Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File:                     5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier:          /38xS02EYnUkeqLlHboXtUMhybWro5CuXQ10Hc0c+Ug=
Subject key identifier:   5B:A3:66:10:81:1E:F2:E4:43:EF:D4:FD:C9:0D:C0:D2:91:81:23:7C
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer:       /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial:       01A1DFBA46613B96CAAFF8A3A36A15AEC1E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number:          10F7
Signing time:             Sun 15 Nov 2026 15:01:29 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:29 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:29 +0000
Files and hashes:         1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: v5MYx3zBsCK7MnmUeKTj0iwbbCcvuvysupKdhVjFSos=)
                          2: pl9CMVN9K5gR0945W-6Re2TMtvo.roa (hash: JqHMuSBMUPGCgcifWudK/wr7jTf2RxW25x3NySvPvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:ba:46:61:3b:96:ca:af:f8:a3:a3:6a:15:ae:c1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
        Validity
            Not Before: Nov 15 15:01:29 2026 GMT
            Not After : Nov 16 15:01:29 2026 GMT
        Subject: CN=5ba36610811ef2e443efd4fdc90dc0d29181237c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:77:d7:f2:26:8c:b0:2c:27:8d:49:06:e6:
                    71:b9:4c:f1:c5:c9:7b:6b:b3:6a:30:a5:83:3c:0f:
                    a3:1c:43:e8:ec:78:e4:46:74:29:da:31:41:d1:7d:
                    e1:3b:80:1b:e7:9c:b7:68:a0:ea:09:aa:dd:e0:22:
                    26:ce:77:57:e3:11:53:72:b6:e8:db:1b:aa:59:ad:
                    da:1d:5e:4b:cb:2a:ce:e3:f7:77:90:d8:fd:73:73:
                    bc:0b:38:33:0d:57:aa:81:17:d8:94:2e:be:00:3f:
                    82:f1:52:c2:cf:31:0e:a9:8d:71:04:e9:90:c1:95:
                    81:45:15:b1:ee:99:35:75:17:df:bf:eb:d9:6a:a3:
                    24:49:5c:43:9b:23:65:30:ae:de:76:6a:b0:04:d5:
                    8d:c6:c5:53:18:be:53:fb:79:cf:e5:34:a1:ab:a6:
                    80:a7:ab:ad:59:9c:4e:cd:86:31:30:53:5f:2e:1c:
                    69:d3:73:e4:22:7c:fc:c0:96:d6:b6:25:71:cf:65:
                    64:87:e9:0c:92:ce:d9:46:8a:0e:a2:04:bc:8e:80:
                    46:8f:a9:30:9f:fb:f6:ff:2d:11:97:75:29:e8:84:
                    59:21:99:ec:67:35:94:94:db:f4:a9:91:50:b9:26:
                    ef:83:c7:10:20:0b:4f:a4:f8:ed:b2:86:d7:d4:09:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:66:10:81:1E:F2:E4:43:EF:D4:FD:C9:0D:C0:D2:91:81:23:7C
            X509v3 Authority Key Identifier:
                keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:08:b3:9f:16:ba:24:1d:1f:ae:34:0f:c4:70:04:b0:4a:02:
         f0:28:84:54:a2:90:bc:ea:76:1a:75:2d:f0:26:3d:6b:e7:fd:
         f5:ea:9d:61:6c:b5:10:b5:25:79:92:04:c2:15:54:fd:fe:45:
         bf:6b:e6:43:d1:69:b9:3c:bb:c4:c8:11:4b:69:2a:a2:3a:40:
         ff:d2:99:98:58:de:c6:b8:43:f7:44:28:16:74:ee:fb:39:6d:
         6d:41:a1:59:45:22:36:34:7f:92:62:9c:53:ad:5f:03:7d:3d:
         59:50:7f:d5:2d:af:9c:e5:51:55:dd:97:8d:99:dc:34:e1:53:
         ad:71:fd:be:e2:62:20:53:1f:b1:83:e4:f7:ae:ad:88:16:95:
         e9:39:80:67:05:c9:5b:ae:72:00:40:f4:ed:ea:63:88:a7:5f:
         2f:ae:2e:3b:46:69:ab:e4:dc:a3:35:c4:18:c9:c8:cc:19:69:
         99:f6:a7:5c:82:42:66:25:e9:99:d9:f0:ba:98:0e:c3:93:06:
         f1:6c:00:61:7b:45:5b:08:b1:8c:a9:4d:2a:8f:73:89:aa:47:
         95:ab:a9:3b:5e:e0:32:9e:10:30:88:c8:e3:c2:7b:36:62:2c:
         b3:f1:06:7f:27:c4:85:7e:81:b3:b3:46:3a:86:e3:20:bb:b4:
         78:e9:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:11:33 2026 by rpki-client