Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          qyp10qhK1eQhqwgssuK44mpwtIiWNwhXJIPfJZ1lDCs=
Subject key identifier:   05:10:57:E2:19:D1:46:CB:A2:17:B8:33:96:F4:76:43:95:55:F1:7B
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       01A1DE702DD947C15B48F9811C7A465343CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          15DD
Signing time:             Sun 15 Nov 2026 09:00:56 +0000
Manifest this update:     Sun 15 Nov 2026 09:00:56 +0000
Manifest next update:     Mon 16 Nov 2026 09:00:56 +0000
Files and hashes:         1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: BTIp8WQtiJbDctB/XnPAW5n1Yj9jSxI8el10SEedMOw=)
                          2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=)
                          3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=)
                          4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=)
                          5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:2d:d9:47:c1:5b:48:f9:81:1c:7a:46:53:43:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: Nov 15 09:00:56 2026 GMT
            Not After : Nov 16 09:00:56 2026 GMT
        Subject: CN=051057e219d146cba217b83396f476439555f17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f7:41:0c:89:20:e7:d2:fa:76:c5:b0:73:fc:
                    ad:f7:7e:de:8a:c7:3c:0d:46:31:38:3c:1b:5c:1c:
                    6f:99:15:a2:69:84:32:91:9e:cb:d2:6b:9f:79:f3:
                    03:cd:e7:ae:11:7a:18:27:15:3f:63:8a:3b:9d:27:
                    78:68:cf:a3:ea:36:db:63:c9:2d:df:7b:b2:f4:34:
                    3e:12:37:a5:6b:03:87:81:19:1d:7f:08:7a:27:e4:
                    0c:96:1f:f2:14:b1:00:74:e9:fd:80:6a:62:5e:ef:
                    d8:b4:ad:91:3f:4c:69:87:a2:f7:c4:5b:35:c9:36:
                    64:7f:f7:b4:84:0d:3c:0c:2f:aa:02:7a:6b:2b:b9:
                    34:ca:eb:fb:a0:02:54:cd:24:3e:4f:7b:84:4e:67:
                    d0:f2:0f:84:05:2c:7b:c4:fb:ba:19:8f:6b:ec:ea:
                    2a:1a:ed:1e:b5:5e:9d:90:b8:1f:b2:1a:bf:76:85:
                    6b:2a:60:e9:38:dd:e5:fe:ba:30:eb:ee:28:f7:0b:
                    7d:12:a1:a4:d9:44:d4:76:5f:69:28:ae:9b:89:97:
                    18:0b:2b:06:9d:e9:f8:3e:01:ef:5d:14:d6:3a:0d:
                    a6:10:eb:97:09:2f:26:52:bc:79:94:f8:42:f6:b5:
                    89:51:c9:05:97:7d:f5:db:dc:79:f5:a4:0b:d6:b6:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:10:57:E2:19:D1:46:CB:A2:17:B8:33:96:F4:76:43:95:55:F1:7B
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8b:ac:ed:19:18:cc:d9:73:a2:4e:10:6a:c0:b5:ed:91:5a:
         83:42:91:1c:10:f6:02:f9:1f:70:19:08:92:f6:a2:a2:d4:7b:
         bc:ec:4d:7b:c7:51:54:5a:26:55:bb:0b:b6:06:be:c7:36:d1:
         ae:fa:10:12:f0:82:a2:d4:f3:51:a8:26:ed:b7:e4:e2:40:e3:
         3d:99:8a:b1:93:dc:76:90:31:d4:a2:fb:21:85:26:eb:de:db:
         d9:92:c0:85:72:f2:c8:89:16:40:c2:2b:be:3a:b4:84:9f:83:
         8b:d2:19:10:b9:61:ce:c4:85:4b:65:99:27:0a:ce:87:63:d4:
         06:42:ac:5f:9a:e4:2e:ec:cd:fd:bb:53:8e:89:9f:fa:20:4c:
         fe:23:11:24:99:3d:29:21:4a:6e:85:3a:4b:d0:14:c3:41:ea:
         cf:9d:d4:29:96:22:5b:b8:76:d3:69:ba:23:a0:1c:85:cb:a9:
         ff:8b:ab:76:f3:41:d3:29:e0:4c:69:60:a9:89:2d:f8:fc:09:
         34:52:14:17:2e:bf:b7:1c:c8:7e:95:99:e1:5e:81:56:d7:21:
         14:ad:48:48:14:88:2c:fe:79:f0:6e:ff:14:46:79:6c:95:ea:
         9b:03:60:a5:3a:02:ea:5a:71:37:e5:10:ed:90:b2:2a:e8:7e:
         26:5d:3b:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecC3ZR8FbSPmBHHpGU0PPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTY3OTRiOTFiODE0MDY0MTJhMTM3ODcwYmZkZTNiMTcw
ZGUwOTQwHhcNMjYxMTE1MDkwMDU2WhcNMjYxMTE2MDkwMDU2WjAzMTEwLwYDVQQD
EygwNTEwNTdlMjE5ZDE0NmNiYTIxN2I4MzM5NmY0NzY0Mzk1NTVmMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fdBDIkg59L6dsWwc/yt937eisc8
DUYxODwbXBxvmRWiaYQykZ7L0mufefMDzeeuEXoYJxU/Y4o7nSd4aM+j6jbbY8kt
33uy9DQ+EjelawOHgRkdfwh6J+QMlh/yFLEAdOn9gGpiXu/YtK2RP0xph6L3xFs1
yTZkf/e0hA08DC+qAnprK7k0yuv7oAJUzSQ+T3uETmfQ8g+EBSx7xPu6GY9r7Ooq
Gu0etV6dkLgfshq/doVrKmDpON3l/row6+4o9wt9EqGk2UTUdl9pKK6biZcYCysG
nen4PgHvXRTWOg2mEOuXCS8mUrx5lPhC9rWJUckFl33129x59aQL1racmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUQV+IZ0UbLohe4M5b0dkOVVfF7MB8GA1UdIwQY
MBaAFOWmeUuRuBQGQSoTeHC/3jsXDeCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjIt
NTg3MjEwOWI2N2E4LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjItNTg3MjEwOWI2N2E4
LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYus7RkY
zNlzok4QasC17ZFag0KRHBD2AvkfcBkIkvaiotR7vOxNe8dRVFomVbsLtga+xzbR
rvoQEvCCotTzUagm7bfk4kDjPZmKsZPcdpAx1KL7IYUm697b2ZLAhXLyyIkWQMIr
vjq0hJ+Di9IZELlhzsSFS2WZJwrOh2PUBkKsX5rkLuzN/btTjomf+iBM/iMRJJk9
KSFKboU6S9AUw0Hqz53UKZYiW7h202m6I6Achcup/4urdvNB0yngTGlgqYkt+PwJ
NFIUFy6/txzIfpWZ4V6BVtchFK1ISBSILP558G7/FEZ5bJXqmwNgpToC6lpxN+UQ
7ZCyKuh+Jl07bA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:29:15 2026 by rpki-client