Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
File:                     5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft (raw, json)
Hash identifier:          OqnbOxTp8TlzVolCyKXNbuv/jMhyaLq+IwvaKmTxJbQ=
Subject key identifier:   D0:26:11:EC:50:18:D0:9B:AF:F1:7A:2C:16:C7:A2:0D:07:01:4F:9F
Authority key identifier: E6:F1:4F:F2:DC:79:59:85:69:96:06:7F:D8:E9:87:BE:6A:11:7F:E9
Certificate issuer:       /CN=e6f14ff2dc7959856996067fd8e987be6a117fe9
Certificate serial:       01A0CE5AB7E73A4BA33ACA8E8CCAAA98DFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
Manifest number:          045F
Signing time:             Wed 23 Sep 2026 13:00:46 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:46 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:46 +0000
Files and hashes:         1: 5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl (hash: 6ASNO+DKVAYVCqVjMH1nB+wG2sk1f5IXIUycHfWlfps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:b7:e7:3a:4b:a3:3a:ca:8e:8c:ca:aa:98:df:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f14ff2dc7959856996067fd8e987be6a117fe9
        Validity
            Not Before: Sep 23 13:00:46 2026 GMT
            Not After : Sep 24 13:00:46 2026 GMT
        Subject: CN=d02611ec5018d09baff17a2c16c7a20d07014f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:11:46:72:5a:f9:ed:1d:fa:3b:79:b9:71:
                    08:b4:63:76:ea:c1:b2:be:fc:b6:b5:3d:a8:6b:ea:
                    a4:f9:a4:9c:05:72:e0:d4:ff:f6:ea:e4:d5:f5:a0:
                    aa:9c:ef:e4:36:81:d8:6a:8c:21:31:c5:13:c5:ef:
                    22:22:40:3a:5a:0e:01:38:9c:0a:d4:a1:4b:14:84:
                    cd:77:cd:4f:53:8b:1d:a5:57:67:4b:f6:03:c9:e1:
                    2a:c3:7c:65:25:27:e1:94:7b:ac:89:53:bd:49:a7:
                    17:e9:8f:3a:6c:99:84:50:f2:f1:82:d2:35:c9:b5:
                    63:cb:6e:9b:ea:22:ec:46:f4:36:22:d3:f8:5a:82:
                    b8:d0:2a:b5:e7:75:b4:b9:92:03:8b:dd:e4:2a:f4:
                    52:17:85:76:66:ec:ce:11:5c:db:68:2b:aa:0f:8f:
                    d3:45:a4:cd:d7:7f:84:b3:4a:0a:39:da:87:08:95:
                    81:33:ce:71:73:01:f8:08:a0:3d:7d:ca:e5:30:14:
                    7f:bf:f7:de:af:62:83:37:6b:17:4e:54:a7:78:c9:
                    e3:a2:aa:a6:37:43:3e:46:28:04:04:23:ca:30:cf:
                    23:0e:df:07:9a:35:c1:f7:4e:d1:3f:5d:46:78:69:
                    a1:77:1b:83:28:5e:26:60:fd:38:2b:d9:1c:17:14:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:26:11:EC:50:18:D0:9B:AF:F1:7A:2C:16:C7:A2:0D:07:01:4F:9F
            X509v3 Authority Key Identifier:
