6ZpxwnGZu20nZm0pTYZi
y4m1GLyVsll7BHSzuBJm603rA9L3V3eYnarZXaw7Sd5vZtqmd50/+F88qnepS9lj
ERMa850jJEJq39re7qF+Ni+8McfvqwQeyueMIehGnqHyEsuL+MMhqbOzh1FtiRgi
z7v63tmWLC999iTVop2UXHW8GRZ2cc5czMNUvgoWbG4ZM9hwNRCnGuui4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+MYN6dAxS9RUmI6daoJMQerM4oMB8GA1UdIwQY
MBaAFOUOZpLZco2oH1xPSeFQdz4a+8gLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgt
MDM5YzE0MDVlMTc1LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgtMDM5YzE0MDVlMTc1
LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0LYW5QRJ
I+XUeGxh4zXYXhpUZJBCFSefKL82jwnE9qFObwEtSVpPD1sJZh6lBc0GFxbcmG77
GCAOYLrKOHzjX0YqDbO1KKA+sFAqodh4xBhcb/PP4IqmArL/Y36eBQZjn7SVL5AP
7ua1CHn+ykzCzX/457UJPYCRy6MoY2wFNPX0AQej5Sa9vQmCpdRnHwA/GdEpCtW7
1f4pO9ckdqrjWPhmQiSixYJtSlqRTn4j93gR15jPUSKdr08c0PCLIWTBBAdef4KS
UJZgWCYd+B9UcfvFY/Rho6H3eZjtPdqFV4dTIeypJyM+mgbYqM2pCThzD/k3H1vL
zCkLoCijl92NnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:31:13 2026 by rpki-client