Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
File:                     5eewNLTnyobXFrEUD8pbWQ8-eMA.mft (raw, json)
Hash identifier:          is5CpPG3vgLYSneTzfNOFY1VmsoWgVh1qyLFJ+N4luU=
Subject key identifier:   6B:74:D9:F6:B0:18:AB:0E:E8:2A:7C:AC:DF:E6:0A:31:35:04:0B:53
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Certificate issuer:       /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial:       019D9773BF11D99838F50B91A2359A3FC052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
Manifest number:          1851
Signing time:             Thu 16 Apr 2026 18:00:38 +0000
Manifest this update:     Thu 16 Apr 2026 18:00:38 +0000
Manifest next update:     Fri 17 Apr 2026 18:00:38 +0000
Files and hashes:         1: 5eewNLTnyobXFrEUD8pbWQ8-eMA.crl (hash: H3QAmf42Rp2SrMPubNQOoKAvImPHhfuKq6e+28vk5ZI=)
                          2: BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa (hash: hu9eE1y2abyGZOSyCMK7xsTStFETWYiRnLL7jNqyXrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:73:bf:11:d9:98:38:f5:0b:91:a2:35:9a:3f:c0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
        Validity
            Not Before: Apr 16 18:00:38 2026 GMT
            Not After : Apr 17 18:00:38 2026 GMT
        Subject: CN=6b74d9f6b018ab0ee82a7cacdfe60a3135040b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:ae:a1:5e:9b:20:a8:cb:1b:0f:69:8b:c9:
                    42:4f:21:a3:b6:a0:71:c2:ab:ca:f3:e9:50:13:0b:
                    13:0c:1d:e4:2a:02:25:4d:7c:db:ef:76:78:4e:84:
                    ca:2e:90:af:75:08:d3:bd:32:3d:d3:c2:3f:3f:56:
                    46:46:c2:74:f8:55:f2:d1:70:5f:3b:bf:41:05:7c:
                    80:8a:41:f4:6a:9f:ad:7b:ac:f0:a2:11:ac:49:63:
                    db:0e:12:34:3a:47:8e:b7:da:b4:2b:76:db:e6:b8:
                    7d:30:9b:ad:28:c2:26:11:5c:d0:a0:69:b4:ff:46:
                    a0:d8:e1:58:85:8b:21:63:1a:48:ff:d3:31:d7:05:
                    64:26:ef:dc:8d:f4:ee:90:d2:c8:17:ad:ff:ca:8a:
                    41:ed:c9:e9:24:73:c1:d1:33:c8:68:11:1d:e8:62:
                    9b:63:fd:a4:db:23:ec:47:a0:d3:39:00:9c:6b:32:
                    4a:67:54:c0:fb:25:19:c9:99:33:b1:70:dd:86:9e:
                    07:43:b9:0b:c3:8a:5d:ff:66:b4:ad:16:b7:e2:9f:
                    7f:7f:85:ac:f6:6e:77:37:d3:88:10:dc:14:f8:09:
                    13:ff:b8:d6:8d:2e:e1:34:d2:21:2b:52:eb:3e:a8:
                    2a:4b:98:ee:9c:8e:62:8e:1e:6d:05:03:5d:ac:7d:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:D9:F6:B0:18:AB:0E:E8:2A:7C:AC:DF:E6:0A:31:35:04:0B:53
            X509v3 Authority Key Identifier:
                keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:11:f9:b4:da:17:e4:ea:01:b1:ac:d9:d0:4e:cb:0f:72:13:
         7d:22:66:ab:df:f0:7f:36:b1:09:4e:ec:ac:53:f3:2e:b2:88:
         84:fd:53:be:62:63:e9:3b:b2:27:ef:cc:b5:58:90:22:15:91:
         0d:cb:ca:04:44:15:eb:77:d7:3e:a7:d7:ce:cc:52:f7:02:e6:
         fd:02:c0:b9:c0:ba:25:93:4d:ec:f7:63:91:92:ce:44:88:13:
         d2:d5:9b:29:31:dd:69:68:b5:60:2c:60:58:ed:ba:c5:03:f8:
         93:ce:52:e3:04:4e:e0:d9:5e:44:60:56:6f:b4:13:07:60:d6:
         e2:dd:93:93:bc:af:75:81:27:31:60:65:84:08:8b:98:d5:16:
         b6:0f:58:c9:5f:70:89:e0:0c:72:f9:67:dd:45:5c:13:48:bb:
         96:59:86:2c:5c:a9:49:10:ee:11:3a:7c:68:12:84:46:44:a2:
         5b:5d:fb:2d:ef:35:21:ee:40:3b:fe:0c:38:3c:37:96:65:63:
         84:e0:77:c1:e4:8a:0d:87:fe:52:9b:82:6a:32:bb:33:9a:15:
         e5:03:f9:7f:77:f5:cf:d0:02:10:3f:6e:d0:1e:d7:f6:35:88:
         c7:b1:26:00:31:91:e4:24:53:fc:58:ef:1c:4b:89:5c:58:c9:
         dd:e9:72:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xc78R2Zg49QuRojWaP8BSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTdiMDM0YjRlN2NhODZkNzE2YjExNDBmY2E1YjU5MGYz
ZTc4YzAwHhcNMjYwNDE2MTgwMDM4WhcNMjYwNDE3MTgwMDM4WjAzMTEwLwYDVQQD
Eyg2Yjc0ZDlmNmIwMThhYjBlZTgyYTdjYWNkZmU2MGEzMTM1MDQwYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs46uoV6bIKjLGw9pi8lCTyGjtqBx
wqvK8+lQEwsTDB3kKgIlTXzb73Z4ToTKLpCvdQjTvTI908I/P1ZGRsJ0+FXy0XBf
O79BBXyAikH0ap+te6zwohGsSWPbDhI0OkeOt9q0K3bb5rh9MJutKMImEVzQoGm0
/0ag2OFYhYshYxpI/9Mx1wVkJu/cjfTukNLIF63/yopB7cnpJHPB0TPIaBEd6GKb
Y/2k2yPsR6DTOQCcazJKZ1TA+yUZyZkzsXDdhp4HQ7kLw4pd/2a0rRa34p9/f4Ws
9m53N9OIENwU+AkT/7jWjS7hNNIhK1LrPqgqS5junI5ijh5tBQNdrH0HEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt02fawGKsO6Cp8rN/mCjE1BAtTMB8GA1UdIwQY
MBaAFOXnsDS058qG1xaxFA/KW1kPPnjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEt
ODAwNzBhZjBlYjVlLzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEtODAwNzBhZjBlYjVl
LzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxH5tNoX
5OoBsazZ0E7LD3ITfSJmq9/wfzaxCU7srFPzLrKIhP1TvmJj6TuyJ+/MtViQIhWR
DcvKBEQV63fXPqfXzsxS9wLm/QLAucC6JZNN7PdjkZLORIgT0tWbKTHdaWi1YCxg
WO26xQP4k85S4wRO4NleRGBWb7QTB2DW4t2Tk7yvdYEnMWBlhAiLmNUWtg9YyV9w
ieAMcvln3UVcE0i7llmGLFypSRDuETp8aBKERkSiW137Le81Ie5AO/4MODw3lmVj
hOB3weSKDYf+UpuCajK7M5oV5QP5f3f1z9ACED9u0B7X9jWIx7EmADGR5CRT/Fjv
HEuJXFjJ3elyvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:43 2026 by rpki-client