Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          rAuUyAft+FlCrR9nt5Tl5bTXVNhVwbJyMzu9dfSkniU=
Subject key identifier:   7C:93:1C:05:19:24:9A:73:57:D7:69:FF:6B:58:D1:B0:DF:1C:FD:47
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       01A0D07FDB4BF0C325C02B93C5317B3457D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          136C
Signing time:             Wed 23 Sep 2026 23:00:35 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:35 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:35 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: IYEQtHXGKXoLs9+GuCOTp9b1KgYTxt2E6ZVJyVXkO0Y=)
                          2: HCkHGxOIl0AvSluH6FDwE5YOqmY.roa (hash: ZodFEdt/PdT+m5KjweAMGEU2ve/bYXAovApfHVhI2mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:db:4b:f0:c3:25:c0:2b:93:c5:31:7b:34:57:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Sep 23 23:00:35 2026 GMT
            Not After : Sep 24 23:00:35 2026 GMT
        Subject: CN=7c931c0519249a7357d769ff6b58d1b0df1cfd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:ab:ad:16:53:c3:38:8c:26:6b:a4:c9:45:
                    c7:c5:72:c9:19:c5:0e:64:3e:07:5e:3a:1e:19:f8:
                    4f:0d:47:a7:d4:e2:c0:50:8f:3e:31:b7:b4:3d:6c:
                    df:d4:a9:26:39:7a:f3:89:ca:29:27:b1:d9:8e:02:
                    20:ad:67:b3:d0:14:38:79:d8:8d:70:9e:b9:be:79:
                    fb:1a:76:80:3d:6e:5b:17:e7:a7:1a:aa:c0:9a:c1:
                    a6:ce:58:b6:ec:ed:5a:07:1d:ce:89:42:99:f6:ab:
                    32:7b:b3:bd:53:46:b9:ff:d9:49:48:be:de:7a:69:
                    e3:9d:8f:36:87:c1:f9:3f:d0:9d:1d:1e:0a:b7:69:
                    e4:e7:f0:5f:60:aa:38:8c:f7:05:1d:62:65:e2:55:
                    a2:a8:2a:34:92:0a:c3:00:d3:b5:51:d1:9f:04:7c:
                    6f:d4:e9:49:c3:6f:47:fc:ea:dd:b9:5c:1b:1e:c4:
                    11:6e:81:4b:f9:ee:6b:fe:0d:1e:7b:d2:89:ca:78:
                    70:a8:69:49:32:4f:ba:ce:02:ef:49:ba:45:c3:f4:
                    44:ac:96:11:3f:59:54:ca:84:28:47:5b:09:b3:a7:
                    41:44:2f:a2:bf:18:f7:2a:43:dc:67:a4:8c:b1:f8:
                    7a:7c:46:7a:58:4d:de:8e:9e:60:ba:61:19:c4:9a:
                    48:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:93:1C:05:19:24:9A:73:57:D7:69:FF:6B:58:D1:B0:DF:1C:FD:47
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f9:9c:7a:67:94:db:92:02:a8:24:45:3e:35:a2:1b:ba:77:
         7e:38:f5:2f:3f:89:9c:97:5d:44:47:41:6d:5b:00:12:1e:c5:
         05:a8:c2:58:1c:33:99:60:72:8d:d5:89:c1:30:b6:eb:c7:26:
         f0:8f:92:7f:05:ea:9a:f8:f8:d9:75:35:61:2e:7f:4e:b2:66:
         4f:2c:43:0e:7a:57:a1:99:36:6a:2a:8b:ec:8f:e8:9b:4c:f3:
         de:2c:7a:fe:3d:dc:4d:33:61:86:87:48:e9:3a:74:21:4d:51:
         5b:8c:28:38:ba:19:3c:6c:36:8b:83:44:cd:df:b2:3e:4c:20:
         e6:78:62:b7:1b:f4:f8:00:33:c6:e8:32:16:95:90:cc:d0:bb:
         e7:a0:ec:6f:68:47:43:2c:1f:c2:71:b2:04:99:6f:54:bb:b1:
         99:0e:32:e5:6a:98:4e:6c:04:ca:ef:3c:7a:64:94:4d:1d:15:
         4c:e2:37:5c:cb:e3:83:76:99:2e:68:b4:b0:1d:ca:42:d1:86:
         6c:9a:a7:c1:48:b8:e8:58:de:64:9b:56:93:b5:f1:c4:21:71:
         72:ce:d3:04:27:4c:b9:6b:6c:bc:3e:cf:81:44:26:4e:3b:da:
         6d:4e:6e:0a:a8:08:cc:05:cc:94:b3:ff:7d:af:46:8f:93:83:
         0f:85:c6:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf9tL8MMlwCuTxTF7NFfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MjY5MjZiNmU4OTcwY2Y4NGQ2YjQ3NTZmYTljNTYyMTEy
MDA1MzcwHhcNMjYwOTIzMjMwMDM1WhcNMjYwOTI0MjMwMDM1WjAzMTEwLwYDVQQD
Eyg3YzkzMWMwNTE5MjQ5YTczNTdkNzY5ZmY2YjU4ZDFiMGRmMWNmZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1+rrRZTwziMJmukyUXHxXLJGcUO
ZD4HXjoeGfhPDUen1OLAUI8+Mbe0PWzf1KkmOXrzicopJ7HZjgIgrWez0BQ4ediN
cJ65vnn7GnaAPW5bF+enGqrAmsGmzli27O1aBx3OiUKZ9qsye7O9U0a5/9lJSL7e
emnjnY82h8H5P9CdHR4Kt2nk5/BfYKo4jPcFHWJl4lWiqCo0kgrDANO1UdGfBHxv
1OlJw29H/OrduVwbHsQRboFL+e5r/g0ee9KJynhwqGlJMk+6zgLvSbpFw/RErJYR
P1lUyoQoR1sJs6dBRC+ivxj3KkPcZ6SMsfh6fEZ6WE3ejp5gumEZxJpIdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyTHAUZJJpzV9dp/2tY0bDfHP1HMB8GA1UdIwQY
MBaAFOcmkmtuiXDPhNa0dW+pxWIRIAU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAt
YzEwMmVlOTY4NThlLzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAtYzEwMmVlOTY4NThl
LzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPmcemeU
25ICqCRFPjWiG7p3fjj1Lz+JnJddREdBbVsAEh7FBajCWBwzmWByjdWJwTC268cm
8I+SfwXqmvj42XU1YS5/TrJmTyxDDnpXoZk2aiqL7I/om0zz3ix6/j3cTTNhhodI
6Tp0IU1RW4woOLoZPGw2i4NEzd+yPkwg5nhitxv0+AAzxugyFpWQzNC756Dsb2hH
QywfwnGyBJlvVLuxmQ4y5WqYTmwEyu88emSUTR0VTOI3XMvjg3aZLmi0sB3KQtGG
bJqnwUi46FjeZJtWk7XxxCFxcs7TBCdMuWtsvD7PgUQmTjvabU5uCqgIzAXMlLP/
fa9Gj5ODD4XG8A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:54:11 2026 by rpki-client