Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          6XoRO0ji5vOafzYrfUr+OghF5n1E7SBlaNoiBvsQtqQ=
Subject key identifier:   4D:F3:74:33:EA:FF:61:C8:BB:4F:61:48:83:37:33:FF:17:B0:CA:C8
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       01A125797E5DF8B905C02986BE11FE60807E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          1866
Signing time:             Sat 10 Oct 2026 11:01:21 +0000
Manifest this update:     Sat 10 Oct 2026 11:01:21 +0000
Manifest next update:     Sun 11 Oct 2026 11:01:21 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: gdYhZEHr7TKaCGXA29KqKjaX8RJyZ0c7jbuYUwn7AQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:79:7e:5d:f8:b9:05:c0:29:86:be:11:fe:60:80:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: Oct 10 11:01:21 2026 GMT
            Not After : Oct 11 11:01:21 2026 GMT
        Subject: CN=4df37433eaff61c8bb4f6148833733ff17b0cac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:ef:cb:3c:c9:20:fd:41:aa:ae:c4:72:11:
                    fd:e7:67:fa:fe:c6:92:e6:6a:93:b9:93:9c:82:5f:
                    bc:39:37:e8:c6:c0:34:b1:a3:35:40:95:7e:ed:3a:
                    b0:66:3f:80:32:1b:04:30:fd:c0:9b:42:ab:bd:cb:
                    ca:c2:ab:10:ec:52:6f:b4:5b:cc:21:1e:fa:b9:5b:
                    64:68:59:5a:a4:b5:3e:44:28:46:f9:a2:95:c7:19:
                    2b:01:d7:ad:5d:04:3e:ba:ca:65:6a:9f:c0:97:93:
                    0e:0f:f5:86:03:09:56:f4:49:23:b4:2f:ec:bf:ea:
                    82:13:92:e9:5c:94:91:8e:0a:a8:d9:7f:b1:e8:0c:
                    5d:ea:f5:c0:97:56:79:0b:e9:5b:5d:61:31:a5:0c:
                    f4:85:1d:1d:d5:e2:30:6b:60:70:f0:8f:fb:e4:7c:
                    84:e1:2b:a6:d3:1a:1b:af:96:c0:38:3e:81:7a:e5:
                    2c:89:3d:f8:64:8f:bb:ec:95:3c:85:ed:1a:e0:15:
                    44:41:34:73:7e:dc:e3:15:77:5e:6f:53:c0:9f:9a:
                    af:6e:c3:58:a2:17:2c:a6:fd:44:e7:1c:6c:9d:6e:
                    76:ac:e5:91:46:f6:b0:8b:cf:0d:88:55:64:1b:de:
                    82:98:48:f4:22:6d:72:1c:22:ed:97:4e:bf:39:04:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:74:33:EA:FF:61:C8:BB:4F:61:48:83:37:33:FF:17:B0:CA:C8
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:23:eb:e3:17:40:7b:24:c3:0f:6c:e0:2f:9b:43:05:ec:b6:
         6a:10:2b:91:08:95:00:0b:71:ce:70:19:da:bb:7b:78:10:4f:
         26:3c:05:4a:55:34:3d:54:a0:7b:31:95:ed:98:cb:d5:d7:d5:
         b6:18:8c:b8:77:c1:02:3f:1d:7d:48:bd:c1:76:13:f5:88:8d:
         19:ab:36:98:8f:50:7d:1d:34:a2:16:3d:a5:70:2d:93:e3:b0:
         35:f6:86:63:c3:93:69:24:47:dc:7a:d8:b3:94:81:9e:2f:6f:
         0d:7e:9a:12:bb:24:e6:23:ed:4d:50:6d:8a:2a:3d:41:96:d0:
         97:bb:f8:ab:b3:0e:77:b7:36:c7:1e:63:79:62:7c:bb:a1:c2:
         1a:25:ad:0b:7b:c8:85:3c:c9:de:2c:6d:9e:48:a1:44:ca:ba:
         50:f5:09:f0:12:fb:e1:f8:31:a6:14:25:83:63:d7:81:dc:a0:
         de:6d:a6:7a:0e:f6:e3:01:7a:a7:96:b7:16:8b:9d:d1:a8:9c:
         d2:7c:39:05:cd:f4:28:73:ed:a3:94:b4:fb:65:da:dd:49:dd:
         56:63:18:7d:21:85:cb:2d:6d:6d:60:6d:21:3f:32:c3:9c:12:
         db:d4:76:0c:c1:e7:0d:4d:fd:bb:d8:a3:c4:43:15:c3:be:3e:
         db:e9:6a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEleX5d+LkFwCmGvhH+YIB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MTA5NzJjYzQ1OTU2ODgwNGJiNGI3OTFkN2MxM2NmYjIy
ODM4ODMwHhcNMjYxMDEwMTEwMTIxWhcNMjYxMDExMTEwMTIxWjAzMTEwLwYDVQQD
Eyg0ZGYzNzQzM2VhZmY2MWM4YmI0ZjYxNDg4MzM3MzNmZjE3YjBjYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3XvyzzJIP1Bqq7EchH952f6/saS
5mqTuZOcgl+8OTfoxsA0saM1QJV+7TqwZj+AMhsEMP3Am0KrvcvKwqsQ7FJvtFvM
IR76uVtkaFlapLU+RChG+aKVxxkrAdetXQQ+usplap/Al5MOD/WGAwlW9EkjtC/s
v+qCE5LpXJSRjgqo2X+x6Axd6vXAl1Z5C+lbXWExpQz0hR0d1eIwa2Bw8I/75HyE
4Sum0xobr5bAOD6BeuUsiT34ZI+77JU8he0a4BVEQTRzftzjFXdeb1PAn5qvbsNY
ohcspv1E5xxsnW52rOWRRvawi88NiFVkG96CmEj0Im1yHCLtl06/OQQGzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3zdDPq/2HIu09hSIM3M/8XsMrIMB8GA1UdIwQY
MBaAFOQQlyzEWVaIBLtLeR18E8+yKDiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYt
ZjI3Y2VmNGJhMjI0LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYtZjI3Y2VmNGJhMjI0
LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyPr4xdA
eyTDD2zgL5tDBey2ahArkQiVAAtxznAZ2rt7eBBPJjwFSlU0PVSgezGV7ZjL1dfV
thiMuHfBAj8dfUi9wXYT9YiNGas2mI9QfR00ohY9pXAtk+OwNfaGY8OTaSRH3HrY
s5SBni9vDX6aErsk5iPtTVBtiio9QZbQl7v4q7MOd7c2xx5jeWJ8u6HCGiWtC3vI
hTzJ3ixtnkihRMq6UPUJ8BL74fgxphQlg2PXgdyg3m2meg724wF6p5a3Foud0aic
0nw5Bc30KHPto5S0+2Xa3UndVmMYfSGFyy1tbWBtIT8yw5wS29R2DMHnDU39u9ij
xEMVw74+2+lqKg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:59:30 2026 by rpki-client