Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File:                     ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier:          o/IdVolXlJBjHKc5P4I09GhytlY6bMxJg5dtrRnY7Tc=
Subject key identifier:   7F:BB:24:0D:7D:EA:F7:68:DE:ED:62:16:60:C2:45:F5:E4:6F:4D:F2
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer:       /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial:       01A180E1FB472FD9BB1661CDB47A68976EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number:          0574
Signing time:             Wed 28 Oct 2026 05:00:55 +0000
Manifest this update:     Wed 28 Oct 2026 05:00:55 +0000
Manifest next update:     Thu 29 Oct 2026 05:00:55 +0000
Files and hashes:         1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: YeQ+gs0/bsMxWS91WVWVjkQtLYxvPfHHVo38B7S5tOo=)
                          2: YC-FECHQIV84VcJM7yfc1SkYMLI.roa (hash: 0hAUUcU2f9GN8i7aVOo431zZ1PqLZtDBdJrYYAxZYjM=)
                          3: iFM7H25XsSx059D3mjtnWhxVPxc.roa (hash: udyBSE1gieDC+I/f9zEdjYiTYwaNPmtEekxBRhSF9Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:e1:fb:47:2f:d9:bb:16:61:cd:b4:7a:68:97:6e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
        Validity
            Not Before: Oct 28 05:00:55 2026 GMT
            Not After : Oct 29 05:00:55 2026 GMT
        Subject: CN=7fbb240d7deaf768deed621660c245f5e46f4df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:72:a9:d5:d6:f9:e4:eb:01:25:bd:22:6f:
                    54:17:57:bd:70:4c:5c:58:ac:fb:ca:ce:a5:e1:47:
                    56:d6:88:cc:72:4c:c4:56:04:98:30:4e:aa:8e:60:
                    bf:4d:6b:52:be:76:00:37:0f:e3:fc:cc:07:20:8e:
                    03:a4:41:e3:f3:10:fd:32:8e:ef:e4:e6:5f:55:8f:
                    73:46:79:f1:ad:21:a7:a9:c1:1b:c9:b0:6d:09:07:
                    63:e8:f3:ae:8c:d2:b5:a1:02:bc:4f:02:9a:67:fc:
                    97:1a:00:21:36:ab:b6:b8:bd:33:a0:e7:67:47:de:
                    c5:77:ae:34:4e:3d:cd:03:7b:e9:65:5d:0c:86:31:
                    89:56:ee:1e:4f:2a:40:99:b3:30:c3:9f:d3:ac:53:
                    e5:f0:cf:e4:c0:c8:dd:53:b3:d1:91:07:06:f0:50:
                    9d:8b:05:2a:8d:7a:98:d6:86:14:6e:2e:05:a9:6a:
                    1c:37:70:c1:79:20:0f:26:a2:44:8e:c9:28:55:8d:
                    f7:97:e9:f8:9e:2e:fe:c0:86:38:d3:9b:6b:ee:e2:
                    de:23:45:5c:7f:69:0a:bb:66:ac:98:42:c8:60:20:
                    92:38:db:e5:e5:92:aa:e2:41:c9:84:20:df:2e:85:
                    bb:26:46:cc:05:21:6f:10:ce:6f:0b:e0:51:73:15:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BB:24:0D:7D:EA:F7:68:DE:ED:62:16:60:C2:45:F5:E4:6F:4D:F2
            X509v3 Authority Key Identifier:
                keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:78:ad:63:4c:0a:43:fb:72:56:e2:b0:eb:e5:d9:5b:91:
         bd:c6:08:20:3c:ef:80:84:dc:6b:2d:3e:1b:a6:18:7c:76:3b:
         f6:7e:e5:fe:b5:55:b7:01:33:3f:c8:98:d0:63:9c:22:b4:c6:
         22:14:1c:c7:7f:fc:e5:16:36:0b:1b:e7:c8:9e:5e:0f:1e:12:
         a1:ca:ab:c4:a3:3b:b7:ff:a1:c3:3a:dd:c1:98:3d:22:33:04:
         34:79:d7:2b:d6:84:2e:54:58:1c:23:c1:2c:2b:eb:ee:8a:27:
         90:2c:92:fb:8a:bc:15:ec:4b:66:a6:a9:9f:d0:27:19:f9:b0:
         0d:80:47:ef:47:10:00:41:76:61:d5:bd:d4:4a:0a:b6:1a:4c:
         6e:b6:6f:64:2c:91:a3:1f:b9:fc:cb:7f:7e:55:a3:2d:a4:a6:
         b8:f9:9a:fb:a6:81:b9:d0:04:81:60:94:8c:64:81:fb:94:db:
         fd:f7:f3:2d:e2:ba:02:99:86:52:3c:d5:c9:03:e7:5b:ce:a6:
         5a:90:26:9a:40:be:4b:80:37:83:a5:99:0a:9f:e7:52:ca:57:
         df:72:d0:60:ef:20:ff:d3:d4:99:83:5b:a3:97:80:d0:ed:65:
         3e:21:09:18:3c:e1:d0:8c:f9:88:5c:42:88:26:e0:0c:75:75:
         37:38:9b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4ftHL9m7FmHNtHpol26lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh
M2ViZjQwHhcNMjYxMDI4MDUwMDU1WhcNMjYxMDI5MDUwMDU1WjAzMTEwLwYDVQQD
Eyg3ZmJiMjQwZDdkZWFmNzY4ZGVlZDYyMTY2MGMyNDVmNWU0NmY0ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYhyqdXW+eTrASW9Im9UF1e9cExc
WKz7ys6l4UdW1ojMckzEVgSYME6qjmC/TWtSvnYANw/j/MwHII4DpEHj8xD9Mo7v
5OZfVY9zRnnxrSGnqcEbybBtCQdj6POujNK1oQK8TwKaZ/yXGgAhNqu2uL0zoOdn
R97Fd640Tj3NA3vpZV0MhjGJVu4eTypAmbMww5/TrFPl8M/kwMjdU7PRkQcG8FCd
iwUqjXqY1oYUbi4FqWocN3DBeSAPJqJEjskoVY33l+n4ni7+wIY405tr7uLeI0Vc
f2kKu2asmELIYCCSONvl5ZKq4kHJhCDfLoW7JkbMBSFvEM5vC+BRcxULOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+7JA196vdo3u1iFmDCRfXkb03yMB8GA1UdIwQY
MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct
MzQyMWVhNDFkZjM2LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2
LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn54rWNM
CkP7clbisOvl2VuRvcYIIDzvgITcay0+G6YYfHY79n7l/rVVtwEzP8iY0GOcIrTG
IhQcx3/85RY2CxvnyJ5eDx4SocqrxKM7t/+hwzrdwZg9IjMENHnXK9aELlRYHCPB
LCvr7oonkCyS+4q8FexLZqapn9AnGfmwDYBH70cQAEF2YdW91EoKthpMbrZvZCyR
ox+5/Mt/flWjLaSmuPma+6aBudAEgWCUjGSB+5Tb/ffzLeK6ApmGUjzVyQPnW86m
WpAmmkC+S4A3g6WZCp/nUspX33LQYO8g/9PUmYNbo5eA0O1lPiEJGDzh0Iz5iFxC
iCbgDHV1NzibbQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:26:46 2026 by rpki-client