Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File:                     5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier:          qc0ZPogiOa9fzUjghL3SFeOfdvnO6CDAjfWIumJ42AM=
Subject key identifier:   54:AB:B5:A2:38:51:E7:45:2C:47:8E:5C:AD:A4:0E:2A:3F:3A:80:0C
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer:       /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial:       019FAA87547B00CE4EAC299D46699FCF4726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number:          103A
Signing time:             Tue 28 Jul 2026 21:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:23 +0000
Files and hashes:         1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: cJicAby8A4ODE5abwJROAYL7NFvVsPF1uXuzOJDmwlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:54:7b:00:ce:4e:ac:29:9d:46:69:9f:cf:47:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
        Validity
            Not Before: Jul 28 21:00:23 2026 GMT
            Not After : Jul 29 21:00:23 2026 GMT
        Subject: CN=54abb5a23851e7452c478e5cada40e2a3f3a800c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:69:ad:44:ac:4f:6c:2d:92:14:7c:87:19:
                    7a:dc:a5:84:81:34:34:11:45:b9:a1:02:e8:0d:1c:
                    ee:e5:74:25:db:5b:d5:31:ef:4f:67:d6:d1:31:d7:
                    24:a7:3d:31:d1:89:fc:7a:04:cd:c9:30:bb:42:05:
                    e0:65:4c:0c:bb:08:b0:83:35:d6:98:d8:c5:5c:e8:
                    95:90:ec:de:e7:57:eb:47:01:cc:64:26:1c:09:6e:
                    d4:13:a6:5f:3b:95:3c:48:c8:8a:ce:49:30:28:db:
                    cc:02:06:ab:3b:e5:94:36:49:b0:31:66:a3:a0:fc:
                    65:fb:7e:80:1c:9b:bc:0e:04:4d:73:9b:22:39:b2:
                    71:7b:ca:1d:9b:a5:0f:73:c7:16:f0:b4:e2:c7:50:
                    74:dc:eb:8c:3c:8f:5f:4a:b7:83:87:1a:2c:50:ab:
                    a6:9d:5f:34:40:3e:77:0c:19:75:37:02:e0:1d:57:
                    51:7e:90:68:f3:2c:b7:00:cc:26:23:fb:98:66:fd:
                    48:07:a0:1a:5c:86:4e:51:9a:66:9c:0f:a1:43:7b:
                    26:31:f7:b6:d5:a0:53:22:a0:93:4b:39:0f:4c:73:
                    74:45:84:1a:1f:fe:e3:f7:b7:ba:bd:d6:c7:10:4b:
                    a1:c2:a1:39:94:7a:6e:d3:a9:ad:e8:84:3c:71:e2:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:B5:A2:38:51:E7:45:2C:47:8E:5C:AD:A4:0E:2A:3F:3A:80:0C
            X509v3 Authority Key Identifier:
                keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:01:29:fe:d5:94:db:e8:f1:37:60:2c:9a:58:94:d8:dd:a3:
         f0:7a:4b:6f:d7:6d:d1:3e:e1:02:92:88:c9:a1:1a:13:ae:1c:
         c1:d1:16:9c:88:e7:d6:ff:59:42:ae:94:01:08:dd:5b:80:14:
         83:2e:a3:48:27:51:41:46:51:3d:17:48:67:1c:02:03:4f:98:
         a0:d1:19:1e:6d:85:24:61:96:81:ee:3c:82:07:33:36:4e:22:
         f0:10:a7:65:97:92:d2:5a:60:65:a0:26:89:db:ff:1e:4f:9c:
         dc:d8:12:58:c8:c2:2a:58:e9:07:49:12:b7:ef:1b:87:3b:44:
         20:47:73:2a:c2:78:96:f7:89:33:80:08:f0:9b:6b:20:9a:00:
         61:21:79:1d:cb:0d:1d:d1:8d:2b:71:56:66:b9:a9:49:e1:a2:
         5f:4a:d9:24:28:e0:cb:81:14:9e:8c:e4:b2:40:90:15:a2:12:
         38:54:a9:6d:1c:20:e6:73:ed:ed:a8:f5:3c:f3:09:f2:f4:f6:
         c6:9b:0d:3d:82:01:45:fe:32:1e:47:2d:e0:62:28:47:28:29:
         84:71:04:6b:24:8c:99:ce:80:67:50:71:8c:0d:94:0d:42:e2:
         c2:24:41:25:ba:10:b0:46:5d:e0:ac:ea:8e:7b:14:e5:b4:27:
         02:02:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:03 2026 by rpki-client