Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File:                     5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier:          k1Q3VnMMbL3/6lplO0v8l1H8aSSDNrcMON2PYvFc7Rg=
Subject key identifier:   B6:B0:25:B5:AB:DD:51:4B:0D:9E:7F:C9:C1:22:08:A6:1E:AB:4C:DA
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer:       /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial:       01A0021422B34C3A9F674DB7C9CAFB671064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number:          1556
Signing time:             Fri 14 Aug 2026 21:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:09 +0000
Files and hashes:         1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: CsZgV1zu3Jy/qvswJLPzkXxaIA85LkfcwnXM6wWUUFM=)
                          2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:22:b3:4c:3a:9f:67:4d:b7:c9:ca:fb:67:10:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
        Validity
            Not Before: Aug 14 21:01:09 2026 GMT
            Not After : Aug 15 21:01:09 2026 GMT
        Subject: CN=b6b025b5abdd514b0d9e7fc9c12208a61eab4cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:9b:da:98:11:0b:45:36:af:09:f2:86:8a:
                    09:24:c2:7b:2d:62:8d:d5:9d:73:3a:46:45:10:30:
                    52:cc:c0:12:1d:3a:1f:db:14:05:06:3c:ae:5c:9f:
                    42:09:cd:2a:13:15:0f:89:3c:b0:6a:c8:2d:fa:b6:
                    dc:6d:cd:e9:5f:6b:2b:be:99:d8:5a:d3:5a:82:18:
                    dc:17:a3:ad:a2:2f:a0:fe:ea:26:b5:3e:3b:b4:1d:
                    48:73:f8:21:8d:cc:f8:ab:fa:6e:1e:79:c7:b3:73:
                    2e:77:39:26:d8:83:01:4f:38:77:45:0d:d7:d8:65:
                    b5:88:04:3e:88:13:df:51:d3:64:87:fb:22:49:44:
                    6d:54:dd:82:08:56:12:af:04:66:59:8a:eb:69:c2:
                    85:43:e8:2e:d9:4d:98:f8:cf:97:d0:23:6f:61:08:
                    54:fe:ce:f7:8a:31:f3:9e:e3:4c:a4:0e:1e:e8:04:
                    a7:c4:7f:e8:69:07:14:f4:fd:82:9c:74:b1:61:f8:
                    04:29:94:18:ab:c2:be:f0:54:4d:c8:01:5b:94:27:
                    37:e8:01:a2:f8:f3:f3:cf:c8:b2:e4:31:95:d3:8f:
                    30:7d:9f:da:72:84:15:4b:ae:3b:85:ec:d4:16:29:
                    e8:7a:e1:24:c8:d8:8f:2d:2e:fc:92:36:e3:ea:f4:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B0:25:B5:AB:DD:51:4B:0D:9E:7F:C9:C1:22:08:A6:1E:AB:4C:DA
            X509v3 Authority Key Identifier:
                keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:67:6c:84:ee:76:5a:f9:5e:0d:d3:4f:07:0e:ca:d4:63:
         e5:01:4d:53:c3:6d:a5:ef:7f:5f:8a:e6:97:2e:b9:6d:80:52:
         ea:cc:f5:52:f2:fa:04:14:a9:ea:32:ca:23:d2:96:d1:81:0d:
         f2:76:b0:d8:9a:13:26:0d:cc:aa:cf:bc:9c:50:27:de:73:80:
         63:e6:bd:a0:2a:38:0e:81:79:8d:28:c4:bb:80:76:e9:31:09:
         5c:f7:fc:b7:2f:39:8e:1e:e2:73:0c:fc:f8:61:33:11:04:c4:
         1c:a0:69:24:b9:3f:78:ac:57:24:33:e8:4d:0b:36:22:96:65:
         49:81:dc:9a:d0:ba:e9:97:f4:81:78:33:c0:de:92:20:4f:cd:
         0c:02:23:18:08:f1:e7:90:39:49:98:75:29:de:ea:35:14:6f:
         d3:8e:76:ac:71:29:f6:26:cd:e3:09:da:f5:76:fc:78:11:6d:
         cf:6c:d9:85:63:fb:a9:84:58:1c:8f:f0:10:76:66:6d:b6:5f:
         ef:70:2b:b0:2f:38:5e:cd:3b:68:a6:fc:5f:8c:7e:65:4f:a6:
         64:71:d1:d0:fc:2f:69:2d:30:3b:a1:1c:e6:d9:f9:86:c3:15:
         1c:65:d2:27:15:bb:99:a0:85:10:f7:b8:49:2f:35:d6:23:db:
         1f:76:7f:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFCKzTDqfZ023ycr7ZxBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4
ZjhmMzgwHhcNMjYwODE0MjEwMTA5WhcNMjYwODE1MjEwMTA5WjAzMTEwLwYDVQQD
EyhiNmIwMjViNWFiZGQ1MTRiMGQ5ZTdmYzljMTIyMDhhNjFlYWI0Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzeb2pgRC0U2rwnyhooJJMJ7LWKN
1Z1zOkZFEDBSzMASHTof2xQFBjyuXJ9CCc0qExUPiTywasgt+rbcbc3pX2srvpnY
WtNaghjcF6Otoi+g/uomtT47tB1Ic/ghjcz4q/puHnnHs3Mudzkm2IMBTzh3RQ3X
2GW1iAQ+iBPfUdNkh/siSURtVN2CCFYSrwRmWYrracKFQ+gu2U2Y+M+X0CNvYQhU
/s73ijHznuNMpA4e6ASnxH/oaQcU9P2CnHSxYfgEKZQYq8K+8FRNyAFblCc36AGi
+PPzz8iy5DGV048wfZ/acoQVS647hezUFinoeuEkyNiPLS78kjbj6vS/kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLawJbWr3VFLDZ5/ycEiCKYeq0zaMB8GA1UdIwQY
MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt
NDcyZDg4MmU5ZDcyLzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy
LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbpnbITu
dlr5Xg3TTwcOytRj5QFNU8Ntpe9/X4rmly65bYBS6sz1UvL6BBSp6jLKI9KW0YEN
8naw2JoTJg3Mqs+8nFAn3nOAY+a9oCo4DoF5jSjEu4B26TEJXPf8ty85jh7icwz8
+GEzEQTEHKBpJLk/eKxXJDPoTQs2IpZlSYHcmtC66Zf0gXgzwN6SIE/NDAIjGAjx
55A5SZh1Kd7qNRRv0452rHEp9ibN4wna9Xb8eBFtz2zZhWP7qYRYHI/wEHZmbbZf
73ArsC84Xs07aKb8X4x+ZU+mZHHR0PwvaS0wO6Ec5tn5hsMVHGXSJxW7maCFEPe4
SS811iPbH3Z/fg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:07 2026 by rpki-client