Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          vLId0jJcfkYLtBpY0E6TSUB9RMU7MwFMSpbuck5znMc=
Subject key identifier:   98:00:55:DE:3B:7E:88:01:B8:34:C2:7A:C3:AD:04:FC:A4:7A:F8:73
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       01A001DCCD9DE6046079A537ADDA7ECEBAC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          17CF
Signing time:             Fri 14 Aug 2026 20:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:42 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: c7Z8WYV3nzY8zec0yg+I+5ylBOp04YTWq1Z8+Dlz/f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:cd:9d:e6:04:60:79:a5:37:ad:da:7e:ce:ba:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: Aug 14 20:00:42 2026 GMT
            Not After : Aug 15 20:00:42 2026 GMT
        Subject: CN=980055de3b7e8801b834c27ac3ad04fca47af873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:ac:3a:f9:d0:fb:92:61:ed:b9:85:01:d7:
                    18:58:2c:94:bb:64:25:03:33:23:3d:91:93:07:ca:
                    1f:1e:f7:7f:27:9d:50:9a:54:8a:a6:ca:7f:70:32:
                    b3:c4:8a:92:8c:38:ed:75:98:52:4e:2c:ca:dd:15:
                    a1:67:6f:e7:1a:b5:ae:e7:28:11:2e:a5:23:e5:29:
                    4a:08:61:0a:4e:4f:b8:79:22:1f:e8:91:12:de:f6:
                    f3:85:c2:16:da:3e:82:b2:d5:1c:46:cb:d3:88:ac:
                    e6:54:1b:f7:94:de:d7:87:88:94:f1:50:4d:a1:30:
                    fb:b5:db:6e:8c:8b:06:0a:c6:b6:6a:ed:b6:09:70:
                    99:8f:27:2e:c8:a7:76:92:4c:e5:27:fd:d3:fa:ba:
                    da:0b:54:08:2f:ef:23:be:67:fd:51:62:b5:bb:bb:
                    7a:80:99:be:a0:ad:ec:a9:1d:53:1e:e3:60:01:75:
                    e8:20:5c:6d:b2:c4:fa:77:a2:f0:25:cd:f8:68:af:
                    8b:05:a1:78:bf:fd:b1:d1:fe:8f:b2:bc:d6:01:7a:
                    8a:82:42:9e:42:03:f3:3f:7f:0d:c6:68:52:c4:a6:
                    29:7a:15:ea:fb:b1:31:2d:67:f9:95:c2:df:a2:21:
                    9b:75:1c:8e:ec:57:33:cd:b8:15:d3:02:73:e4:3a:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:00:55:DE:3B:7E:88:01:B8:34:C2:7A:C3:AD:04:FC:A4:7A:F8:73
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:0f:ce:8e:a8:f6:20:96:ed:c6:00:c6:e2:16:96:af:48:
         39:ae:53:08:01:37:76:bf:04:33:f0:16:db:0c:b7:36:db:1e:
         79:b9:8c:cb:cf:78:a3:dd:c8:b2:e8:ee:ea:39:12:8f:cb:a4:
         fc:aa:1a:9d:d2:23:e7:2b:60:94:5d:cd:fe:35:e4:48:18:3c:
         5c:01:bb:77:9d:79:71:1c:f3:d6:3b:0f:0f:54:b1:a8:3a:88:
         f4:f4:18:ee:4a:43:a3:e7:e2:97:62:e0:c1:3f:09:4e:5f:dc:
         d0:da:59:53:2e:74:3b:03:27:7f:c0:15:b6:0f:ee:2b:83:ff:
         ad:34:41:41:12:94:b9:b5:94:9f:08:ec:e3:e2:42:ea:ea:de:
         06:31:80:e1:fc:44:84:2e:9d:e7:fe:97:db:60:b6:9f:35:91:
         b6:eb:16:95:de:46:99:c7:db:03:7b:cb:32:db:50:d2:db:df:
         ef:c8:c5:15:33:63:21:ae:30:5f:55:bc:32:10:20:6b:89:e5:
         ef:cf:a1:31:1e:cd:08:34:31:24:e6:c8:5c:a5:7f:8d:b1:63:
         fd:d0:6a:ae:26:0e:18:bc:1d:c5:e6:20:e4:45:f1:5d:3d:dc:
         22:a7:dd:de:db:01:29:e9:5b:1e:78:4e:10:36:97:25:0d:5a:
         30:16:68:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3M2d5gRgeaU3rdp+zrrBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MTA5NzJjYzQ1OTU2ODgwNGJiNGI3OTFkN2MxM2NmYjIy
ODM4ODMwHhcNMjYwODE0MjAwMDQyWhcNMjYwODE1MjAwMDQyWjAzMTEwLwYDVQQD
Eyg5ODAwNTVkZTNiN2U4ODAxYjgzNGMyN2FjM2FkMDRmY2E0N2FmODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgqsOvnQ+5Jh7bmFAdcYWCyUu2Ql
AzMjPZGTB8ofHvd/J51QmlSKpsp/cDKzxIqSjDjtdZhSTizK3RWhZ2/nGrWu5ygR
LqUj5SlKCGEKTk+4eSIf6JES3vbzhcIW2j6CstUcRsvTiKzmVBv3lN7Xh4iU8VBN
oTD7tdtujIsGCsa2au22CXCZjycuyKd2kkzlJ/3T+rraC1QIL+8jvmf9UWK1u7t6
gJm+oK3sqR1THuNgAXXoIFxtssT6d6LwJc34aK+LBaF4v/2x0f6PsrzWAXqKgkKe
QgPzP38NxmhSxKYpehXq+7ExLWf5lcLfoiGbdRyO7FczzbgV0wJz5DpLiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgAVd47fogBuDTCesOtBPykevhzMB8GA1UdIwQY
MBaAFOQQlyzEWVaIBLtLeR18E8+yKDiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYt
ZjI3Y2VmNGJhMjI0LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYtZjI3Y2VmNGJhMjI0
LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2oPzo6o
9iCW7cYAxuIWlq9IOa5TCAE3dr8EM/AW2wy3NtseebmMy894o93Isuju6jkSj8uk
/KoandIj5ytglF3N/jXkSBg8XAG7d515cRzz1jsPD1SxqDqI9PQY7kpDo+fil2Lg
wT8JTl/c0NpZUy50OwMnf8AVtg/uK4P/rTRBQRKUubWUnwjs4+JC6ureBjGA4fxE
hC6d5/6X22C2nzWRtusWld5GmcfbA3vLMttQ0tvf78jFFTNjIa4wX1W8MhAga4nl
78+hMR7NCDQxJObIXKV/jbFj/dBqriYOGLwdxeYg5EXxXT3cIqfd3tsBKelbHnhO
EDaXJQ1aMBZozw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:57 2026 by rpki-client