Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier:          uPKMstX7BfzJEL6o3gm83PYqqh9vS/4aqxX/7JYLZjA=
Subject key identifier:   82:6B:E7:EB:9E:45:46:D5:B2:36:AA:5D:6E:F6:AE:5D:88:1E:87:63
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer:       /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial:       01A12C57000BDDBB3B24B196DB0C84B302BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number:          14B6
Signing time:             Sun 11 Oct 2026 19:01:01 +0000
Manifest this update:     Sun 11 Oct 2026 19:01:01 +0000
Manifest next update:     Mon 12 Oct 2026 19:01:01 +0000
Files and hashes:         1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: CRr64vXOOhOYy9RWhYVpmw8OOHLL9PYcbNzpe7gBEDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:57:00:0b:dd:bb:3b:24:b1:96:db:0c:84:b3:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Validity
            Not Before: Oct 11 19:01:01 2026 GMT
            Not After : Oct 12 19:01:01 2026 GMT
        Subject: CN=826be7eb9e4546d5b236aa5d6ef6ae5d881e8763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:16:03:9c:f4:46:93:05:79:19:51:06:b9:
                    c6:0c:14:16:1e:65:b1:18:a1:05:41:b1:e6:f1:0f:
                    fe:be:ce:56:7c:74:84:0c:40:2a:ae:68:c7:6a:a6:
                    f3:1a:94:7c:12:be:53:34:22:9f:a8:41:85:c6:b9:
                    ae:8e:0c:bd:ed:ec:3e:7c:0e:0f:82:57:14:1c:aa:
                    ac:5e:e0:13:b7:d3:d5:ad:4d:f6:c1:7d:c3:46:4a:
                    de:0b:d0:4d:84:1d:08:03:91:6e:9a:df:f9:ad:2e:
                    77:6f:3e:f0:21:9e:f0:0e:2f:3e:9b:b4:84:28:dd:
                    2c:cf:d9:03:95:47:2b:9b:75:22:17:05:f7:53:4b:
                    05:75:8f:6a:74:a5:58:03:4b:97:7a:6e:05:34:a8:
                    93:44:a0:3f:0e:bd:28:a5:78:b8:29:fa:66:a8:b2:
                    a9:2f:02:23:34:af:6a:c5:32:b9:74:54:04:61:c3:
                    c3:b8:48:d1:f9:54:af:46:c0:3e:98:85:8a:30:2d:
                    f4:27:14:b9:48:fd:26:b2:26:fc:2c:d1:3a:be:c6:
                    4a:2b:d2:15:6f:19:e7:7b:a8:4f:62:85:44:4a:d6:
                    b3:88:08:5d:b8:49:b8:06:df:03:49:82:9a:fa:f3:
                    37:94:a5:ab:a8:8f:29:1f:36:51:78:34:6a:b8:50:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6B:E7:EB:9E:45:46:D5:B2:36:AA:5D:6E:F6:AE:5D:88:1E:87:63
            X509v3 Authority Key Identifier:
                keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7d:38:6e:0f:ee:aa:58:a1:a4:65:0c:9b:27:ba:1c:f1:6a:
         17:d0:fe:d9:9a:29:c3:04:b8:13:dc:aa:2d:de:f9:53:38:56:
         de:0f:0f:6e:d8:37:bc:72:18:3f:60:cd:23:dc:ed:2a:ce:1e:
         a0:34:ab:af:a1:04:98:ef:50:1e:ae:c2:a9:f1:dd:a6:b4:84:
         fd:9a:f2:5b:89:2c:3f:a7:2c:43:0c:e4:e4:14:f0:04:0d:fd:
         1a:8d:6c:95:8c:f4:62:5b:b9:50:f1:63:d0:0d:cb:8a:ee:29:
         a2:37:aa:bc:1a:37:44:fc:55:35:57:fc:9a:1d:da:93:fe:38:
         d7:de:79:b4:7e:16:2c:e8:82:b1:73:cf:8f:dc:ec:49:fa:a8:
         ae:96:bd:3b:e6:2a:fe:24:f3:2d:2f:1f:f8:51:0c:04:13:01:
         04:6a:bb:07:18:96:2d:c3:d4:5d:87:9b:fd:85:2f:47:a4:6d:
         22:5a:9c:98:e9:16:97:33:89:49:b3:36:b8:42:bb:2d:1d:a1:
         2f:34:6d:c1:27:f0:97:a8:51:6b:62:a2:a2:26:ae:31:1c:c0:
         6a:e9:4a:39:31:bc:75:8d:55:e7:16:80:4b:13:7e:e6:f0:8d:
         1f:b4:20:aa:89:19:87:0c:78:40:88:9b:21:fc:f7:01:43:78:
         4b:37:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:56:53 2026 by rpki-client