Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File:                     5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier:          PTnXOLKRjiHrlnH/JGEflTHOA6iXVwxASA4SN8QSC4g=
Subject key identifier:   C7:F0:FF:BD:AC:FF:71:8E:0B:56:4C:37:99:18:35:31:34:EB:9A:F5
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer:       /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial:       01A0C28DE85D082059942247F783B8EB0D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number:          15A8
Signing time:             Mon 21 Sep 2026 06:01:14 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:14 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:14 +0000
Files and hashes:         1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: F70q7goBZMkmabxgQOay95FGUFX4mslbqzmbQqnU1bc=)
                          2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
                          3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
                          4: a6ZdqqnUZq7Xf8v413mOD4gnuIc.roa (hash: /YCERQ9X6MgXLxlcuxTGu+1tVQk1kXYJeSvr9xZddks=)
                          5: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
                          6: zhx_i8-hMUtVtHxFFqKV6pWlvfI.roa (hash: jXE8lQ9PxcnmjRW7Jbdjl6pEn7gNBMRFi9VitvgBzcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:e8:5d:08:20:59:94:22:47:f7:83:b8:eb:0d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
        Validity
            Not Before: Sep 21 06:01:14 2026 GMT
            Not After : Sep 22 06:01:14 2026 GMT
        Subject: CN=c7f0ffbdacff718e0b564c379918353134eb9af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:14:c9:eb:d9:14:98:6c:a2:bc:00:ba:0d:
                    2a:98:1c:3b:fe:af:b2:96:72:e7:9c:5c:17:c5:dd:
                    dc:a3:da:de:b3:44:e5:d9:96:e0:ea:1f:c7:e2:b7:
                    ea:77:7f:3f:28:1c:4b:ad:76:52:01:41:e3:89:27:
                    a8:4a:b3:da:a3:3d:d2:be:0a:a1:e3:6e:53:c9:0a:
                    fc:99:a3:37:14:11:6e:db:93:94:0f:49:9f:e4:4a:
                    94:56:c6:5a:b5:ed:d2:74:fa:32:83:24:04:6b:f9:
                    45:6f:28:b9:89:99:c7:d8:4a:15:d1:5e:dc:b4:5b:
                    e1:0c:aa:7f:54:e0:d8:95:34:50:70:0a:b8:b7:48:
                    2e:5a:d2:40:77:2a:1d:f7:a4:21:17:09:3e:47:22:
                    b8:01:5c:3d:2b:eb:a7:40:e4:24:f5:be:20:2b:53:
                    07:72:1b:99:7b:f6:c5:01:3b:96:0f:eb:88:94:a0:
                    2d:ab:e4:d3:bf:81:ee:b5:46:d4:2c:8b:57:e9:c8:
                    e4:51:6a:c5:b4:0e:32:bd:3d:a6:dc:af:a8:e5:ef:
                    f9:3c:9a:d7:dd:e6:d1:c7:b7:3d:f7:5e:ee:13:1a:
                    2c:9b:6d:da:a4:75:0e:64:48:d9:40:d1:e3:ed:e6:
                    84:32:eb:a8:89:f5:5f:f6:c2:1e:dd:4a:2e:87:84:
                    ed:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:FF:BD:AC:FF:71:8E:0B:56:4C:37:99:18:35:31:34:EB:9A:F5
            X509v3 Authority Key Identifier:
                keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:18:d6:57:07:0d:16:3b:68:49:28:fa:f3:94:c0:9f:48:cd:
         dd:93:7a:78:ea:4d:5f:28:a8:8e:34:d8:72:01:73:7b:3d:e6:
         5c:17:da:b9:ef:b7:e7:0d:ab:b0:81:60:3e:9b:b4:a6:78:2b:
         3e:41:ef:96:a6:4f:cc:e0:da:72:bd:4e:8d:67:8a:ce:9d:a3:
         bc:07:cc:a9:29:a8:71:ee:35:d9:1a:78:bd:ca:94:3d:7f:a1:
         9b:ee:cf:9d:c7:7a:d6:31:6e:d6:72:2b:77:94:83:45:25:02:
         43:d1:0f:33:1d:4d:34:6e:7a:9e:6d:c9:e1:13:45:d1:78:87:
         46:00:4c:3a:1f:96:4a:7d:79:1f:8f:c9:5c:64:7a:24:a5:e3:
         5c:97:64:03:53:9b:cf:e3:00:99:8e:15:66:a7:38:6b:44:32:
         47:11:fc:4a:6c:f3:b6:42:31:aa:87:72:71:13:1c:91:dc:d1:
         cc:f2:24:6a:cb:fb:2e:4d:af:7a:2e:67:60:41:68:cd:c1:ab:
         27:9c:70:28:5a:a7:28:6e:79:9a:9d:0d:ca:7d:6c:03:92:d0:
         57:9f:d5:52:12:97:f8:8d:39:27:e8:46:3a:fb:2a:b5:28:64:
         86:47:85:65:b2:1f:86:e0:19:d7:77:4b:70:8f:ce:c2:1b:75:
         d5:4a:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:51 2026 by rpki-client