Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File:                     5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier:          U+Pu+yB5d+sXLUU26VUMVz+SAhgdGx2+zlmiz71X6pc=
Subject key identifier:   DF:E0:FD:E1:82:02:1F:3E:4D:F5:3B:8E:22:46:07:B0:05:C5:5F:D2
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer:       /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial:       019FAA87C65C998D5CF848663A76B49841CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number:          1497
Signing time:             Tue 28 Jul 2026 21:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:52 +0000
Files and hashes:         1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: VREUVI8b67ZxM61HteF6eMXsg5WnGbFH8oOzoSRJTJs=)
                          2: j0KfrHF7U_ersUCrBx0wIYyU1mg.roa (hash: YJlkOTIzqTwvJH6suym0S6Opx86SQJy3UvFlMQtx2RI=)
                          3: kJQjUgrsTkI9sNO65hRDTSRGiT8.roa (hash: lI+jSO9Op8f4ZB2mDkA1WTwA0uM7OvPByGs3tSZRjRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:c6:5c:99:8d:5c:f8:48:66:3a:76:b4:98:41:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
        Validity
            Not Before: Jul 28 21:00:52 2026 GMT
            Not After : Jul 29 21:00:52 2026 GMT
        Subject: CN=dfe0fde182021f3e4df53b8e224607b005c55fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:e4:71:7a:c1:3e:7c:d8:2f:af:25:47:75:
                    63:d6:ba:25:f5:7a:1a:53:a5:09:19:0a:89:5b:3d:
                    1b:90:25:08:30:fb:84:9e:49:95:bc:75:9a:1f:1e:
                    a0:e1:62:55:24:9c:4e:29:c3:94:d9:fb:ec:bb:23:
                    53:13:28:49:d0:de:5c:33:a1:23:65:09:d1:25:af:
                    51:e1:19:98:ea:15:70:6e:9d:f7:b3:65:7d:cb:47:
                    45:84:db:ee:51:cb:30:e9:73:24:c0:f2:46:b1:a4:
                    b3:5d:60:db:69:b0:0f:bc:89:33:f7:4b:8c:35:d0:
                    43:bc:1f:50:d6:d4:56:84:dc:77:b5:8a:f0:cd:a1:
                    da:61:a5:f2:68:e2:12:2e:18:36:50:f2:ff:d0:95:
                    e8:47:93:3b:17:11:76:34:74:57:cc:fd:c6:d9:d9:
                    ad:12:95:40:92:36:58:84:f2:26:d5:8c:1b:9c:96:
                    ee:cb:41:b5:46:77:2b:c6:6e:66:a1:6f:9e:e2:ac:
                    a3:e6:2c:6a:20:9a:5c:14:af:e1:37:ac:05:d4:e0:
                    da:5f:85:41:f0:57:9c:b3:08:06:da:12:3d:f4:a4:
                    ff:f4:ba:92:ef:42:0f:2c:aa:6e:0a:91:bf:03:41:
                    d4:65:67:a9:ef:73:c7:8c:8e:63:45:00:d0:af:e0:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E0:FD:E1:82:02:1F:3E:4D:F5:3B:8E:22:46:07:B0:05:C5:5F:D2
            X509v3 Authority Key Identifier:
                keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:65:b9:63:77:63:54:38:be:f8:c9:17:c1:87:b5:4e:04:d8:
         a9:71:39:c4:c7:ad:c9:5e:06:ca:9c:5b:cb:b3:25:6c:08:91:
         4e:62:68:36:f5:b0:eb:d8:a9:5d:ca:56:24:3f:0c:5a:1c:52:
         c6:e0:aa:4a:f4:8c:33:1b:89:cb:27:11:0a:0b:75:e1:19:d5:
         6a:6c:48:f0:90:bd:0c:a7:2a:15:ec:14:93:47:52:08:fe:66:
         00:bf:43:87:17:83:fc:a2:e3:10:24:dc:26:22:0b:1d:0b:a1:
         de:2d:c9:e0:34:7f:65:9b:b7:a9:a0:d6:69:c1:a6:44:61:5a:
         ff:fb:55:50:1c:51:96:41:51:b1:53:91:71:99:8e:22:83:67:
         c5:bd:fe:1f:22:63:76:be:d1:77:f7:26:ea:c6:51:1c:58:69:
         b0:fc:ea:c0:3f:b4:60:cf:66:9d:8b:a6:1a:78:d3:89:09:31:
         f3:33:62:bc:d9:b3:13:46:92:cf:5b:95:3f:e0:13:fa:f1:0b:
         f1:38:ae:59:3d:60:17:18:49:77:5e:a9:cc:5f:46:94:87:d1:
         99:06:22:8c:ac:d0:a7:59:b2:d0:97:3c:7e:63:7c:e6:6b:af:
         c8:04:32:d1:43:eb:70:ee:e8:ad:11:7e:f8:f7:be:e2:11:27:
         e8:1d:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:22 2026 by rpki-client