Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File:                     5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier:          4xEBFG7BGh7tCpfX35oO3VSwL1p+5UMaAofU9Wv8eGs=
Subject key identifier:   72:5B:6A:62:33:F0:07:44:F4:30:F9:9A:B8:D5:DC:92:0D:9F:FA:45
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer:       /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial:       01A0CE23F88F12DCF81EC33289AEC9CF083A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number:          15AE
Signing time:             Wed 23 Sep 2026 12:00:58 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:58 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:58 +0000
Files and hashes:         1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: uAL9xShHhV/dz925DmB1zpjmIwilTjfapU31LSoho1I=)
                          2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
                          3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
                          4: a6ZdqqnUZq7Xf8v413mOD4gnuIc.roa (hash: /YCERQ9X6MgXLxlcuxTGu+1tVQk1kXYJeSvr9xZddks=)
                          5: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
                          6: zhx_i8-hMUtVtHxFFqKV6pWlvfI.roa (hash: jXE8lQ9PxcnmjRW7Jbdjl6pEn7gNBMRFi9VitvgBzcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:f8:8f:12:dc:f8:1e:c3:32:89:ae:c9:cf:08:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
        Validity
            Not Before: Sep 23 12:00:58 2026 GMT
            Not After : Sep 24 12:00:58 2026 GMT
        Subject: CN=725b6a6233f00744f430f99ab8d5dc920d9ffa45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:8f:53:c0:21:f9:e5:60:82:95:77:19:44:
                    83:cd:1b:d7:d2:53:4f:0c:06:9c:f2:91:b6:15:09:
                    40:d9:5c:17:5e:78:cf:25:43:cb:32:dd:95:f6:47:
                    01:7b:3f:59:8a:c3:33:68:fe:72:5d:b7:0c:a3:4b:
                    d8:7b:fb:be:fb:e0:ac:78:d4:1b:fc:8f:f3:0d:c6:
                    5e:1a:04:d3:99:99:fc:7b:da:97:6a:e2:75:88:d6:
                    da:01:c4:b0:de:80:02:b5:d1:2b:74:e9:24:d1:74:
                    71:57:79:4a:c4:e2:e9:50:6f:43:1f:31:34:66:23:
                    e9:c3:22:ac:be:63:12:8d:4a:52:8d:e2:b3:54:77:
                    03:c2:48:1b:45:2b:5d:08:86:05:f7:68:47:57:13:
                    d7:43:f9:37:64:93:b5:2b:20:4f:cd:05:01:76:bb:
                    3f:fb:8e:6e:81:2d:9f:52:93:f4:d5:2a:15:e6:95:
                    4d:ab:d7:42:fc:37:37:65:fb:9b:8f:7d:21:52:a2:
                    ac:ec:88:fc:95:40:6a:50:64:9b:c1:b6:a3:f5:c3:
                    ec:4c:23:72:b6:24:16:4e:4a:82:94:2c:85:ef:a7:
                    29:7e:9d:76:cd:b0:8e:cd:ee:15:3b:c0:e6:1d:29:
                    70:81:4a:29:ad:3d:6c:79:49:65:74:21:aa:7a:99:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5B:6A:62:33:F0:07:44:F4:30:F9:9A:B8:D5:DC:92:0D:9F:FA:45
            X509v3 Authority Key Identifier:
                keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d7:99:c2:ce:a1:fc:d6:e4:da:66:73:c9:60:48:0b:7f:66:
         13:74:36:4d:3f:46:56:0d:e2:61:77:ac:da:f1:84:8e:1e:62:
         db:2a:fa:eb:d3:06:7c:b8:80:bf:9d:77:6c:5f:dc:dc:2b:14:
         b0:49:4c:cd:c5:64:5b:9e:e5:ae:c5:5c:6b:cb:99:4a:5a:14:
         f1:8e:7f:7c:5e:42:3a:60:9c:5b:57:1d:b4:48:bd:39:3c:77:
         f8:fe:e5:3c:6a:74:6c:68:14:ea:f7:dd:58:30:f8:f0:80:17:
         49:f9:7c:da:39:cf:43:3d:7a:91:70:68:c0:60:2f:1c:aa:33:
         58:41:27:dc:6a:b7:ee:f0:4e:d1:c2:84:73:8d:66:f6:5b:89:
         f5:89:38:4d:09:34:39:c2:c3:e3:fb:5a:0e:ae:f9:ee:f5:44:
         41:8e:73:89:d2:44:56:7c:ef:6c:43:e3:e0:27:7b:bf:84:5a:
         92:b7:7b:83:f5:21:5a:af:4c:0a:be:0c:e6:38:00:fc:8c:da:
         e3:20:02:38:68:00:e4:77:14:9c:6f:27:fe:77:d8:1e:71:42:
         4d:58:af:95:3c:be:69:e6:97:1f:2c:6b:e8:a9:4a:19:5e:40:
         56:3c:d9:db:3b:ad:74:79:06:c6:59:ec:58:72:ef:a4:f3:c4:
         f8:3c:de:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI/iPEtz4HsMyia7Jzwg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjYwOTIzMTIwMDU4WhcNMjYwOTI0MTIwMDU4WjAzMTEwLwYDVQQD
Eyg3MjViNmE2MjMzZjAwNzQ0ZjQzMGY5OWFiOGQ1ZGM5MjBkOWZmYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeGPU8Ah+eVggpV3GUSDzRvX0lNP
DAac8pG2FQlA2VwXXnjPJUPLMt2V9kcBez9ZisMzaP5yXbcMo0vYe/u+++CseNQb
/I/zDcZeGgTTmZn8e9qXauJ1iNbaAcSw3oACtdErdOkk0XRxV3lKxOLpUG9DHzE0
ZiPpwyKsvmMSjUpSjeKzVHcDwkgbRStdCIYF92hHVxPXQ/k3ZJO1KyBPzQUBdrs/
+45ugS2fUpP01SoV5pVNq9dC/Dc3Zfubj30hUqKs7Ij8lUBqUGSbwbaj9cPsTCNy
tiQWTkqClCyF76cpfp12zbCOze4VO8DmHSlwgUoprT1seUlldCGqepmDxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJbamIz8AdE9DD5mrjV3JINn/pFMB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNeZws6h
/Nbk2mZzyWBIC39mE3Q2TT9GVg3iYXes2vGEjh5i2yr669MGfLiAv513bF/c3CsU
sElMzcVkW57lrsVca8uZSloU8Y5/fF5COmCcW1cdtEi9OTx3+P7lPGp0bGgU6vfd
WDD48IAXSfl82jnPQz16kXBowGAvHKozWEEn3Gq37vBO0cKEc41m9luJ9Yk4TQk0
OcLD4/taDq757vVEQY5zidJEVnzvbEPj4Cd7v4Rakrd7g/UhWq9MCr4M5jgA/Iza
4yACOGgA5HcUnG8n/nfYHnFCTVivlTy+aeaXHyxr6KlKGV5AVjzZ2zutdHkGxlns
WHLvpPPE+DzeQw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:26:10 2026 by rpki-client