Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          DEeNsXhI49bg4R8wynfEV5FoJ+9CwRxcyV0wqY2uUck=
Subject key identifier:   48:93:B0:C8:2B:BA:D2:16:8E:1C:A1:74:B7:4C:1B:89:0B:3F:47:03
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       019FAC084F2DF474DA5A21F3AE4142D0EF60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          1248
Signing time:             Wed 29 Jul 2026 04:00:53 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:53 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:53 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: CgC5m9fDvecKQmb+EFYdxk1J4p14d96AWvdb3jsFvKQ=)
                          2: eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (hash: fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:4f:2d:f4:74:da:5a:21:f3:ae:41:42:d0:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Jul 29 04:00:53 2026 GMT
            Not After : Jul 30 04:00:53 2026 GMT
        Subject: CN=4893b0c82bbad2168e1ca174b74c1b890b3f4703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:a6:89:74:c0:ec:5a:6c:c6:04:c5:01:6a:
                    38:20:e1:a6:cd:51:f8:51:b8:30:01:19:c1:fc:97:
                    3b:2b:b9:ba:40:59:7a:f8:8a:d8:33:7e:45:b7:36:
                    db:c6:fc:5e:9a:c6:91:30:29:5d:6f:7a:db:ae:41:
                    f7:76:db:7b:26:47:09:d5:e0:2e:a3:77:11:43:a5:
                    38:09:cc:0e:b8:f5:d6:84:c8:76:16:7c:6f:15:02:
                    c0:04:57:de:6c:b1:b1:bd:43:e0:92:b5:34:f9:a9:
                    1e:c5:40:2d:44:bf:45:bc:08:1f:8d:e2:38:e5:e7:
                    77:82:bb:a1:f4:d6:56:8e:d4:a0:b6:92:2f:48:d1:
                    60:63:10:ba:40:fc:ec:8f:67:59:11:54:dc:bb:f4:
                    ed:51:06:f0:81:e3:c1:92:cb:66:66:f6:92:ea:eb:
                    96:37:1e:89:71:a2:0a:58:c8:5c:7b:45:a4:d4:32:
                    46:55:30:ab:b1:0f:6b:a6:56:c4:60:93:a6:bf:cc:
                    4f:7a:7e:4d:85:19:51:7e:7e:25:08:87:68:1d:84:
                    bd:71:37:be:8f:9c:8b:a1:ac:4e:5a:95:b1:ed:c0:
                    71:11:6c:5a:13:61:fb:56:34:82:fd:a4:dc:ad:3d:
                    19:bb:16:e2:57:bf:12:0f:9b:6f:af:86:f9:d2:e4:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:93:B0:C8:2B:BA:D2:16:8E:1C:A1:74:B7:4C:1B:89:0B:3F:47:03
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:54:0e:07:14:34:e2:d1:f2:30:c0:12:92:04:ee:63:76:3b:
         41:8b:be:7f:35:12:56:06:b8:bf:59:53:01:1e:3a:3e:dc:65:
         63:4d:55:98:69:19:b9:da:be:c7:4e:18:a1:00:51:27:17:36:
         05:e3:c6:44:1c:61:95:22:48:6b:61:81:42:d6:c2:33:16:8e:
         da:53:f0:71:d4:00:e1:e3:0a:7a:ba:cb:85:27:a6:df:c8:ca:
         9a:b1:78:75:fb:45:8f:b4:13:58:1b:aa:4b:80:21:df:82:e3:
         11:63:2d:ed:16:53:6d:a6:f2:e1:58:c6:8d:8c:d7:95:d5:be:
         11:11:1a:53:dc:5c:1c:7c:8c:aa:4e:38:34:cb:a6:e7:27:bf:
         ac:08:b0:3a:23:7c:d9:a9:6b:d2:4c:b1:02:87:fd:37:2c:0b:
         c4:2a:27:60:69:cb:85:a9:c8:2a:bb:65:ad:ee:e2:25:94:eb:
         a7:20:4d:70:e2:bc:fb:3a:bc:43:0c:47:ca:6f:53:fa:6b:17:
         1c:05:36:44:49:07:07:62:24:a5:bb:49:4e:62:e0:1b:67:ce:
         94:1c:91:7f:ee:98:38:ce:17:6d:1b:21:d0:b8:4e:92:5d:5b:
         9a:a9:8f:c0:f5:99:a8:36:a0:11:26:ec:aa:43:1d:9e:75:33:
         04:8b:b1:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCE8t9HTaWiHzrkFC0O9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTYwMmVmNzYwYWRjMGE1YjdhNDg1ODNjZmJmOWI2MGZj
YjcxMzAwHhcNMjYwNzI5MDQwMDUzWhcNMjYwNzMwMDQwMDUzWjAzMTEwLwYDVQQD
Eyg0ODkzYjBjODJiYmFkMjE2OGUxY2ExNzRiNzRjMWI4OTBiM2Y0NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53OmiXTA7FpsxgTFAWo4IOGmzVH4
UbgwARnB/Jc7K7m6QFl6+IrYM35FtzbbxvxemsaRMCldb3rbrkH3dtt7JkcJ1eAu
o3cRQ6U4CcwOuPXWhMh2FnxvFQLABFfebLGxvUPgkrU0+akexUAtRL9FvAgfjeI4
5ed3gruh9NZWjtSgtpIvSNFgYxC6QPzsj2dZEVTcu/TtUQbwgePBkstmZvaS6uuW
Nx6JcaIKWMhce0Wk1DJGVTCrsQ9rplbEYJOmv8xPen5NhRlRfn4lCIdoHYS9cTe+
j5yLoaxOWpWx7cBxEWxaE2H7VjSC/aTcrT0ZuxbiV78SD5tvr4b50uTmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiTsMgrutIWjhyhdLdMG4kLP0cDMB8GA1UdIwQY
MBaAFBOWAu92CtwKW3pIWDz7+bYPy3EwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVZQzczWUszQXBiZWtoWVBQdjV0Z19MY1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NTU4YmMtN2QzYS00ZjZmLWI3M2Et
NjJhMzU2MmM3MmJhLzEvRTVZQzczWUszQXBiZWtoWVBQdjV0Z19MY1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82NTU4YmMtN2QzYS00ZjZmLWI3M2EtNjJhMzU2MmM3MmJh
LzEvRTVZQzczWUszQXBiZWtoWVBQdjV0Z19MY1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlQOBxQ0
4tHyMMASkgTuY3Y7QYu+fzUSVga4v1lTAR46PtxlY01VmGkZudq+x04YoQBRJxc2
BePGRBxhlSJIa2GBQtbCMxaO2lPwcdQA4eMKerrLhSem38jKmrF4dftFj7QTWBuq
S4Ah34LjEWMt7RZTbaby4VjGjYzXldW+EREaU9xcHHyMqk44NMum5ye/rAiwOiN8
2alr0kyxAof9NywLxConYGnLhanIKrtlre7iJZTrpyBNcOK8+zq8QwxHym9T+msX
HAU2REkHB2IkpbtJTmLgG2fOlByRf+6YOM4XbRsh0LhOkl1bmqmPwPWZqDagESbs
qkMdnnUzBIuxZA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:42 2026 by rpki-client