Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File:                     5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier:          5SARo9WTA29MaU6rWuw5f281ldyptOdSF/+JXsjEVi0=
Subject key identifier:   FA:1F:85:2B:2A:AC:CF:B9:F2:FB:6D:3E:3C:9A:8F:9E:6B:DF:57:05
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer:       /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial:       019E30E047F3D1AF73C5D83BFCAD8D6437A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number:          1214
Signing time:             Sat 16 May 2026 13:01:05 +0000
Manifest this update:     Sat 16 May 2026 13:01:05 +0000
Manifest next update:     Sun 17 May 2026 13:01:05 +0000
Files and hashes:         1: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (hash: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0=)
                          2: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (hash: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g=)
                          3: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: 5xNIwpDsWpP1rh32VwoEiBrbjx8jEjWXLBT5lFna5lk=)
                          4: 6ecKe0A8FdH_pCFTNXNYem6VwN0.roa (hash: KZ+1oly4tcR/bcNP0ACIfGBzE0lasROyGqTBaCkUeaU=)
                          5: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (hash: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc=)
                          6: CZHwjRKRoezncj5wC2tcP7BId0k.roa (hash: NtnGWR67eyLICzLT2JOCuoqA4A2EyKFmQWPiA8KDgfI=)
                          7: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (hash: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:47:f3:d1:af:73:c5:d8:3b:fc:ad:8d:64:37:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
        Validity
            Not Before: May 16 13:01:05 2026 GMT
            Not After : May 17 13:01:05 2026 GMT
        Subject: CN=fa1f852b2aaccfb9f2fb6d3e3c9a8f9e6bdf5705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5f:8d:07:61:4f:47:a1:3b:b1:96:04:41:6d:
                    94:94:4d:77:06:b5:44:36:24:5a:b6:98:4f:96:8c:
                    7c:ac:97:90:ad:cd:a2:d3:75:da:92:11:9b:64:dc:
                    39:bb:b5:e0:7e:ee:b2:51:12:4f:5a:39:56:bf:b5:
                    c0:09:d7:cb:35:ca:22:eb:66:05:6a:2d:c1:0d:49:
                    87:20:4b:00:46:11:35:a4:f5:a4:ca:6b:af:5d:51:
                    56:a5:5f:0d:20:f1:ad:1d:ec:bb:bc:2f:77:14:ed:
                    ec:e4:d8:3b:ad:55:14:77:f1:45:2d:17:ad:11:32:
                    2a:d8:d4:4c:11:72:a6:94:5a:e5:34:49:18:8c:56:
                    a8:84:24:f3:52:4e:76:77:b2:15:9c:6a:c0:34:d2:
                    97:38:35:c1:37:57:57:66:61:6e:26:76:2c:08:f8:
                    54:20:ac:91:5c:36:4b:08:6f:2a:09:c9:34:e4:f9:
                    56:86:7d:ed:71:08:54:d2:d2:1f:82:ce:ff:72:0c:
                    e5:51:cd:bd:3d:75:15:8c:12:7f:d1:b2:56:d2:6f:
                    fa:7c:bf:f0:f1:b3:01:85:ef:0c:d8:b6:31:58:b7:
                    9c:e3:f6:97:c8:3d:a6:df:10:53:39:af:00:3b:42:
                    d7:96:8c:6e:f5:31:57:24:d3:07:f9:50:9c:d6:44:
                    16:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1F:85:2B:2A:AC:CF:B9:F2:FB:6D:3E:3C:9A:8F:9E:6B:DF:57:05
            X509v3 Authority Key Identifier:
                keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:38:d5:48:bd:ee:86:c9:a3:ba:9c:a2:f8:e7:77:32:0e:be:
         56:79:60:73:16:ed:d8:ee:2b:74:96:9b:08:f0:e5:59:b4:a3:
         d6:d2:01:08:66:51:d1:f4:33:4f:f9:e4:a8:0b:b8:c5:3f:b6:
         a9:55:0a:35:16:f6:54:f3:aa:65:71:18:cf:65:e2:65:d6:1b:
         c7:1d:ae:a6:e2:f3:d4:59:37:b5:7d:2b:42:8d:84:94:d5:72:
         1b:39:9c:3a:97:f4:cb:aa:00:4f:26:af:23:15:6e:05:ec:2e:
         cc:63:ea:17:08:de:af:42:19:84:24:2d:74:83:46:53:42:20:
         e2:bf:bb:3f:e4:cb:16:47:47:82:2f:3b:59:78:46:c7:c2:39:
         9f:85:98:ac:45:c1:91:f1:36:d5:2d:7f:23:77:d2:29:5a:4b:
         2c:61:31:ac:8b:b4:b7:30:53:ed:bd:3a:6d:d0:a1:f9:eb:4a:
         9c:c4:d5:3e:5c:e4:03:fb:02:1a:c9:e6:b4:03:c1:9c:36:d2:
         a5:9b:d1:85:28:d5:23:2a:c4:7a:41:4a:5d:5d:c8:da:d2:8f:
         c3:6c:c2:f3:42:d0:9e:65:50:f7:4e:38:85:cc:e6:4f:65:f1:
         4d:ea:66:5b:3e:29:b1:d2:b0:57:99:4c:e0:70:6d:bc:c1:ab:
         cc:eb:dd:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Efz0a9zxdg7/K2NZDehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjYwNTE2MTMwMTA1WhcNMjYwNTE3MTMwMTA1WjAzMTEwLwYDVQQD
EyhmYTFmODUyYjJhYWNjZmI5ZjJmYjZkM2UzYzlhOGY5ZTZiZGY1NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l+NB2FPR6E7sZYEQW2UlE13BrVE
NiRatphPlox8rJeQrc2i03XakhGbZNw5u7Xgfu6yURJPWjlWv7XACdfLNcoi62YF
ai3BDUmHIEsARhE1pPWkymuvXVFWpV8NIPGtHey7vC93FO3s5Ng7rVUUd/FFLRet
ETIq2NRMEXKmlFrlNEkYjFaohCTzUk52d7IVnGrANNKXODXBN1dXZmFuJnYsCPhU
IKyRXDZLCG8qCck05PlWhn3tcQhU0tIfgs7/cgzlUc29PXUVjBJ/0bJW0m/6fL/w
8bMBhe8M2LYxWLec4/aXyD2m3xBTOa8AO0LXloxu9TFXJNMH+VCc1kQWrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPofhSsqrM+58vttPjyaj55r31cFMB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjjVSL3u
hsmjupyi+Od3Mg6+Vnlgcxbt2O4rdJabCPDlWbSj1tIBCGZR0fQzT/nkqAu4xT+2
qVUKNRb2VPOqZXEYz2XiZdYbxx2upuLz1Fk3tX0rQo2ElNVyGzmcOpf0y6oATyav
IxVuBewuzGPqFwjer0IZhCQtdINGU0Ig4r+7P+TLFkdHgi87WXhGx8I5n4WYrEXB
kfE21S1/I3fSKVpLLGExrIu0tzBT7b06bdCh+etKnMTVPlzkA/sCGsnmtAPBnDbS
pZvRhSjVIyrEekFKXV3I2tKPw2zC80LQnmVQ9044hczmT2XxTepmWz4psdKwV5lM
4HBtvMGrzOvd1w==
-----END CERTIFICATE-----
Generated at Sat May 16 17:56:06 2026 by rpki-client