Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
File:                     5LDTY6ChegaEUahRRc5PpGTX-hs.mft (raw, json)
Hash identifier:          0PSzeXkQCLMTtNT7dRWj+dPxz+jSC/B67aGnPCzOqII=
Subject key identifier:   67:EF:1A:A2:17:EA:4F:A8:3E:75:E6:73:03:B1:70:15:69:FE:6D:05
Authority key identifier: E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
Certificate issuer:       /CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Certificate serial:       019FAA19D1A94690B5B5B3B0B893A66FDE6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
Manifest number:          1304
Signing time:             Tue 28 Jul 2026 19:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:46 +0000
Files and hashes:         1: 5LDTY6ChegaEUahRRc5PpGTX-hs.crl (hash: iXc2TjWgx97kdgdfs6AANEInlbLTRiYPbuvkmgckOu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:d1:a9:46:90:b5:b5:b3:b0:b8:93:a6:6f:de:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
        Validity
            Not Before: Jul 28 19:00:46 2026 GMT
            Not After : Jul 29 19:00:46 2026 GMT
        Subject: CN=67ef1aa217ea4fa83e75e67303b1701569fe6d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:e5:1a:be:e2:a4:12:40:9c:dd:15:ea:56:
                    ee:10:58:88:cf:1d:fd:05:d9:46:72:37:3a:f2:a7:
                    2a:a6:d2:a8:53:7d:7d:c6:ef:ac:fd:bf:06:f7:96:
                    6c:19:9a:27:83:fe:82:a5:e1:74:f9:cd:d4:8f:07:
                    d7:f4:d9:6d:0e:c4:6c:3d:2d:b6:bf:0e:a1:d8:2d:
                    82:4b:83:8e:73:9a:4d:b8:5b:a2:75:38:8e:c0:d2:
                    c9:00:53:30:21:ca:2c:4f:f9:61:d7:a5:7e:32:94:
                    2c:25:18:2c:03:7c:46:35:8b:62:42:47:47:46:72:
                    a0:48:d6:89:f0:9e:5c:ab:33:60:8d:db:8e:fd:98:
                    4e:e8:98:5f:52:f2:04:fe:e9:4b:ad:1f:cf:01:ee:
                    09:7b:fd:ad:c8:aa:0e:c1:ca:83:dd:5b:0b:59:ce:
                    73:f9:94:25:6a:3b:43:91:9f:91:d0:05:f8:b9:be:
                    0c:b1:66:b9:64:cd:be:b3:03:64:7e:63:b5:ab:c3:
                    24:69:86:a2:a3:5c:81:56:63:46:e3:ad:90:a0:fc:
                    0b:ff:ef:c2:17:8b:8c:1a:30:d7:87:20:50:b3:d3:
                    92:bf:f9:b0:75:95:e6:86:20:8c:73:c9:80:02:ff:
                    64:86:fa:8b:56:ae:dc:0e:46:15:3c:c4:84:79:08:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EF:1A:A2:17:EA:4F:A8:3E:75:E6:73:03:B1:70:15:69:FE:6D:05
            X509v3 Authority Key Identifier:
                keyid:E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:5e:54:2c:1b:90:94:21:36:11:a6:14:5a:aa:95:a7:90:
         22:0d:7a:82:e8:52:67:b7:2c:96:a4:f2:b2:6d:08:54:d4:8e:
         49:5c:9c:f1:ea:1a:11:06:e6:5e:b9:d7:18:bc:5b:e9:48:8a:
         1d:e4:06:30:bb:43:57:4f:96:36:ec:ad:fd:32:d8:56:ad:ca:
         62:7d:ad:e2:2d:5d:54:de:86:0f:2f:39:ce:65:a3:9d:25:ff:
         04:ec:bc:0d:85:8b:c1:37:c3:98:95:b9:bc:9c:b4:86:ae:c4:
         10:f5:a3:3a:e6:98:7a:d0:c7:fa:3f:d3:05:fe:8f:6a:7a:af:
         f3:be:c8:61:f4:2e:2f:76:65:e6:c8:9a:63:b1:07:d2:0d:1e:
         1a:ed:6c:4a:da:17:14:21:a2:70:ef:ee:d9:86:af:d5:b1:dd:
         0f:51:eb:39:db:87:56:68:cf:5e:c1:d6:ec:8b:36:1e:b1:43:
         67:98:e3:6c:79:0f:ce:fc:0a:52:cb:3f:8f:e8:7f:d6:a8:39:
         b9:32:6b:8d:e9:aa:87:93:25:2b:42:40:04:b7:c6:0d:4a:6a:
         80:e0:9c:f5:a4:ed:a5:65:14:c3:6f:bb:f6:36:28:ab:a9:f4:
         dc:7a:c6:d2:7a:db:26:4d:8e:0c:72:b9:a5:ca:9c:3f:51:26:
         27:93:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:05:34 2026 by rpki-client