Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          q/An+Nc2o8TJpQql/a2HRd+8A/8YKDWxSdyRRmJjrc4=
Subject key identifier:   2A:27:6F:DA:2D:72:B7:2D:7C:C1:0A:89:F6:92:48:9C:E7:C5:C2:58
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       019FA82B04FF157D0F061B0F3947C910175D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          1092
Signing time:             Tue 28 Jul 2026 10:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:19 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: LDPLQXjKvFS6+B8IzCd+Vdlx91LeCPxRsxiLi3CfGgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:04:ff:15:7d:0f:06:1b:0f:39:47:c9:10:17:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Jul 28 10:00:19 2026 GMT
            Not After : Jul 29 10:00:19 2026 GMT
        Subject: CN=2a276fda2d72b72d7cc10a89f692489ce7c5c258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:37:cc:f6:a9:d4:3e:25:f1:9d:56:1b:d0:
                    a0:63:78:b0:b8:7d:54:f7:85:83:98:69:99:b8:b4:
                    44:5c:6b:99:17:dc:99:e1:3a:d4:e8:db:af:8d:f2:
                    e1:b6:f1:cc:fb:b1:14:4a:14:6b:6a:58:1a:a5:30:
                    fc:4c:07:45:d2:43:fb:27:dc:2a:98:95:12:ea:27:
                    0a:da:d0:37:a2:86:85:02:e5:e6:e2:ed:8f:3d:30:
                    cc:b0:b2:d1:af:06:a1:85:f3:b5:00:27:1f:8e:b7:
                    95:17:8b:11:8d:ee:dd:b5:12:d5:22:71:f7:13:bb:
                    f3:d8:d0:a4:5c:f4:65:42:57:fb:e3:96:73:24:69:
                    fe:ae:0a:8e:87:b8:8f:dd:0c:55:1a:1f:c9:1e:e3:
                    5f:8e:80:ec:be:24:2c:2b:b1:f9:f3:d4:7e:04:0c:
                    21:ee:44:b7:fd:d1:63:aa:b4:00:a8:6a:12:fd:be:
                    57:71:10:1a:22:96:e1:a7:39:db:80:c9:22:74:ac:
                    fb:11:5f:a3:9b:2f:f4:4a:08:ab:6f:68:2a:b6:da:
                    55:26:70:b8:1a:fc:a5:42:1a:21:6c:4d:02:83:8e:
                    85:19:5f:2f:be:56:39:74:b6:03:39:19:f4:39:ce:
                    2e:e0:7b:a7:67:31:81:54:67:85:dc:ab:a4:b3:c0:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:27:6F:DA:2D:72:B7:2D:7C:C1:0A:89:F6:92:48:9C:E7:C5:C2:58
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:ec:57:8f:69:c4:5b:d6:d0:e1:31:2a:9b:d9:d8:89:89:
         3e:62:3d:b8:14:81:fb:f6:0e:0b:0f:f9:10:b4:d8:03:af:a8:
         c7:59:8b:6f:6c:a1:8b:3a:da:21:0c:ca:01:ba:2a:e4:4d:9f:
         6b:ac:d3:8e:37:7c:28:3c:0d:cd:22:c4:8c:6f:d6:cb:73:c9:
         6c:a5:1a:ba:e1:14:d9:df:8b:5c:43:5c:c5:41:ee:fb:f7:6c:
         a1:0b:55:69:a0:f0:27:39:d2:8b:b6:70:0d:c1:a9:72:4c:12:
         c9:f4:86:63:ca:bb:db:4b:95:c9:4f:12:6b:ac:bf:ab:8e:49:
         6d:fc:60:8b:52:cc:7b:41:d3:29:b0:fc:2f:72:26:22:28:39:
         c1:d8:7a:12:5c:51:aa:6b:82:8a:61:fd:05:2f:3d:aa:97:d3:
         09:5b:33:7f:9d:75:66:95:0f:35:d5:f3:bb:d6:63:0c:c2:10:
         2e:92:24:66:ea:33:7d:b5:e1:8a:15:30:25:74:ee:9d:52:f1:
         b2:d5:d3:4a:49:56:04:e5:43:97:5a:8d:1a:77:97:4c:1a:75:
         09:14:71:8c:7d:c5:bd:48:f9:32:a2:c4:6e:4e:7a:3b:ca:36:
         9d:78:a3:ec:45:75:60:ad:09:ff:26:df:ff:4b:fd:69:81:1b:
         91:d5:db:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:19 2026 by rpki-client