Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File:                     5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier:          k4NCaFvuRtdmjb290SCOrf+pnoTjdxrEr/2b9SUTTqQ=
Subject key identifier:   FE:88:47:0C:9D:CF:D9:87:36:4E:4E:7D:F3:64:15:1C:4C:B1:DB:6F
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer:       /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial:       019EBEEC64424E01BFCC06D0BD9E7110D435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number:          0744
Signing time:             Sat 13 Jun 2026 03:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:23 +0000
Files and hashes:         1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: Cq99dgm4AIzFhzH4w5L5JinmiCuwsuoqPryu+NwUKyg=)
                          2: Q92n5As_StLfCEOsCZRxLPjQigk.roa (hash: m0A5cImf1wfkQyI07Q9zPZS2LIiSLajm2W221r5jirk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:64:42:4e:01:bf:cc:06:d0:bd:9e:71:10:d4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
        Validity
            Not Before: Jun 13 03:00:23 2026 GMT
            Not After : Jun 14 03:00:23 2026 GMT
        Subject: CN=fe88470c9dcfd987364e4e7df364151c4cb1db6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:b7:df:97:5e:57:72:e6:01:fa:ce:23:41:
                    ae:e5:15:83:26:0d:0d:30:14:9a:f3:30:1d:98:0d:
                    43:2d:e2:00:63:15:47:1e:14:ac:4b:97:c1:39:11:
                    54:76:14:39:09:f7:13:36:b1:8a:b2:0a:e5:8a:80:
                    81:13:43:91:38:47:e2:0e:51:ca:2d:10:9b:1b:5e:
                    48:5e:8b:41:f4:90:bf:b6:a1:fe:63:46:fc:73:53:
                    84:16:d9:cf:41:dc:15:3c:a3:96:f9:d4:0d:c0:18:
                    8f:f0:66:b4:7f:4d:7d:13:1e:1a:f7:93:00:b1:f1:
                    a0:87:3b:f8:32:4b:51:87:57:95:39:f6:7c:bd:87:
                    4c:c2:26:3b:17:a7:e0:41:d0:00:b8:be:a9:e1:1f:
                    84:5c:f4:3d:0f:93:b0:e2:c7:21:a4:51:f5:32:2e:
                    55:ee:f8:de:6d:8b:a8:43:b2:21:3d:61:d7:76:4d:
                    75:6c:de:e2:91:90:28:fd:e1:d2:27:d7:31:b2:cb:
                    84:7b:c4:58:e2:40:a5:8e:b9:c2:63:d0:72:67:65:
                    ba:d4:9c:34:12:66:49:fa:e5:86:17:97:ad:8f:7f:
                    b5:61:34:73:02:59:35:78:23:af:98:1e:13:79:3c:
                    70:3e:d9:41:e9:2d:f3:1b:06:a8:d5:53:6f:8b:c6:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:88:47:0C:9D:CF:D9:87:36:4E:4E:7D:F3:64:15:1C:4C:B1:DB:6F
            X509v3 Authority Key Identifier:
                keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:87:ef:79:04:f2:ea:1f:3d:fd:c4:41:3e:b8:26:0f:be:0d:
         f7:b1:ef:7e:44:59:0f:0f:f7:8b:06:16:30:60:ed:24:60:64:
         aa:24:12:cb:2e:95:11:26:6a:79:1b:a7:60:f2:4d:ec:1a:a7:
         de:b1:01:c7:36:08:33:df:1d:9a:e2:ac:e3:3e:97:4a:e7:cc:
         84:61:39:03:56:90:44:c7:18:66:c7:71:0d:f7:d2:99:91:88:
         09:66:fc:93:50:72:fc:40:e7:74:42:7f:74:5b:e0:a7:3f:dc:
         c6:0b:7b:cb:aa:77:64:9c:a3:fe:96:e9:af:17:55:0c:27:5f:
         c7:94:11:ec:3c:5c:ea:97:bd:da:70:d9:c9:74:8f:4d:2f:ca:
         5e:44:95:41:ab:69:c6:32:7a:45:70:5a:27:c9:3e:60:9d:f6:
         27:0c:9f:67:4e:ad:66:28:c0:f1:21:29:a8:c9:94:d9:5b:18:
         6b:1b:4e:9c:7d:5e:bc:d5:77:fe:fb:63:77:32:df:5a:4a:1f:
         08:0c:aa:30:87:60:a9:93:26:51:f4:db:94:a0:c4:da:af:03:
         4a:e3:e2:92:c3:55:97:51:ef:0e:e1:dd:00:d3:fa:95:87:df:
         b1:46:f9:64:23:e9:83:f1:35:1c:68:df:97:33:c4:82:60:39:
         b9:0a:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:00:07 2026 by rpki-client