Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          TEVi75w4s5U/JEwbdCtAOLZqO6e1cRM62rmbQnDDQfQ=
Subject key identifier:   1F:56:4A:75:1E:A0:CE:B6:6A:40:0B:E5:71:CA:E5:AE:0B:8A:07:21
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       019CABD958FAA6EED330142B14410E6074C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          132C
Signing time:             Mon 02 Mar 2026 00:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:13 +0000
Files and hashes:         1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: IKeuCYDUaSbTRh+zm2y2Cs1KgNfvjsF3YSXmcvc07fE=)
                          2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=)
                          3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=)
                          4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=)
                          5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:58:fa:a6:ee:d3:30:14:2b:14:41:0e:60:74:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: Mar  2 00:01:13 2026 GMT
            Not After : Mar  3 00:01:13 2026 GMT
        Subject: CN=1f564a751ea0ceb66a400be571cae5ae0b8a0721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:ca:b3:50:47:9c:b4:74:10:08:ef:63:ae:
                    2c:61:a3:15:58:50:d7:73:71:32:92:81:30:ed:3e:
                    81:7f:8d:08:a4:5c:79:6e:4b:13:ae:49:2c:1f:ea:
                    8a:6c:2b:21:f4:05:3b:3a:78:05:a9:1c:7e:32:df:
                    2f:51:5f:04:f1:e7:4a:b2:0d:44:d2:fe:4b:f8:0b:
                    1a:aa:df:63:62:f5:be:41:fa:00:41:1d:23:b8:59:
                    6a:65:05:7f:c8:14:6a:aa:28:09:c7:1e:5c:b3:07:
                    7e:53:69:61:0f:2a:cf:b1:b4:ea:c3:57:03:ff:63:
                    a3:7e:98:4f:95:0d:4e:1c:9e:6c:78:de:f1:67:bd:
                    72:04:9c:6a:f7:a2:78:63:0f:f7:51:74:0a:32:67:
                    e7:61:00:4f:a0:c1:26:1c:d7:30:05:e3:c7:f2:f2:
                    f9:a8:3e:37:35:67:d1:e7:78:64:ed:05:ad:d3:fe:
                    51:50:0e:92:a9:88:5f:53:de:fd:32:62:b3:d4:be:
                    2c:8c:7f:90:f0:2c:81:64:da:85:cd:bc:e9:6e:cf:
                    5b:ba:95:35:bc:72:59:1b:5e:ec:b1:4a:7d:7b:93:
                    0f:a1:db:3b:88:6f:bf:dc:2b:55:69:5b:8f:f0:72:
                    fd:82:e5:00:91:5d:10:9f:cc:21:2b:54:29:3a:e5:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:56:4A:75:1E:A0:CE:B6:6A:40:0B:E5:71:CA:E5:AE:0B:8A:07:21
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:25:71:bf:3b:c0:9d:a6:37:7a:82:f4:66:fb:79:8d:48:
         9b:04:6d:18:4a:4d:0f:ff:d2:35:4b:85:5a:df:9e:d1:fb:30:
         ad:cb:96:36:bc:87:23:19:0b:be:31:d3:61:f0:62:de:7f:fb:
         f9:95:a5:c0:4c:15:57:9f:b9:dc:42:73:1e:6c:a8:e3:b2:24:
         b8:d1:a1:a6:73:1b:4f:d2:2f:db:bc:db:95:84:cc:75:8d:04:
         c1:db:57:69:a9:38:e6:48:7d:90:0e:11:e8:94:0a:9b:dd:0b:
         9c:b9:ac:c1:be:9e:a5:1c:7e:96:93:b9:80:84:94:f0:5a:2c:
         c5:00:24:aa:a3:41:56:85:02:a6:59:6a:84:95:02:90:16:04:
         db:fc:63:1a:32:80:11:b4:65:a8:95:d4:96:a5:3f:f7:b3:10:
         32:08:7f:52:44:87:87:17:d9:21:ed:68:51:c3:3d:78:36:49:
         99:16:c9:9c:1c:8d:9f:0e:39:af:3e:ab:c5:d6:30:d7:c6:d1:
         6c:90:b1:7c:1a:5e:c1:ca:05:fa:ad:bb:ec:4d:7f:86:f7:64:
         9a:0d:cd:2f:b0:63:a0:39:e6:00:e6:ec:42:22:cb:be:c1:e6:
         17:37:98:28:98:27:9a:86:b1:02:de:f4:5a:3e:1b:04:b2:dd:
         8c:40:8d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Vj6pu7TMBQrFEEOYHTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTY3OTRiOTFiODE0MDY0MTJhMTM3ODcwYmZkZTNiMTcw
ZGUwOTQwHhcNMjYwMzAyMDAwMTEzWhcNMjYwMzAzMDAwMTEzWjAzMTEwLwYDVQQD
EygxZjU2NGE3NTFlYTBjZWI2NmE0MDBiZTU3MWNhZTVhZTBiOGEwNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvTKs1BHnLR0EAjvY64sYaMVWFDX
c3EykoEw7T6Bf40IpFx5bksTrkksH+qKbCsh9AU7OngFqRx+Mt8vUV8E8edKsg1E
0v5L+Asaqt9jYvW+QfoAQR0juFlqZQV/yBRqqigJxx5cswd+U2lhDyrPsbTqw1cD
/2OjfphPlQ1OHJ5seN7xZ71yBJxq96J4Yw/3UXQKMmfnYQBPoMEmHNcwBePH8vL5
qD43NWfR53hk7QWt0/5RUA6SqYhfU979MmKz1L4sjH+Q8CyBZNqFzbzpbs9bupU1
vHJZG17ssUp9e5MPods7iG+/3CtVaVuP8HL9guUAkV0Qn8whK1QpOuVx9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9WSnUeoM62akAL5XHK5a4LigchMB8GA1UdIwQY
MBaAFOWmeUuRuBQGQSoTeHC/3jsXDeCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjIt
NTg3MjEwOWI2N2E4LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjItNTg3MjEwOWI2N2E4
LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOElcb87
wJ2mN3qC9Gb7eY1ImwRtGEpND//SNUuFWt+e0fswrcuWNryHIxkLvjHTYfBi3n/7
+ZWlwEwVV5+53EJzHmyo47IkuNGhpnMbT9Iv27zblYTMdY0EwdtXaak45kh9kA4R
6JQKm90LnLmswb6epRx+lpO5gISU8FosxQAkqqNBVoUCpllqhJUCkBYE2/xjGjKA
EbRlqJXUlqU/97MQMgh/UkSHhxfZIe1oUcM9eDZJmRbJnByNnw45rz6rxdYw18bR
bJCxfBpewcoF+q277E1/hvdkmg3NL7BjoDnmAObsQiLLvsHmFzeYKJgnmoaxAt70
Wj4bBLLdjECN+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:40 2026 by rpki-client