Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File:                     5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier:          9om+8R2hY0wAZGkT93JGbpCuheZ+zc9JwvyIR9sdFRg=
Subject key identifier:   C5:5D:EF:FC:9C:91:71:40:4F:07:CC:80:C8:C8:E5:F3:A2:5E:69:F8
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer:       /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial:       01A0D682A2A64A9CEABEB6D31496D9B08C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number:          051F
Signing time:             Fri 25 Sep 2026 03:01:20 +0000
Manifest this update:     Fri 25 Sep 2026 03:01:20 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:20 +0000
Files and hashes:         1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: 9Rdq1WNGYZHa5Mc3CKvjzFy81yd24nHg5UWJrCEhSnY=)
                          2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:a2:a6:4a:9c:ea:be:b6:d3:14:96:d9:b0:8c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
        Validity
            Not Before: Sep 25 03:01:20 2026 GMT
            Not After : Sep 26 03:01:20 2026 GMT
        Subject: CN=c55deffc9c9171404f07cc80c8c8e5f3a25e69f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:1d:3c:98:e9:2d:82:61:74:3a:e8:b3:e4:
                    cb:49:09:ed:bb:43:fa:2f:28:56:e4:aa:a1:86:3a:
                    53:64:36:4c:d6:30:90:63:c0:ec:83:da:e4:33:26:
                    aa:c5:67:b4:c8:61:d2:c6:e3:6d:98:17:fb:a3:94:
                    dc:5e:a1:55:f1:a2:ac:94:04:1f:22:7f:51:cb:15:
                    f9:88:a4:87:40:2a:06:d8:5d:e8:3b:01:1e:1d:55:
                    47:c0:23:98:fb:e2:f8:48:5f:10:2a:c1:ef:f3:05:
                    4e:68:4e:5b:8d:f2:ea:77:c0:9f:50:76:76:07:a1:
                    a5:77:ae:86:88:e1:17:eb:2d:57:9e:11:f6:ee:cf:
                    13:34:ce:b1:0f:23:65:b1:df:a7:54:d1:ef:4a:11:
                    46:ee:bf:e5:91:0e:36:5a:6e:ce:59:9e:05:8f:cb:
                    05:a8:25:d1:b0:66:3e:64:fa:89:d8:79:06:76:cb:
                    52:92:51:e7:6e:b7:ff:74:18:e7:be:3a:a7:5e:d0:
                    9e:a2:d2:4a:c3:e0:d5:a8:9e:25:5e:83:21:f6:73:
                    dd:89:d2:b1:8d:09:43:27:d9:9e:ba:e1:ab:d4:99:
                    de:00:e9:0a:8e:e4:94:d8:b4:41:1a:b1:b6:0c:d6:
                    a0:81:99:68:bb:42:03:3f:01:bf:3f:93:a7:f9:93:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:EF:FC:9C:91:71:40:4F:07:CC:80:C8:C8:E5:F3:A2:5E:69:F8
            X509v3 Authority Key Identifier:
                keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b1:b5:b0:64:b6:13:eb:63:cf:42:c6:0c:8c:d0:de:db:ac:
         02:3b:6a:96:9c:ef:0d:e1:76:fb:da:3d:21:4a:4f:ea:4d:f1:
         95:9b:14:19:a1:7d:5d:47:e2:c8:f7:9a:02:a4:cc:63:30:b6:
         09:a1:4f:22:04:52:82:75:74:e1:f7:21:7c:ac:56:e9:a9:4f:
         51:87:4f:a0:86:eb:fc:81:17:d0:46:2b:c0:11:f7:aa:a3:51:
         b2:87:60:3a:b5:f0:f3:27:18:13:79:c4:14:1f:06:15:ac:dc:
         07:ee:ba:b2:0d:07:29:c5:26:8d:65:b1:93:a5:e7:cb:f6:8d:
         74:c9:d0:3c:d7:f6:82:d4:dd:aa:04:89:d9:a9:be:f7:2c:40:
         67:41:ab:10:06:75:c0:a3:aa:46:dc:0e:11:84:81:f4:21:88:
         1b:1e:6d:e3:f6:25:43:60:03:1c:34:87:2d:3b:6d:98:f9:a2:
         dc:95:d0:d7:d5:be:25:a4:80:46:38:b6:6c:b5:92:ad:9c:b8:
         a7:fe:6b:51:71:98:e3:ba:38:09:b1:f1:a1:2d:86:f4:ca:8f:
         9a:a0:17:28:30:ab:66:bb:c8:68:a1:88:22:8d:b3:84:a2:96:
         12:04:f6:9a:89:ac:59:8d:76:e8:eb:3a:d6:fd:3d:3d:49:3f:
         7f:c7:5b:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWgqKmSpzqvrbTFJbZsIx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ4YzA3NmI1M2E3MTIxYjU0MTc4ZjViNmE3ZTI5MTM1
YmNjZWMwHhcNMjYwOTI1MDMwMTIwWhcNMjYwOTI2MDMwMTIwWjAzMTEwLwYDVQQD
EyhjNTVkZWZmYzljOTE3MTQwNGYwN2NjODBjOGM4ZTVmM2EyNWU2OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL4dPJjpLYJhdDros+TLSQntu0P6
LyhW5KqhhjpTZDZM1jCQY8Dsg9rkMyaqxWe0yGHSxuNtmBf7o5TcXqFV8aKslAQf
In9RyxX5iKSHQCoG2F3oOwEeHVVHwCOY++L4SF8QKsHv8wVOaE5bjfLqd8CfUHZ2
B6Gld66GiOEX6y1XnhH27s8TNM6xDyNlsd+nVNHvShFG7r/lkQ42Wm7OWZ4Fj8sF
qCXRsGY+ZPqJ2HkGdstSklHnbrf/dBjnvjqnXtCeotJKw+DVqJ4lXoMh9nPdidKx
jQlDJ9meuuGr1JneAOkKjuSU2LRBGrG2DNaggZlou0IDPwG/P5On+ZO5DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVd7/yckXFATwfMgMjI5fOiXmn4MB8GA1UdIwQY
MBaAFOf9jAdrU6cSG1QXj1tqfikTW8zsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMt
MTZjNjNjNDI2YzMzLzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMtMTZjNjNjNDI2YzMz
LzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7G1sGS2
E+tjz0LGDIzQ3tusAjtqlpzvDeF2+9o9IUpP6k3xlZsUGaF9XUfiyPeaAqTMYzC2
CaFPIgRSgnV04fchfKxW6alPUYdPoIbr/IEX0EYrwBH3qqNRsodgOrXw8ycYE3nE
FB8GFazcB+66sg0HKcUmjWWxk6Xny/aNdMnQPNf2gtTdqgSJ2am+9yxAZ0GrEAZ1
wKOqRtwOEYSB9CGIGx5t4/YlQ2ADHDSHLTttmPmi3JXQ19W+JaSARji2bLWSrZy4
p/5rUXGY47o4CbHxoS2G9MqPmqAXKDCrZrvIaKGIIo2zhKKWEgT2momsWY126Os6
1v09PUk/f8dbaA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:51:49 2026 by rpki-client