Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File:                     5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier:          RGpLSKKqVpqpEXmj70kmjs9jCsUNwGNz0ZLSeH7cGXI=
Subject key identifier:   84:4B:A5:5C:9E:DE:F4:23:00:F2:8B:14:F3:F1:8D:DC:9D:7F:9D:D5
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer:       /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial:       019EBF23DACFBDA14E38D879D5B2134EFA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number:          1965
Signing time:             Sat 13 Jun 2026 04:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:58 +0000
Files and hashes:         1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: aOxAxpCd4JlyP2bjHqiVthjPGVNddipOU7yK52/hrds=)
                          2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=)
                          3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=)
                          4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=)
                          5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=)
                          6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=)
                          7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=)
                          8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:da:cf:bd:a1:4e:38:d8:79:d5:b2:13:4e:fa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
        Validity
            Not Before: Jun 13 04:00:58 2026 GMT
            Not After : Jun 14 04:00:58 2026 GMT
        Subject: CN=844ba55c9edef42300f28b14f3f18ddc9d7f9dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:e2:50:46:9a:81:05:7c:7d:27:e6:5e:c2:
                    30:9c:e9:48:20:f2:28:1a:c2:2a:2a:36:da:d0:1e:
                    a3:13:8c:0a:fe:e9:0b:b1:c6:5b:00:fe:95:99:4c:
                    4d:84:2d:b2:5f:4f:e9:94:20:95:4b:21:cf:6c:34:
                    cf:bf:a5:75:37:21:c6:9e:39:4b:bc:18:b0:b8:63:
                    f3:9b:24:de:6e:53:fb:b7:c7:7b:88:18:06:55:ab:
                    8b:eb:53:e1:bd:45:e8:2d:f5:e1:64:fa:8b:7b:3b:
                    16:ae:cd:51:78:61:90:13:a4:ce:1f:06:db:12:a8:
                    d8:7f:78:63:a4:22:d0:de:6e:49:77:32:bb:c4:58:
                    7f:59:0c:a3:1e:fa:9d:91:12:7a:f1:b6:b3:ae:71:
                    fc:c6:91:ab:a7:24:e1:d9:bd:ff:fc:12:39:54:db:
                    f0:ad:34:00:70:cc:89:ae:89:1c:f2:e3:07:ec:e1:
                    98:6c:94:23:c2:16:a8:d9:e4:da:9a:71:44:1b:10:
                    fb:af:3c:d5:d3:d9:28:fc:42:fe:ee:39:1d:ba:09:
                    e8:21:e2:42:b3:0e:fc:8a:81:35:8a:7b:00:f5:50:
                    6e:c9:09:aa:cc:36:10:44:d7:0c:d1:95:11:54:40:
                    29:06:cc:1e:9a:86:84:25:92:72:88:46:53:e6:5b:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4B:A5:5C:9E:DE:F4:23:00:F2:8B:14:F3:F1:8D:DC:9D:7F:9D:D5
            X509v3 Authority Key Identifier:
                keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:eb:56:d9:0b:e8:4d:4f:dd:02:c6:65:ae:e9:bb:84:a2:
         25:56:fb:63:9d:3c:30:66:79:02:54:4e:cf:3e:df:c3:b2:0e:
         de:b7:45:34:ce:c5:22:e6:00:93:bd:4a:d9:7f:54:5f:f2:16:
         46:f9:73:1f:d0:b1:c4:1a:c6:7c:88:56:42:2b:b9:56:37:13:
         e8:3f:e6:92:56:44:92:9a:30:15:b4:5a:14:79:9d:7c:05:63:
         c6:8b:f0:24:ac:b9:02:5a:a3:e8:c0:b3:56:c3:24:98:b3:92:
         f3:52:04:d7:16:e3:c7:51:46:19:00:e7:5e:e8:c6:1a:01:34:
         35:fc:76:1d:d1:98:33:c8:10:75:8c:19:0b:5c:fb:e5:c1:28:
         7b:88:7d:c6:f4:b1:0d:e4:5c:b7:20:ef:02:0d:71:22:1d:d0:
         98:22:65:4c:38:b4:1b:26:a4:bd:a4:a5:e9:11:59:d9:e5:9d:
         69:c1:76:3f:65:82:25:fb:76:80:dd:a4:ff:0e:60:2c:c6:b9:
         6d:c0:ec:4e:a9:13:bc:71:cc:d1:2c:0a:91:56:09:c4:a6:53:
         0e:34:cc:27:16:3a:f3:42:ad:43:83:54:6b:02:3d:52:b7:27:
         e3:4c:fa:1f:72:45:7e:f6:64:76:96:7f:3f:8c:c1:ac:9c:cd:
         17:7e:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:49 2026 by rpki-client