Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File:                     5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier:          kwf+ARgyXbzchonL3AB+2NqaIoYE8oyoGvsVh2iOBB0=
Subject key identifier:   0B:69:91:74:9D:0B:08:D4:D6:ED:27:6C:42:D8:AB:AD:6D:1A:CD:BD
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer:       /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial:       019FAA1A85E194038B4EB69CABA39ED055E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number:          11A6
Signing time:             Tue 28 Jul 2026 19:01:32 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:32 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:32 +0000
Files and hashes:         1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: 84fZPBM2C4clx5eNuX3anENCS5T/fEVhqogNx4ZPlLk=)
                          2: YmHcrnOOhyVRFSzhb5LmKrSYZKs.roa (hash: 5Tv/E4FlLGmCFNLyr1qqDnFaOB6Omm/F5UCvSaKyKeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:85:e1:94:03:8b:4e:b6:9c:ab:a3:9e:d0:55:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
        Validity
            Not Before: Jul 28 19:01:32 2026 GMT
            Not After : Jul 29 19:01:32 2026 GMT
        Subject: CN=0b6991749d0b08d4d6ed276c42d8abad6d1acdbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:44:c7:49:38:fe:76:58:47:3e:43:be:08:
                    25:33:c8:95:f7:01:22:a7:63:ae:2b:e6:80:12:f7:
                    0c:26:8b:e8:c3:cb:46:6d:bf:af:00:e3:35:d1:82:
                    66:90:81:e3:81:2c:c4:a4:fb:ea:5b:2d:b3:8e:c5:
                    6f:6f:ae:00:c9:0b:84:78:17:7d:a3:b8:40:d7:70:
                    19:c7:d1:97:23:e3:e4:14:4b:e4:a3:9e:ff:62:28:
                    f9:31:c2:0e:b3:c1:f4:60:66:50:c1:3d:79:2d:35:
                    b1:d6:bf:bc:f3:e5:6f:84:74:57:31:f9:48:76:25:
                    cd:66:b4:61:7a:ae:ff:b4:7b:39:ff:20:41:32:8b:
                    a3:f0:dd:04:aa:17:82:a1:03:77:05:c7:f6:9b:73:
                    3b:1a:82:f4:7d:50:96:ac:d0:23:b6:65:32:e7:7d:
                    42:9d:8b:f4:41:df:ae:26:a1:47:ba:26:2f:64:99:
                    ec:6c:47:de:02:9f:27:f5:50:32:d6:78:a5:63:3a:
                    71:8f:90:b8:a1:dc:07:39:e7:ad:ee:46:90:49:91:
                    a9:9d:08:ea:c5:f0:c4:2f:6b:d8:36:16:1a:c8:4a:
                    c5:04:63:4b:3b:bb:7d:01:f2:37:ae:18:a4:05:2d:
                    ed:91:0f:b6:19:ca:15:75:7a:11:a2:40:ed:82:05:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:69:91:74:9D:0B:08:D4:D6:ED:27:6C:42:D8:AB:AD:6D:1A:CD:BD
            X509v3 Authority Key Identifier:
                keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:29:04:90:ab:54:ca:84:56:32:92:de:b0:4d:fe:56:a3:ad:
         d8:29:fd:ee:71:9f:ab:a2:25:59:47:94:b9:59:6b:cd:76:c8:
         f3:ca:3d:e2:e8:23:b2:3b:c4:4e:8c:bf:61:1c:c8:81:22:be:
         6f:bd:a3:6c:c2:ea:56:c4:60:cf:60:56:fb:99:49:e2:dd:3d:
         a8:da:a3:e8:41:a5:0f:4f:33:8b:34:33:a2:42:63:b5:6d:90:
         a1:87:72:32:0a:7c:e4:8f:75:33:d1:35:c2:23:70:9f:1f:e6:
         e0:5c:cf:bd:b3:a8:8c:b9:f1:3d:c4:05:75:6d:e6:ef:2e:82:
         df:de:b2:f7:cc:8c:f7:46:cc:b6:e6:f9:35:8b:a8:8d:f2:54:
         1f:ff:1e:be:c3:85:0a:0e:a6:5f:8e:3e:48:39:d9:43:e1:2f:
         e6:8a:b3:8a:e6:39:28:72:f8:7d:d4:93:4e:eb:28:ac:72:45:
         50:4d:32:3f:48:09:81:61:fd:06:73:1d:64:c4:ea:45:55:6f:
         2c:41:d7:53:d7:ce:2a:d9:48:18:2c:b7:d5:89:28:3f:f1:42:
         d3:fd:39:c7:dc:26:6c:1b:60:ab:78:2e:0a:9a:ae:d6:49:cd:
         d7:32:40:cf:3f:f7:a5:75:15:bd:e3:9d:47:74:86:c8:f3:5d:
         5a:bf:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:21 2026 by rpki-client