Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File:                     5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier:          0SmLLyXp/TAJEnjShyKwyLZxhEEWwxtFQiBEviMiCsk=
Subject key identifier:   5D:CE:BE:AD:3B:C9:57:0B:F9:58:13:84:8B:9C:BD:35:1F:C0:02:6E
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer:       /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial:       01A13E95317D41776F9EAE314858309CB683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number:          1164
Signing time:             Thu 15 Oct 2026 08:02:07 +0000
Manifest this update:     Thu 15 Oct 2026 08:02:07 +0000
Manifest next update:     Fri 16 Oct 2026 08:02:07 +0000
Files and hashes:         1: 1s9edady0IlLFTjAVGX74BTlTOU.roa (hash: UbGcCZaiXwxi+mV6BY8TzVOmDvRo6W4bzSToeQyBxU8=)
                          2: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: qOdgbWm69WxUbQtFgALLxtEbVmnCxrYEguwZCm66AJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:95:31:7d:41:77:6f:9e:ae:31:48:58:30:9c:b6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
        Validity
            Not Before: Oct 15 08:02:07 2026 GMT
            Not After : Oct 16 08:02:07 2026 GMT
        Subject: CN=5dcebead3bc9570bf95813848b9cbd351fc0026e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:a9:e3:d8:aa:bd:dd:e1:a3:40:43:0c:d8:
                    40:92:b0:ee:f4:27:fa:99:85:bd:c7:ca:de:83:68:
                    fd:8f:99:ff:36:35:a8:68:7c:a1:d3:90:2a:3d:d5:
                    38:05:dd:3c:0a:c3:96:1f:7d:ee:81:83:20:22:73:
                    86:c1:c0:34:d6:44:47:3c:a2:58:8a:ba:c2:39:c7:
                    14:a6:fe:3b:39:3d:f8:b0:31:70:40:7b:2e:67:7b:
                    f3:5a:cb:23:ce:20:ee:66:c5:a7:4d:4d:9b:6e:e2:
                    9e:1a:0d:7c:58:d3:fe:78:d2:02:0d:55:15:1c:f5:
                    30:97:7e:90:b7:bf:ef:73:66:ed:e4:2e:a2:2a:80:
                    54:a6:12:a4:e2:a6:61:94:1a:47:02:d4:ac:77:4f:
                    64:c1:c8:a4:49:cc:a4:ff:4f:9b:60:ad:9b:75:05:
                    a6:39:00:df:eb:7a:72:67:4f:65:87:cf:21:40:1d:
                    2b:8b:09:ca:c0:57:b8:82:59:16:cf:3b:4d:0c:96:
                    0a:d5:12:db:55:0b:f3:0d:7b:c4:dd:cb:2f:ea:20:
                    9b:14:6b:81:d5:d1:82:bc:06:43:1d:a4:4b:80:e4:
                    20:dd:92:6a:a7:77:13:92:af:b5:d5:25:4f:e8:3f:
                    4a:7b:a1:61:99:80:4e:47:b8:60:2e:05:1e:59:4f:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:BE:AD:3B:C9:57:0B:F9:58:13:84:8B:9C:BD:35:1F:C0:02:6E
            X509v3 Authority Key Identifier:
                keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:4d:be:fe:cf:46:82:39:11:bf:60:21:01:3f:c3:5f:f0:
         97:76:8a:e1:ed:48:3b:aa:28:4c:27:a9:8b:66:7b:2f:69:70:
         96:93:ed:0f:ec:e8:6e:3d:79:59:6a:ea:f0:cc:11:5c:77:e5:
         5e:49:c9:92:bb:21:49:9f:3f:66:b4:c3:e0:5a:08:cd:5e:ea:
         9a:e9:42:25:c2:bf:78:0e:e5:1a:06:14:67:16:58:68:b6:3d:
         56:0c:98:18:98:91:cc:6f:49:c7:69:50:cd:20:52:33:1b:70:
         17:56:f2:0b:72:68:bf:36:ee:64:d4:5f:11:fd:0b:b4:1a:c9:
         9c:2b:e8:c6:e1:cf:c7:74:82:46:71:bd:69:86:8d:2a:43:76:
         4e:5c:37:46:85:c2:29:67:f6:84:a3:64:10:4e:dd:27:bb:26:
         15:8b:bd:74:8b:d4:cb:44:ff:d7:85:2e:d4:9e:5e:7b:90:be:
         95:05:7c:dd:46:6e:8f:65:81:84:1f:2b:3e:d8:f7:38:7a:aa:
         af:4b:1c:d6:69:6d:cf:59:f0:46:1e:40:cc:84:ce:4a:eb:83:
         ba:a9:01:30:9c:4c:24:0b:16:76:1b:e1:f7:43:b0:52:12:9d:
         36:9e:98:4b:31:1c:fe:43:b5:3a:ec:27:cd:5e:05:5e:27:61:
         a1:bd:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:22:53 2026 by rpki-client