Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          96DLKjEGD0vJnAk+aDiM1Afo+vNG0cetCW/1W+2NYz0=
Subject key identifier:   47:AA:14:DA:FE:8B:50:2A:A4:A8:D0:B9:B1:F5:FA:A3:F9:29:F8:3D
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       01A13E5CC10B9ABDA8DFD5DA0B5FDC369B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0E54
Signing time:             Thu 15 Oct 2026 07:00:28 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:28 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:28 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: FFq2hc03QgIznPy+oTzPlDx7ifOgwX/oGr/iVQPM6d0=)
                          2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:c1:0b:9a:bd:a8:df:d5:da:0b:5f:dc:36:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Oct 15 07:00:28 2026 GMT
            Not After : Oct 16 07:00:28 2026 GMT
        Subject: CN=47aa14dafe8b502aa4a8d0b9b1f5faa3f929f83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:cb:e4:6f:d3:a4:ab:2e:a5:5f:8c:c0:af:
                    37:c8:01:43:b7:0d:18:ad:b2:7d:8f:22:50:f7:ea:
                    90:1e:18:4b:a9:e1:a9:11:2b:c5:9c:66:97:49:69:
                    3b:9e:19:9c:23:b3:7a:d5:c2:48:59:ee:aa:d4:96:
                    e4:b2:18:1b:d1:51:bf:9a:27:35:36:c1:69:1c:20:
                    55:5a:22:f1:df:b5:1a:ae:0e:e1:75:c7:79:08:10:
                    98:49:4a:c0:95:ad:62:35:de:80:60:2f:eb:a4:2b:
                    55:e5:0b:d2:b4:06:ad:f9:1f:f1:af:2a:b2:5c:7e:
                    83:52:e9:9c:0d:31:85:3a:89:51:9c:c3:fc:bb:fe:
                    1c:ec:71:b8:44:2d:88:2b:5b:87:d6:0f:b4:73:de:
                    25:75:11:85:2a:39:fb:03:c2:42:4d:bc:ef:91:e0:
                    ab:9f:1d:33:b2:19:a4:53:cb:06:e0:2d:bc:45:ff:
                    ba:72:1f:39:89:c8:3e:69:cc:76:0b:e2:3a:4c:e7:
                    4a:72:9c:f9:77:af:90:0b:33:49:da:53:26:d1:a1:
                    ca:96:89:df:f6:d3:e0:f4:2b:7e:7b:08:51:f3:4b:
                    5b:ab:0f:53:54:02:47:f9:00:52:b8:9d:d1:4e:65:
                    5b:2f:c9:7e:c4:97:21:a5:b7:a9:63:9e:1e:a0:b8:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AA:14:DA:FE:8B:50:2A:A4:A8:D0:B9:B1:F5:FA:A3:F9:29:F8:3D
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:81:38:bf:c7:26:05:e4:29:9a:f7:06:50:72:59:80:b2:e5:
         77:7c:f5:48:2a:5a:a2:53:03:7e:62:15:af:d3:b7:8c:69:a7:
         f5:16:2a:b1:fe:a1:b4:7f:b1:8d:ad:4f:02:ed:53:29:00:ce:
         1c:27:d7:4e:03:f0:dd:8e:47:0c:63:d7:ad:ac:b3:9f:86:91:
         b5:fd:77:bb:ad:5e:59:25:b3:ac:47:c4:13:97:c5:1d:0b:e7:
         61:6f:a7:44:9d:24:53:ca:e4:f0:80:ef:52:2c:75:b0:bd:59:
         9f:23:fc:fe:c2:52:4b:44:5c:b7:3e:21:b2:bb:d1:b2:5b:bc:
         52:b3:fb:ef:8c:3d:af:b8:c0:ec:73:83:01:36:2c:96:cc:23:
         89:b1:3a:c4:db:ef:31:67:e5:05:d9:8e:e0:a2:ea:28:d2:be:
         72:cb:32:b4:e9:b8:98:dc:b1:35:01:8d:25:f4:ea:b9:df:96:
         de:bc:75:07:8f:c4:86:31:35:11:ee:b6:f6:3d:b4:5b:31:7d:
         31:ab:a7:cf:7f:dc:77:dd:6e:0e:c4:88:ae:f1:04:e8:bc:38:
         f4:21:d0:a3:1a:84:76:58:65:c8:c2:f8:47:4f:a8:a8:3e:40:
         6c:23:12:c8:cb:d8:83:68:24:21:94:90:fc:cf:f2:d3:4e:ba:
         8f:18:03:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XMELmr2o39XaC1/cNps2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0N2VlNWJlZTNlZDIzZjk0Mzc2MWU1OGYwZWVhOTdjN2M1
YmY4N2MwHhcNMjYxMDE1MDcwMDI4WhcNMjYxMDE2MDcwMDI4WjAzMTEwLwYDVQQD
Eyg0N2FhMTRkYWZlOGI1MDJhYTRhOGQwYjliMWY1ZmFhM2Y5MjlmODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZzL5G/TpKsupV+MwK83yAFDtw0Y
rbJ9jyJQ9+qQHhhLqeGpESvFnGaXSWk7nhmcI7N61cJIWe6q1Jbkshgb0VG/mic1
NsFpHCBVWiLx37Uarg7hdcd5CBCYSUrAla1iNd6AYC/rpCtV5QvStAat+R/xryqy
XH6DUumcDTGFOolRnMP8u/4c7HG4RC2IK1uH1g+0c94ldRGFKjn7A8JCTbzvkeCr
nx0zshmkU8sG4C28Rf+6ch85icg+acx2C+I6TOdKcpz5d6+QCzNJ2lMm0aHKlonf
9tPg9Ct+ewhR80tbqw9TVAJH+QBSuJ3RTmVbL8l+xJchpbepY54eoLjSPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeqFNr+i1AqpKjQubH1+qP5Kfg9MB8GA1UdIwQY
MBaAFOR+5b7j7SP5Q3YeWPDuqXx8W/h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgt
MmUyOTA4NTg4ODY1LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgtMmUyOTA4NTg4ODY1
LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIE4v8cm
BeQpmvcGUHJZgLLld3z1SCpaolMDfmIVr9O3jGmn9RYqsf6htH+xja1PAu1TKQDO
HCfXTgPw3Y5HDGPXrayzn4aRtf13u61eWSWzrEfEE5fFHQvnYW+nRJ0kU8rk8IDv
Uix1sL1ZnyP8/sJSS0Rctz4hsrvRslu8UrP774w9r7jA7HODATYslswjibE6xNvv
MWflBdmO4KLqKNK+cssytOm4mNyxNQGNJfTqud+W3rx1B4/EhjE1Ee629j20WzF9
Maunz3/cd91uDsSIrvEE6Lw49CHQoxqEdlhlyML4R0+oqD5AbCMSyMvYg2gkIZSQ
/M/y0066jxgDpQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:07:43 2026 by rpki-client