                keyid:E6:F1:4F:F2:DC:79:59:85:69:96:06:7F:D8:E9:87:BE:6A:11:7F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3e:db:4d:63:ec:2a:5f:1c:4d:21:33:dc:ea:ff:12:3a:8d:
         67:a3:fa:48:ee:ea:a2:be:64:36:73:99:a6:7c:cb:06:f2:31:
         2d:80:d1:c6:5a:6f:5b:62:4f:53:6c:db:6f:52:7c:2e:d5:a1:
         c3:48:6b:b1:2b:61:9b:91:9b:25:bd:9a:40:c7:5e:4f:6c:46:
         93:a0:15:69:a8:7c:08:f2:71:31:96:38:db:c6:77:7f:8f:0f:
         80:eb:b3:82:60:14:c2:2d:19:69:ab:76:34:a2:24:5f:b8:fa:
         9d:64:64:b2:c6:81:25:71:0d:1e:08:8a:cb:c4:b7:30:d4:ee:
         e5:d0:78:14:57:9a:cd:f1:c6:e9:a9:a1:17:0f:3b:97:50:92:
         62:ca:32:7a:f0:f3:fa:e3:1a:ec:a4:2a:31:3a:cd:23:42:4d:
         8f:87:38:1c:97:16:f8:75:eb:70:af:28:65:4d:12:77:a3:29:
         f3:49:5b:9d:54:11:2d:e7:1e:f5:0e:82:16:a8:c8:5d:93:72:
         18:8d:7f:ec:57:79:99:67:ae:f6:7e:05:39:e9:59:f4:88:b0:
         82:e5:a2:42:ec:ca:2d:59:37:0f:f5:9b:09:78:26:68:60:ab:
         32:ed:de:b7:53:60:c8:95:27:40:2d:f7:b6:01:3c:27:bf:33:
         33:66:df:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWrfnOkujOsqOjMqqmN/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZjE0ZmYyZGM3OTU5ODU2OTk2MDY3ZmQ4ZTk4N2JlNmEx
MTdmZTkwHhcNMjYwOTIzMTMwMDQ2WhcNMjYwOTI0MTMwMDQ2WjAzMTEwLwYDVQQD
EyhkMDI2MTFlYzUwMThkMDliYWZmMTdhMmMxNmM3YTIwZDA3MDE0ZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3gRRnJa+e0d+jt5uXEItGN26sGy
vvy2tT2oa+qk+aScBXLg1P/26uTV9aCqnO/kNoHYaowhMcUTxe8iIkA6Wg4BOJwK
1KFLFITNd81PU4sdpVdnS/YDyeEqw3xlJSfhlHusiVO9SacX6Y86bJmEUPLxgtI1
ybVjy26b6iLsRvQ2ItP4WoK40Cq153W0uZIDi93kKvRSF4V2ZuzOEVzbaCuqD4/T
RaTN13+Es0oKOdqHCJWBM85xcwH4CKA9fcrlMBR/v/fer2KDN2sXTlSneMnjoqqm
N0M+RigEBCPKMM8jDt8HmjXB907RP11GeGmhdxuDKF4mYP04K9kcFxSxywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAmEexQGNCbr/F6LBbHog0HAU+fMB8GA1UdIwQY
MBaAFObxT/LceVmFaZYGf9jph75qEX/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZGUDh0eDVXWVZwbGdaXzJPbUh2bW9SZi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mOGUzMTUtMDVkOS00ZTlkLWFiMmMt
YTUzMjZmNjVlOTBjLzEvNXZGUDh0eDVXWVZwbGdaXzJPbUh2bW9SZi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mOGUzMTUtMDVkOS00ZTlkLWFiMmMtYTUzMjZmNjVlOTBj
LzEvNXZGUDh0eDVXWVZwbGdaXzJPbUh2bW9SZi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtz7bTWPs
Kl8cTSEz3Or/EjqNZ6P6SO7qor5kNnOZpnzLBvIxLYDRxlpvW2JPU2zbb1J8LtWh
w0hrsSthm5GbJb2aQMdeT2xGk6AVaah8CPJxMZY428Z3f48PgOuzgmAUwi0Zaat2
NKIkX7j6nWRkssaBJXENHgiKy8S3MNTu5dB4FFeazfHG6amhFw87l1CSYsoyevDz
+uMa7KQqMTrNI0JNj4c4HJcW+HXrcK8oZU0Sd6Mp80lbnVQRLece9Q6CFqjIXZNy
GI1/7Fd5mWeu9n4FOelZ9IiwguWiQuzKLVk3D/WbCXgmaGCrMu3et1NgyJUnQC33
tgE8J78zM2bfuA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:29:04 2026 by rpki-client