Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File:                     5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier:          wGlJerRaPVNmhI3S/ggrPmvFhMEOPYAiRxMCITfxVOU=
Subject key identifier:   17:AB:C6:82:0C:C9:A9:87:EC:88:8E:31:DC:C5:AF:66:95:CE:32:18
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer:       /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial:       01A10625CA22FEFD000544805103F91E8837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number:          19B1
Signing time:             Sun 04 Oct 2026 09:01:42 +0000
Manifest this update:     Sun 04 Oct 2026 09:01:42 +0000
Manifest next update:     Mon 05 Oct 2026 09:01:42 +0000
Files and hashes:         1: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: IL/DqXBf+JvV8eCll+/5q1EAzfhHcsIqTld9PZr9nFc=)
                          2: bTd9b59X3xCVqHskXGvrFeaO9v8.roa (hash: EN2goF9sb3IS/bx2WJv29WoAXPuGDZ3/PX98KuSaxyM=)
                          3: fmHmQj_X4OHvN_8PimpHxojzpV0.roa (hash: eS9ppZZmO2TIgCAS2V6bNk7YbtOdQ3Bv62jIi3WaUeg=)
                          4: zE9HbI7BKRJnOxPJyfZqqZZHuXg.roa (hash: /XMUTbGL/UqNtuY35Gp0SBdfX/z3vMQWC8vSiInHi6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:25:ca:22:fe:fd:00:05:44:80:51:03:f9:1e:88:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Validity
            Not Before: Oct  4 09:01:42 2026 GMT
            Not After : Oct  5 09:01:42 2026 GMT
        Subject: CN=17abc6820cc9a987ec888e31dcc5af6695ce3218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:e9:66:f1:af:86:6b:62:d1:c5:65:b0:91:
                    4b:e7:c5:e0:bf:2c:74:9e:b3:9f:97:2d:24:31:a6:
                    cc:35:04:bf:17:a2:13:f5:19:20:a3:33:92:52:fb:
                    af:3a:d8:a3:e8:df:e0:21:e1:07:17:48:d8:ff:e6:
                    dd:ea:5e:b1:22:2f:23:d2:e1:b8:c1:94:06:35:eb:
                    31:a9:22:a4:3f:9d:8f:62:14:1f:41:73:af:14:00:
                    cd:25:40:a5:f4:07:b6:90:4a:25:95:ce:81:b3:f8:
                    c0:a6:e9:21:8a:0c:98:85:80:5a:3e:92:42:6a:27:
                    97:0f:51:7b:fc:e5:4c:78:b2:83:79:d8:2e:82:99:
                    4d:9b:6b:36:40:f8:d9:ad:b6:cc:e7:9e:ce:8a:84:
                    0d:2b:35:8c:d8:b1:25:8d:da:2e:48:e3:7b:e5:59:
                    86:18:40:73:a7:fe:80:1d:c4:3d:d7:b8:48:db:25:
                    b1:be:d4:4e:5a:85:86:67:85:e1:46:f5:cd:a6:f9:
                    58:14:a4:63:34:71:ff:26:8c:6a:af:91:47:bf:a0:
                    fb:f0:60:08:9d:af:a9:4f:d7:22:bf:d2:e8:c8:92:
                    52:3c:69:47:8e:fa:14:21:06:75:82:93:46:3d:2f:
                    f3:23:1b:a2:21:ed:cb:3a:2a:7d:86:60:15:74:fd:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AB:C6:82:0C:C9:A9:87:EC:88:8E:31:DC:C5:AF:66:95:CE:32:18
            X509v3 Authority Key Identifier:
                keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:67:ef:02:6e:99:b0:6d:0e:9e:f3:bc:8a:1a:69:9a:e3:
         42:8d:d3:7f:36:7c:99:90:b1:7c:7b:38:0c:09:a7:b1:c6:b3:
         e6:cb:11:79:0f:69:71:09:ae:ec:1f:f7:20:60:2a:9f:46:92:
         4c:37:ba:3b:d4:cd:e3:b0:b2:88:44:1a:6f:ae:05:f6:46:62:
         9a:fc:bc:75:a4:e2:ca:32:01:69:7c:c2:aa:05:47:c3:6c:5c:
         2f:01:7b:74:7e:76:d5:7d:52:6a:b0:d4:29:f3:98:51:1c:69:
         9a:8f:d8:bf:82:00:b6:a6:28:0f:03:c9:b5:fb:ff:17:31:95:
         d4:10:f7:49:18:cb:e8:4b:56:bc:1b:7d:48:b0:58:21:72:d5:
         bb:46:ab:70:0c:39:0d:44:90:51:5e:77:95:d8:5c:be:8b:73:
         2f:96:d0:f0:10:1d:57:85:16:08:ba:bf:41:4d:dc:0b:d1:7f:
         2f:a7:58:4e:65:40:eb:16:1d:ba:97:a2:e8:4d:4d:47:65:53:
         8c:a9:b4:b5:fd:b0:94:c1:88:b9:66:99:c2:b5:ad:61:fe:c4:
         03:89:21:c3:64:8e:8e:b1:aa:0b:4f:dd:98:d2:ca:59:8c:13:
         3b:af:ca:14:63:82:b4:fc:95:d5:60:93:ad:88:a7:b5:e8:01:
         1e:8f:c8:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGJcoi/v0ABUSAUQP5Hog3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2JkZTc1ZDUzNmU5MWIyOGEyMzQ2OTM0OWQxY2YyOGI4
ODRhM2IwHhcNMjYxMDA0MDkwMTQyWhcNMjYxMDA1MDkwMTQyWjAzMTEwLwYDVQQD
EygxN2FiYzY4MjBjYzlhOTg3ZWM4ODhlMzFkY2M1YWY2Njk1Y2UzMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnfpZvGvhmti0cVlsJFL58Xgvyx0
nrOfly0kMabMNQS/F6IT9RkgozOSUvuvOtij6N/gIeEHF0jY/+bd6l6xIi8j0uG4
wZQGNesxqSKkP52PYhQfQXOvFADNJUCl9Ae2kEollc6Bs/jApukhigyYhYBaPpJC
aieXD1F7/OVMeLKDedgugplNm2s2QPjZrbbM557OioQNKzWM2LEljdouSON75VmG
GEBzp/6AHcQ917hI2yWxvtROWoWGZ4XhRvXNpvlYFKRjNHH/Joxqr5FHv6D78GAI
na+pT9civ9LoyJJSPGlHjvoUIQZ1gpNGPS/zIxuiIe3LOip9hmAVdP2wIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBerxoIMyamH7IiOMdzFr2aVzjIYMB8GA1UdIwQY
MBaAFOXL3nXVNukbKKI0aTSdHPKLiEo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMTVlOTAtNTIwNC00ZDA5LThiMjYt
ZmNlYWNiZDczODQ1LzEvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wMTVlOTAtNTIwNC00ZDA5LThiMjYtZmNlYWNiZDczODQ1
LzEvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOZn7wJu
mbBtDp7zvIoaaZrjQo3TfzZ8mZCxfHs4DAmnscaz5ssReQ9pcQmu7B/3IGAqn0aS
TDe6O9TN47CyiEQab64F9kZimvy8daTiyjIBaXzCqgVHw2xcLwF7dH521X1SarDU
KfOYURxpmo/Yv4IAtqYoDwPJtfv/FzGV1BD3SRjL6EtWvBt9SLBYIXLVu0arcAw5
DUSQUV53ldhcvotzL5bQ8BAdV4UWCLq/QU3cC9F/L6dYTmVA6xYdupei6E1NR2VT
jKm0tf2wlMGIuWaZwrWtYf7EA4khw2SOjrGqC0/dmNLKWYwTO6/KFGOCtPyV1WCT
rYintegBHo/Ifg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:54:03 2026 by rpki-client