Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
File:                     5-aiybui7N1AdLMVN1mDXoI6uOQ.mft (raw, json)
Hash identifier:          oSHm92Ly/KUADxcQ05hzjXjI8DGuMv5Cq+VOyu+TVgE=
Subject key identifier:   73:EA:80:4A:76:34:BC:DA:C1:DF:DA:35:D4:3E:82:24:F1:32:1A:95
Authority key identifier: E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
Certificate issuer:       /CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Certificate serial:       01A13DB7E10624C685A7D5832213072BE6C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
Manifest number:          1184
Signing time:             Thu 15 Oct 2026 04:00:23 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:23 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:23 +0000
Files and hashes:         1: 5-aiybui7N1AdLMVN1mDXoI6uOQ.crl (hash: JbT9lmt/5BVWPX+Ps5tS9+psPizISGEVBsSOWMacS6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b7:e1:06:24:c6:85:a7:d5:83:22:13:07:2b:e6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
        Validity
            Not Before: Oct 15 04:00:23 2026 GMT
            Not After : Oct 16 04:00:23 2026 GMT
        Subject: CN=73ea804a7634bcdac1dfda35d43e8224f1321a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:77:ec:4e:18:e8:d2:69:a8:e1:f2:5d:90:
                    9b:42:c8:2c:cd:bd:db:71:37:56:40:f9:54:a4:e0:
                    32:8a:a5:90:ee:a7:38:99:3c:41:d0:e8:50:e6:53:
                    de:cd:15:5a:0d:49:7f:dd:7b:65:be:23:a7:6f:ff:
                    a4:5d:58:e8:6e:77:c4:b6:5c:4a:53:58:d5:4f:07:
                    81:43:84:32:55:85:3a:a0:bb:2e:bc:49:f6:e0:a7:
                    6e:b9:ca:7f:84:19:9b:4d:c2:09:47:23:e0:1c:f8:
                    87:fe:21:74:4a:fb:69:3a:49:98:b6:c3:a4:a4:85:
                    cc:69:d1:69:79:b9:fe:f6:7d:61:a4:ef:6a:ea:ff:
                    26:47:06:d0:c8:c1:e1:dd:79:2e:24:59:98:94:90:
                    df:56:57:44:a9:bb:69:6f:f0:0b:dd:3d:31:b0:e8:
                    57:d2:94:a0:23:ab:03:89:94:f5:3b:b1:00:68:0c:
                    e9:9a:36:20:f1:cb:d3:22:7c:97:5e:07:a4:cf:a1:
                    1f:ad:0d:ed:b3:4e:9b:d6:cf:31:c6:86:0d:96:99:
                    59:a2:34:3d:3a:9a:c3:8a:a6:8b:ff:b8:ef:c5:a5:
                    26:b6:4c:0b:c1:e5:93:57:f0:fb:9d:84:ab:d6:5d:
                    71:78:f3:b0:dd:23:5f:ef:79:16:62:72:4c:1b:69:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:80:4A:76:34:BC:DA:C1:DF:DA:35:D4:3E:82:24:F1:32:1A:95
            X509v3 Authority Key Identifier:
                keyid:E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:c3:07:57:c6:2f:0f:e0:cf:52:fb:39:24:c3:7e:8d:2b:
         50:a5:76:a0:bc:6b:1b:4f:dd:9e:3d:b8:36:22:ad:44:f2:8f:
         15:fb:39:5a:5f:5a:d8:2a:80:9b:2a:63:ee:54:5c:66:eb:3c:
         96:f8:6a:64:07:b0:ec:73:28:c7:93:25:aa:20:30:5e:c9:10:
         32:6d:a2:d8:fc:ed:13:4e:34:5c:8f:60:1f:4e:1a:96:49:a3:
         a1:de:ae:0c:96:85:49:a3:9b:fa:da:4e:bd:07:f9:94:76:a3:
         9d:48:95:e4:a2:99:0f:99:f6:82:85:c9:89:36:32:cf:70:b7:
         54:c4:39:88:53:c9:79:f8:3e:e2:9f:8e:e9:3d:b8:06:74:79:
         03:b6:50:a3:bb:f5:5f:c2:37:b3:3e:f4:ae:af:e3:0c:c4:7a:
         5f:bd:c1:00:b3:f2:a2:f8:bd:77:97:a0:07:c8:c8:9a:75:37:
         7f:06:a0:16:a0:b8:0c:80:69:87:c5:aa:7f:c6:1a:eb:c5:34:
         61:7b:5c:6c:b1:82:9f:ed:0e:4a:e3:62:58:93:2a:dc:08:42:
         02:f8:8d:af:f3:cb:6e:c1:b4:e4:f3:96:3a:1a:b5:e3:e0:b3:
         35:c8:8c:02:1f:4f:9e:45:1c:11:15:60:22:e2:c0:dc:bb:e8:
         a1:71:3c:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t+EGJMaFp9WDIhMHK+bDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTZhMmM5YmJhMmVjZGQ0MDc0YjMxNTM3NTk4MzVlODIz
YWI4ZTQwHhcNMjYxMDE1MDQwMDIzWhcNMjYxMDE2MDQwMDIzWjAzMTEwLwYDVQQD
Eyg3M2VhODA0YTc2MzRiY2RhYzFkZmRhMzVkNDNlODIyNGYxMzIxYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykd37E4Y6NJpqOHyXZCbQsgszb3b
cTdWQPlUpOAyiqWQ7qc4mTxB0OhQ5lPezRVaDUl/3XtlviOnb/+kXVjobnfEtlxK
U1jVTweBQ4QyVYU6oLsuvEn24Kduucp/hBmbTcIJRyPgHPiH/iF0SvtpOkmYtsOk
pIXMadFpebn+9n1hpO9q6v8mRwbQyMHh3XkuJFmYlJDfVldEqbtpb/AL3T0xsOhX
0pSgI6sDiZT1O7EAaAzpmjYg8cvTInyXXgekz6EfrQ3ts06b1s8xxoYNlplZojQ9
OprDiqaL/7jvxaUmtkwLweWTV/D7nYSr1l1xePOw3SNf73kWYnJMG2lTAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPqgEp2NLzawd/aNdQ+giTxMhqVMB8GA1UdIwQY
MBaAFOfmosm7ouzdQHSzFTdZg16COrjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1haXlidWk3TjFBZExNVk4xbURYb0k2dU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNWI1OWUtYmMyNy00MjA2LWE3ZDkt
NTM1NjlhY2EzYTVmLzEvNS1haXlidWk3TjFBZExNVk4xbURYb0k2dU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zNWI1OWUtYmMyNy00MjA2LWE3ZDktNTM1NjlhY2EzYTVm
LzEvNS1haXlidWk3TjFBZExNVk4xbURYb0k2dU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcDDB1fG
Lw/gz1L7OSTDfo0rUKV2oLxrG0/dnj24NiKtRPKPFfs5Wl9a2CqAmypj7lRcZus8
lvhqZAew7HMox5MlqiAwXskQMm2i2PztE040XI9gH04alkmjod6uDJaFSaOb+tpO
vQf5lHajnUiV5KKZD5n2goXJiTYyz3C3VMQ5iFPJefg+4p+O6T24BnR5A7ZQo7v1
X8I3sz70rq/jDMR6X73BALPyovi9d5egB8jImnU3fwagFqC4DIBph8Wqf8Ya68U0
YXtcbLGCn+0OSuNiWJMq3AhCAviNr/PLbsG05POWOhq14+CzNciMAh9PnkUcERVg
IuLA3LvooXE8NQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:24 2026 by rpki-client