Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          IyEp9b/ZtH7quElAsp13tmMjPh9vC6EzKeoGgBQtEbI=
Subject key identifier:   F5:BA:E3:6C:66:3F:15:96:5A:7A:2A:E9:1E:B0:9A:CB:7D:1E:E6:D6
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       01A1DC828A93AF4D7C5057F6FA70D5015F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          18B4
Signing time:             Sun 15 Nov 2026 00:01:44 +0000
Manifest this update:     Sun 15 Nov 2026 00:01:44 +0000
Manifest next update:     Mon 16 Nov 2026 00:01:44 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: DRmIYQLpVrNqfMQsLMJe+FeTxjOehvSX8gUVYw8UYKM=)
                          2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 00:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:82:8a:93:af:4d:7c:50:57:f6:fa:70:d5:01:5f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Nov 15 00:01:44 2026 GMT
            Not After : Nov 16 00:01:44 2026 GMT
        Subject: CN=f5bae36c663f15965a7a2ae91eb09acb7d1ee6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:aa:01:76:75:b8:f9:35:cf:3e:40:7d:0e:
                    e7:10:b6:a1:c5:46:7c:7a:2b:08:c1:d9:5f:43:e7:
                    32:4f:27:dd:a3:8a:c6:64:24:ec:e5:d5:2a:e5:56:
                    98:6f:c5:90:9b:c9:88:50:b8:57:81:ca:3a:43:40:
                    7c:bd:d6:97:05:1a:fd:9a:fa:c3:a2:0c:55:4a:b4:
                    e4:0a:18:e4:6d:b8:37:39:31:0e:4a:55:e9:22:9c:
                    62:f7:32:b2:ac:d0:ef:b6:52:f9:7d:37:af:43:df:
                    cf:66:a4:e0:cb:bb:8d:66:f4:47:e3:ef:b7:09:7c:
                    f1:f0:39:33:0c:f0:83:70:42:ad:c3:50:55:f9:b2:
                    f0:81:b9:76:bd:f3:86:42:1e:aa:bd:c7:73:e3:e6:
                    1f:b2:0c:36:cf:7a:2b:68:97:21:8f:80:96:78:ab:
                    c3:63:e5:ba:cc:61:df:57:f6:ec:ae:a1:fa:9d:3f:
                    59:f8:bd:99:0e:fe:19:55:14:9f:d0:c4:2f:09:ef:
                    1e:e0:9a:4e:c0:e0:29:7e:71:47:df:a4:d2:5d:97:
                    a5:df:3f:68:e2:54:2f:4c:4d:f7:f5:ea:0d:7e:73:
                    2a:00:b3:1b:75:b6:e6:52:47:11:bd:91:0e:a1:2d:
                    f4:a6:cc:f5:a0:9a:a0:85:aa:06:0b:bc:4b:4a:23:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BA:E3:6C:66:3F:15:96:5A:7A:2A:E9:1E:B0:9A:CB:7D:1E:E6:D6
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5e:f6:18:1e:c3:13:c4:24:e3:6a:77:00:45:34:76:dc:ff:
         ca:81:8e:fe:81:84:5e:e5:e0:d7:d7:b8:45:8c:f5:b9:63:83:
         ab:b1:e4:18:40:1a:b6:82:61:69:d5:68:5a:00:20:d2:b2:eb:
         ce:d6:e5:96:4f:10:de:c9:c1:3c:86:b3:57:0c:f9:20:37:61:
         1c:ca:e2:93:d8:54:cd:7c:78:10:9e:52:05:0b:2a:da:74:5b:
         f3:03:06:c7:91:6f:36:ef:99:49:ab:6e:92:cf:6d:58:60:ca:
         f5:ec:b7:3f:30:f5:5b:13:4e:ba:b2:93:a8:91:94:4a:bd:30:
         dc:9d:ab:e6:52:65:ba:17:a1:ae:dc:de:e6:74:4c:92:e3:f8:
         df:b1:62:64:2f:70:7a:f4:0a:90:4c:ed:e5:e2:a8:52:49:1e:
         9d:4a:fb:23:11:70:18:a4:14:c8:b1:1e:4f:9f:30:4e:a0:98:
         76:c8:a7:4d:17:80:06:67:aa:b8:d3:71:37:98:7d:27:cb:89:
         ae:a1:1b:49:46:2a:77:86:7d:31:ba:8c:34:6b:71:ed:05:b0:
         c8:c1:67:fc:9c:5f:ca:e7:94:6f:73:f4:85:11:da:92:ae:fe:
         e3:b2:7f:fc:87:02:3f:1c:77:6a:f0:34:ad:00:d5:1c:57:27:
         4a:12:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:13:04 2026 by rpki-client