Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File:                     5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier:          3fho1fv66KfQjk1VcU36fvmhPp4CiDN7hGXYMtmxXNM=
Subject key identifier:   B8:2E:80:65:F9:E6:C8:84:29:C1:46:DE:C2:74:F7:E3:9D:C3:5D:C4
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer:       /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial:       01A132907659CD0EA4248494B36B31DB705F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number:          1472
Signing time:             Tue 13 Oct 2026 00:01:30 +0000
Manifest this update:     Tue 13 Oct 2026 00:01:30 +0000
Manifest next update:     Wed 14 Oct 2026 00:01:30 +0000
Files and hashes:         1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: 1tUXGbO8V8H8HHEDgVSviC405Q9Wvvg+26HyKVzna8U=)
                          2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:90:76:59:cd:0e:a4:24:84:94:b3:6b:31:db:70:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
        Validity
            Not Before: Oct 13 00:01:30 2026 GMT
            Not After : Oct 14 00:01:30 2026 GMT
        Subject: CN=b82e8065f9e6c88429c146dec274f7e39dc35dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ab:f2:e0:bd:d8:c1:90:8a:07:e2:ab:d1:4a:
                    68:9a:12:17:a0:be:51:c7:3a:94:3d:91:22:7a:b1:
                    66:a1:80:d8:b8:72:8b:06:b6:bd:72:db:f7:b5:65:
                    38:83:8d:f2:d7:e5:35:e8:49:cd:eb:a0:fb:3c:5b:
                    4d:b3:4f:54:90:db:44:1d:8d:78:8c:fa:bc:e0:0e:
                    22:fc:21:65:d5:a4:b7:5d:a0:28:40:0b:06:fc:bc:
                    1b:3f:63:8e:5d:7f:2e:8b:e7:e2:94:8b:d4:62:0e:
                    82:98:cb:e2:93:65:49:cd:f2:12:f6:2e:d4:fe:bc:
                    d8:cf:83:dc:b0:08:25:81:26:fe:31:1e:62:b4:3a:
                    9d:e3:2b:12:bc:e0:3c:bf:06:fd:9e:12:3d:56:11:
                    1d:07:d1:2b:91:a1:b1:28:dc:7c:cb:ca:e8:5a:31:
                    70:78:64:e1:06:92:a5:35:6d:1c:b9:af:c8:d0:3d:
                    d8:83:60:58:58:1f:77:5f:f0:ca:31:d9:58:8f:74:
                    a6:46:27:0d:83:6d:85:06:24:2f:40:db:3a:ce:9e:
                    29:86:59:e5:f8:5c:c7:4f:2b:60:12:ba:48:d6:bc:
                    3b:89:c4:2c:3b:78:31:15:7e:8e:1a:8f:79:5f:05:
                    d1:df:d1:e7:2d:4b:76:33:65:ae:db:9b:e8:ab:f5:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2E:80:65:F9:E6:C8:84:29:C1:46:DE:C2:74:F7:E3:9D:C3:5D:C4
            X509v3 Authority Key Identifier:
                keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:9a:02:22:a6:7e:a6:d0:d2:30:d0:00:20:17:37:f2:6c:
         39:9e:03:71:76:c7:21:10:f2:14:a9:a0:02:3a:99:5f:10:b8:
         4e:16:a3:fa:d2:54:5d:0d:ec:74:a1:d7:98:7d:77:a1:f1:8f:
         cb:a0:24:e0:5e:f8:65:2a:08:0f:bf:1d:7f:a6:7a:ef:13:3b:
         ca:9b:1c:27:db:fd:7e:72:f6:d6:6b:30:db:b3:93:8c:b7:4f:
         82:d2:5a:07:99:f5:05:4a:bd:e7:64:05:58:79:bd:79:8f:22:
         9b:c4:18:cc:e0:03:20:0c:ac:8f:2c:67:d1:4b:e0:6e:1f:21:
         fa:3a:bd:f3:f1:32:c4:10:b7:64:2c:f5:88:9d:c0:ed:1f:1a:
         cc:38:02:d1:00:0d:57:30:45:96:b2:08:ef:4c:5d:dd:05:b2:
         98:52:7c:0e:6f:29:20:92:22:c9:82:b3:21:d2:b9:83:2a:1b:
         29:31:b9:86:73:16:f1:71:09:d2:26:2d:1f:67:39:66:86:89:
         82:35:f3:02:61:ab:60:24:a1:33:5d:67:ac:fe:b7:15:70:64:
         59:98:0f:a5:03:60:44:ec:81:13:58:6a:31:64:fe:19:33:00:
         de:2d:25:d4:67:2a:55:0c:ca:d5:28:04:e8:e5:8a:9a:4e:41:
         52:15:3d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEykHZZzQ6kJISUs2sx23BfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTg1MTIwZTdhM2I5NjJiOWZmZTRhYmVkMTZkMGFhM2Ez
MjA1MTgwHhcNMjYxMDEzMDAwMTMwWhcNMjYxMDE0MDAwMTMwWjAzMTEwLwYDVQQD
EyhiODJlODA2NWY5ZTZjODg0MjljMTQ2ZGVjMjc0ZjdlMzlkYzM1ZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7avy4L3YwZCKB+Kr0UpomhIXoL5R
xzqUPZEierFmoYDYuHKLBra9ctv3tWU4g43y1+U16EnN66D7PFtNs09UkNtEHY14
jPq84A4i/CFl1aS3XaAoQAsG/LwbP2OOXX8ui+filIvUYg6CmMvik2VJzfIS9i7U
/rzYz4PcsAglgSb+MR5itDqd4ysSvOA8vwb9nhI9VhEdB9ErkaGxKNx8y8roWjFw
eGThBpKlNW0cua/I0D3Yg2BYWB93X/DKMdlYj3SmRicNg22FBiQvQNs6zp4phlnl
+FzHTytgErpI1rw7icQsO3gxFX6OGo95XwXR39HnLUt2M2Wu25voq/WyAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgugGX55siEKcFG3sJ09+Odw13EMB8GA1UdIwQY
MBaAFOcYUSDno7liuf/kq+0W0Ko6MgUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgt
ODljNjQyMGQ2ZjM2LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgtODljNjQyMGQ2ZjM2
LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehOaAiKm
fqbQ0jDQACAXN/JsOZ4DcXbHIRDyFKmgAjqZXxC4Thaj+tJUXQ3sdKHXmH13ofGP
y6Ak4F74ZSoID78df6Z67xM7ypscJ9v9fnL21msw27OTjLdPgtJaB5n1BUq952QF
WHm9eY8im8QYzOADIAysjyxn0Uvgbh8h+jq98/EyxBC3ZCz1iJ3A7R8azDgC0QAN
VzBFlrII70xd3QWymFJ8Dm8pIJIiyYKzIdK5gyobKTG5hnMW8XEJ0iYtH2c5ZoaJ
gjXzAmGrYCShM11nrP63FXBkWZgPpQNgROyBE1hqMWT+GTMA3i0l1GcqVQzK1SgE
6OWKmk5BUhU9vQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:56:49 2026 by rpki-client