Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File:                     5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier:          1OeX9VjXhOuzIEcau7Lm/1dhvf6DAA8ZcdlRaCJV0m4=
Subject key identifier:   0B:F7:1E:18:B3:4A:2B:E2:79:A7:1B:31:33:50:7F:84:FC:3E:BA:0C
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer:       /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial:       01A0CDECCE5B2CD5DEC093FF327EFF0D947F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number:          081F
Signing time:             Wed 23 Sep 2026 11:00:43 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:43 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:43 +0000
Files and hashes:         1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: RHR+gSglkA7S0vhS//QzHSDvxbzewA76J+FXgiAJZqU=)
                          2: yOjcC_v9jLEMw3DzVhlmsqmU6Yk.roa (hash: xoF0GSXbpt7M9bWTlnPF/z3jkbpV3tEKSL94Epm3XBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:ce:5b:2c:d5:de:c0:93:ff:32:7e:ff:0d:94:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
        Validity
            Not Before: Sep 23 11:00:43 2026 GMT
            Not After : Sep 24 11:00:43 2026 GMT
        Subject: CN=0bf71e18b34a2be279a71b3133507f84fc3eba0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:81:f3:aa:72:a9:a1:c6:3b:fc:68:48:aa:
                    0f:6f:7d:24:17:53:2e:8a:e6:30:0b:3f:d3:36:be:
                    43:6c:96:26:7e:01:cd:34:84:bb:80:9b:5e:ac:b7:
                    44:81:3f:ce:a4:c8:50:33:e7:63:bc:32:55:78:ee:
                    74:23:1e:dd:ca:95:82:03:e5:98:f7:49:a0:05:49:
                    a9:37:18:fc:df:46:ca:98:94:24:b0:50:b7:0b:92:
                    53:b3:17:22:0e:4e:01:46:6d:67:aa:5e:73:a6:fb:
                    fd:85:61:00:cb:41:ec:dc:7c:6c:6f:36:9e:ed:f4:
                    ff:e0:5a:d6:20:14:49:42:70:cf:f7:4f:b3:f1:6c:
                    a9:86:91:51:0a:59:69:3b:4a:90:54:58:a9:c4:7d:
                    81:57:27:f1:59:e6:0a:82:55:9c:d4:f6:e6:c2:9b:
                    5b:50:a4:4d:83:d7:06:eb:37:29:42:47:1a:db:25:
                    e8:09:77:bb:05:bb:48:5a:10:a1:bf:af:39:0c:4e:
                    28:b3:e4:65:73:6c:09:b7:1f:ef:93:10:af:92:01:
                    dc:5d:7d:cf:c0:01:e7:ad:e7:f0:e3:0b:b1:70:c9:
                    1a:a8:18:9b:a6:17:fa:bc:78:eb:10:17:e2:83:68:
                    0f:08:62:f6:32:77:8c:8c:68:76:76:4a:e0:aa:a0:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F7:1E:18:B3:4A:2B:E2:79:A7:1B:31:33:50:7F:84:FC:3E:BA:0C
            X509v3 Authority Key Identifier:
                keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:27:88:2b:69:7b:67:50:7c:5a:6f:da:c1:63:2e:85:50:bd:
         1f:b3:0f:82:ab:8d:b9:7a:3e:1c:39:c7:ac:2c:ce:4b:4a:37:
         c1:ad:68:6c:b0:85:4c:f5:e4:32:d8:3a:50:bc:2b:a6:6d:0f:
         b4:31:bc:c8:0c:af:52:d4:ab:d8:36:f1:9d:53:32:b8:d8:90:
         3c:1c:83:6c:fb:33:a1:b2:a3:af:46:91:41:48:86:89:74:78:
         ab:c6:8a:7a:36:fc:f0:86:7e:db:ed:09:b5:19:86:14:2a:fd:
         ae:f7:69:d2:3d:3a:6c:03:eb:e4:c4:f4:b9:85:99:84:6c:9b:
         f3:80:7e:2c:51:91:6b:85:17:55:2b:8d:32:1c:8c:7c:04:cd:
         9c:1b:30:8e:5f:a5:d5:d1:13:d5:24:b3:a7:a8:d2:fd:08:5d:
         4d:b3:ae:0f:9e:3e:49:f4:45:c4:35:a9:80:bc:1d:9c:fd:35:
         1e:c8:42:85:c7:a3:e5:a3:b9:9b:91:25:60:fb:07:82:97:c3:
         50:49:75:ca:5a:b0:a4:6d:a5:8e:91:e1:b5:b3:62:1e:d2:2e:
         fb:d8:ae:3a:26:35:44:8b:1b:80:a7:40:c8:72:1f:de:ef:d6:
         34:94:1e:17:38:32:7e:59:3d:9b:40:3e:ec:96:b9:1f:c1:45:
         5c:fd:25:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7M5bLNXewJP/Mn7/DZR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YWQ1MGNlNDYxZGI1Y2IzN2E1ODNlNzI5YjcxNTQ5OThl
Y2IxMTcwHhcNMjYwOTIzMTEwMDQzWhcNMjYwOTI0MTEwMDQzWjAzMTEwLwYDVQQD
EygwYmY3MWUxOGIzNGEyYmUyNzlhNzFiMzEzMzUwN2Y4NGZjM2ViYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWeB86pyqaHGO/xoSKoPb30kF1Mu
iuYwCz/TNr5DbJYmfgHNNIS7gJterLdEgT/OpMhQM+djvDJVeO50Ix7dypWCA+WY
90mgBUmpNxj830bKmJQksFC3C5JTsxciDk4BRm1nql5zpvv9hWEAy0Hs3Hxsbzae
7fT/4FrWIBRJQnDP90+z8WyphpFRCllpO0qQVFipxH2BVyfxWeYKglWc1Pbmwptb
UKRNg9cG6zcpQkca2yXoCXe7BbtIWhChv685DE4os+Rlc2wJtx/vkxCvkgHcXX3P
wAHnrefw4wuxcMkaqBibphf6vHjrEBfig2gPCGL2MneMjGh2dkrgqqBDowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv3HhizSivieacbMTNQf4T8ProMMB8GA1UdIwQY
MBaAFOatUM5GHbXLN6WD5ym3FUmY7LEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgt
MGViM2JhNTEzNzRjLzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgtMGViM2JhNTEzNzRj
LzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSeIK2l7
Z1B8Wm/awWMuhVC9H7MPgquNuXo+HDnHrCzOS0o3wa1obLCFTPXkMtg6ULwrpm0P
tDG8yAyvUtSr2DbxnVMyuNiQPByDbPszobKjr0aRQUiGiXR4q8aKejb88IZ+2+0J
tRmGFCr9rvdp0j06bAPr5MT0uYWZhGyb84B+LFGRa4UXVSuNMhyMfATNnBswjl+l
1dET1SSzp6jS/QhdTbOuD54+SfRFxDWpgLwdnP01HshChcej5aO5m5ElYPsHgpfD
UEl1ylqwpG2ljpHhtbNiHtIu+9iuOiY1RIsbgKdAyHIf3u/WNJQeFzgyflk9m0A+
7Ja5H8FFXP0lJA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:58:47 2026 by rpki-client