Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File:                     5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier:          x94N83q6eIsZCeryv0TIGHqnAYRF2kk/RA+Nte7LBgo=
Subject key identifier:   45:5F:C0:6B:EF:8C:81:3A:E9:A2:64:68:03:E9:DE:47:2F:FF:E9:43
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer:       /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial:       01A13DB8630932634ACFD4C9A0B2493D9334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number:          1A32
Signing time:             Thu 15 Oct 2026 04:00:56 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:56 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:56 +0000
Files and hashes:         1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: M9fQg5ZN5b6UAcFg8Rv8LE9bTzevXwZBv24GSch5VMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:63:09:32:63:4a:cf:d4:c9:a0:b2:49:3d:93:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
        Validity
            Not Before: Oct 15 04:00:56 2026 GMT
            Not After : Oct 16 04:00:56 2026 GMT
        Subject: CN=455fc06bef8c813ae9a2646803e9de472fffe943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:18:93:0e:71:f6:d1:eb:94:3d:09:99:94:
                    6b:f8:50:b3:bc:65:30:63:12:21:7b:f3:6f:20:34:
                    22:7a:96:63:04:e1:85:c3:2b:53:19:60:b9:51:96:
                    7a:47:fa:89:34:6c:65:63:7a:c3:14:6c:ff:b0:ac:
                    16:be:c6:f1:1d:95:4c:ce:6c:f7:c6:82:3e:a8:b4:
                    70:5a:ff:bc:f2:4a:fc:19:7b:5f:cb:39:e7:72:a1:
                    c1:57:fa:50:4c:2b:89:e6:6b:b9:7a:16:b5:5e:89:
                    9c:27:24:5a:75:57:d1:4d:88:64:36:68:a8:6e:6b:
                    53:65:4c:a8:d4:5f:9c:11:97:f8:26:36:c6:62:e0:
                    3c:31:6a:60:05:c1:59:87:5a:25:7b:9b:31:c2:f8:
                    a6:a6:4f:9e:ed:31:1e:04:67:ab:e0:e6:57:ca:2b:
                    63:74:c9:95:36:5e:64:28:52:be:1c:d5:07:87:92:
                    81:f1:b3:d5:66:01:91:fa:36:99:1b:a6:a3:a6:39:
                    c7:25:17:45:6a:65:22:04:d7:1d:bc:f7:df:cb:14:
                    c7:59:70:a0:12:2e:d0:a0:81:78:87:8a:ed:c7:70:
                    43:8c:5c:ae:a9:72:91:a1:6e:b2:71:42:c3:4f:c9:
                    63:4d:ca:c4:69:6f:b5:8a:70:1c:f8:ae:93:0b:63:
                    ea:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5F:C0:6B:EF:8C:81:3A:E9:A2:64:68:03:E9:DE:47:2F:FF:E9:43
            X509v3 Authority Key Identifier:
                keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f4:a6:33:0e:08:18:62:10:dd:71:bd:55:e8:bf:04:10:54:
         e5:20:77:78:ef:95:5d:db:18:f9:58:6f:e9:fe:54:7e:dd:50:
         aa:72:43:06:63:8b:9d:3e:48:4e:21:a3:61:e5:0c:33:cc:78:
         95:04:31:99:28:d2:bc:3c:b1:2a:1a:a8:ed:5a:f8:57:f0:e1:
         a6:aa:9c:af:8e:c7:6b:9e:56:bc:f6:49:c3:1a:98:f2:e1:2b:
         9c:4e:3f:d7:a2:84:fc:05:72:77:be:4c:a7:f2:a4:2d:e5:9e:
         16:d1:64:29:6d:dc:a0:c1:2c:26:01:f2:a5:35:13:69:da:d2:
         a1:f4:76:81:17:d1:a9:ce:12:ce:7e:9e:f0:bb:4d:37:ef:63:
         fb:94:6a:78:24:c7:b3:92:4e:3f:cc:14:3d:8f:cc:1f:cf:ed:
         11:de:70:06:ea:79:bd:c9:e8:c8:60:91:67:61:96:27:2f:2e:
         11:ad:80:19:a3:0d:d7:20:7c:c5:c9:08:eb:cd:3e:66:85:f1:
         06:bc:72:07:ef:08:d0:67:33:db:30:15:92:79:de:57:f5:4a:
         a4:00:0b:96:b1:43:1d:45:65:68:86:34:75:56:da:84:92:cd:
         d4:59:e1:78:a2:35:2d:05:49:8c:ca:17:07:1f:ee:af:47:11:
         ad:c7:e1:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uGMJMmNKz9TJoLJJPZM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZjVmYTQ2ZTFjNmIwNWNiZmVjOTc2OTIxMGNiMTUxNDdh
YmUyMzEwHhcNMjYxMDE1MDQwMDU2WhcNMjYxMDE2MDQwMDU2WjAzMTEwLwYDVQQD
Eyg0NTVmYzA2YmVmOGM4MTNhZTlhMjY0NjgwM2U5ZGU0NzJmZmZlOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKAYkw5x9tHrlD0JmZRr+FCzvGUw
YxIhe/NvIDQiepZjBOGFwytTGWC5UZZ6R/qJNGxlY3rDFGz/sKwWvsbxHZVMzmz3
xoI+qLRwWv+88kr8GXtfyznncqHBV/pQTCuJ5mu5eha1XomcJyRadVfRTYhkNmio
bmtTZUyo1F+cEZf4JjbGYuA8MWpgBcFZh1ole5sxwvimpk+e7TEeBGer4OZXyitj
dMmVNl5kKFK+HNUHh5KB8bPVZgGR+jaZG6ajpjnHJRdFamUiBNcdvPffyxTHWXCg
Ei7QoIF4h4rtx3BDjFyuqXKRoW6ycULDT8ljTcrEaW+1inAc+K6TC2PqpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVfwGvvjIE66aJkaAPp3kcv/+lDMB8GA1UdIwQY
MBaAFOf1+kbhxrBcv+yXaSEMsVFHq+IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMt
MGM0MTdlZmY0NzIwLzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMtMGM0MTdlZmY0NzIw
LzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPSmMw4I
GGIQ3XG9Vei/BBBU5SB3eO+VXdsY+Vhv6f5Uft1QqnJDBmOLnT5ITiGjYeUMM8x4
lQQxmSjSvDyxKhqo7Vr4V/Dhpqqcr47Ha55WvPZJwxqY8uErnE4/16KE/AVyd75M
p/KkLeWeFtFkKW3coMEsJgHypTUTadrSofR2gRfRqc4Szn6e8LtNN+9j+5RqeCTH
s5JOP8wUPY/MH8/tEd5wBup5vcnoyGCRZ2GWJy8uEa2AGaMN1yB8xckI680+ZoXx
BrxyB+8I0Gcz2zAVknneV/VKpAALlrFDHUVlaIY0dVbahJLN1FnheKI1LQVJjMoX
Bx/ur0cRrcfhDw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:32 2026 by rpki-client