Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File:                     5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier:          ssrFpKc9Cxs7+gbd+Ixsr0Yr4j+R5IQB4Yj7XRBKtZs=
Subject key identifier:   05:EE:28:3C:69:87:AD:1D:6A:51:DC:A6:FB:B9:69:22:67:68:C4:1F
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer:       /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial:       019FA9AC479B825761E4EC77A9EC2ACA92F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number:          11A6
Signing time:             Tue 28 Jul 2026 17:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:07 +0000
Files and hashes:         1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: Z1dlq/X29DoO76j8BmMqgWPSn+P0auUdDv8xhASQuyo=)
                          2: J_wTFK-Imelz3lo0EhalX7WkndE.roa (hash: LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=)
                          3: QE-p0DolLSe1YcERFi4pB7qqbME.roa (hash: tSsxRvUgtqlAtlXCTQBKtK0rsPOfdoX05ytqnptRrgY=)
                          4: Y4XWS1rxbRyTsrkehJHiTfLRsBA.roa (hash: Umh1axeyy2cYjkidrczQZIziQ2tY05LzkbHNxBOVUb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:47:9b:82:57:61:e4:ec:77:a9:ec:2a:ca:92:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
        Validity
            Not Before: Jul 28 17:01:07 2026 GMT
            Not After : Jul 29 17:01:07 2026 GMT
        Subject: CN=05ee283c6987ad1d6a51dca6fbb969226768c41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:3d:14:39:f2:cf:36:ed:23:1a:50:10:07:
                    c0:4d:df:fb:52:bc:90:10:43:f2:84:84:d2:30:32:
                    ef:03:c0:7b:10:1e:93:f4:b5:52:2f:d9:94:36:88:
                    75:59:d7:70:67:38:64:18:2a:8b:f5:70:c4:8e:c0:
                    24:7b:50:75:6c:97:05:3b:63:90:f3:7b:7b:70:9e:
                    3e:38:61:5c:a3:29:bd:8b:ad:0d:b9:e2:79:10:39:
                    bf:46:9e:32:cc:0d:cc:7d:bf:61:a3:a8:66:a9:6c:
                    8a:7d:56:73:48:04:a3:61:60:34:0b:63:9c:9b:5e:
                    4d:be:c0:74:dd:6d:07:07:d6:94:7e:fa:0c:7b:79:
                    c5:23:42:ff:22:7b:60:e0:75:c1:7f:89:f8:5a:72:
                    18:8c:d6:c7:2c:e2:f9:04:4b:6f:a7:d7:17:df:d1:
                    2a:e5:79:d5:6b:d7:a8:4f:10:5c:04:38:d6:6e:50:
                    c2:b4:c1:d3:dd:5c:9e:db:4e:a4:d6:22:40:cb:25:
                    90:29:51:44:87:60:4c:4a:db:f4:6d:06:8b:7c:21:
                    e8:2f:4e:3f:88:bf:47:43:8c:90:40:ac:c0:47:7f:
                    88:56:e8:45:e9:7d:c0:d0:a3:fb:36:91:cf:63:3a:
                    00:9d:e3:41:dd:e5:ba:18:02:0c:30:f0:d5:6b:45:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EE:28:3C:69:87:AD:1D:6A:51:DC:A6:FB:B9:69:22:67:68:C4:1F
            X509v3 Authority Key Identifier:
                keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:98:1f:99:73:d2:3c:94:9a:3c:57:74:7a:e0:33:e0:2d:23:
         a3:58:e1:22:00:8b:c0:4e:f7:b9:d3:78:47:29:6b:3b:ae:4c:
         ec:06:8b:80:ea:2e:00:09:c2:2e:14:89:d6:31:b2:3b:9c:5a:
         7e:67:84:94:49:f1:8e:a7:61:25:70:26:53:92:12:00:79:c3:
         0b:59:eb:ea:21:13:7c:b1:01:5b:9c:72:97:db:54:01:70:c2:
         76:c1:b4:76:45:f1:51:2c:09:9a:c9:b1:f8:01:c3:4e:4d:62:
         a7:56:56:79:a7:db:60:62:12:c9:a8:32:24:06:06:f8:f3:75:
         54:75:75:47:bf:fc:fa:3c:c6:14:42:51:99:82:81:03:74:01:
         f3:6a:94:6c:5d:6b:a9:59:c3:e7:d7:68:95:3f:7c:d3:70:8d:
         38:4a:b2:a6:44:20:0a:47:a6:59:5c:bc:3c:8c:10:c2:e2:54:
         b7:32:f3:ed:0d:14:40:f7:22:ee:cf:cf:5f:ca:a9:b5:e4:d3:
         a6:88:eb:6c:a1:63:2b:1a:bd:9d:54:c5:4b:45:e4:ac:e9:26:
         a3:a0:f3:9a:dc:35:4d:cf:bc:e9:08:99:85:ca:da:f1:5e:e8:
         bc:f3:7b:c7:e4:77:43:c5:2a:80:08:48:41:7b:3f:64:5d:a5:
         0c:d3:b7:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prEebgldh5Ox3qewqypL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3
NDVmNWUwHhcNMjYwNzI4MTcwMTA3WhcNMjYwNzI5MTcwMTA3WjAzMTEwLwYDVQQD
EygwNWVlMjgzYzY5ODdhZDFkNmE1MWRjYTZmYmI5NjkyMjY3NjhjNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtms9FDnyzzbtIxpQEAfATd/7UryQ
EEPyhITSMDLvA8B7EB6T9LVSL9mUNoh1WddwZzhkGCqL9XDEjsAke1B1bJcFO2OQ
83t7cJ4+OGFcoym9i60NueJ5EDm/Rp4yzA3Mfb9ho6hmqWyKfVZzSASjYWA0C2Oc
m15NvsB03W0HB9aUfvoMe3nFI0L/Intg4HXBf4n4WnIYjNbHLOL5BEtvp9cX39Eq
5XnVa9eoTxBcBDjWblDCtMHT3Vye206k1iJAyyWQKVFEh2BMStv0bQaLfCHoL04/
iL9HQ4yQQKzAR3+IVuhF6X3A0KP7NpHPYzoAneNB3eW6GAIMMPDVa0XpGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXuKDxph60dalHcpvu5aSJnaMQfMB8GA1UdIwQY
MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt
ODVkODBhNTQ0YmViLzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi
LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspgfmXPS
PJSaPFd0euAz4C0jo1jhIgCLwE73udN4RylrO65M7AaLgOouAAnCLhSJ1jGyO5xa
fmeElEnxjqdhJXAmU5ISAHnDC1nr6iETfLEBW5xyl9tUAXDCdsG0dkXxUSwJmsmx
+AHDTk1ip1ZWeafbYGISyagyJAYG+PN1VHV1R7/8+jzGFEJRmYKBA3QB82qUbF1r
qVnD59dolT9803CNOEqypkQgCkemWVy8PIwQwuJUtzLz7Q0UQPci7s/PX8qpteTT
pojrbKFjKxq9nVTFS0XkrOkmo6Dzmtw1Tc+86QiZhcra8V7ovPN7x+R3Q8UqgAhI
QXs/ZF2lDNO35Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:29 2026 by rpki-client