Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
File:                     5bWNjuIxueK-BC3fcm4jugopQMQ.mft (raw, json)
Hash identifier:          tM5AuIAovlVePRIrAHW+DgK98IF5YTgb9v6yRgbCI3o=
Subject key identifier:   A5:C3:54:9A:AC:CD:C0:1F:40:5B:AC:27:C4:2E:F0:23:33:8A:08:2A
Authority key identifier: E5:B5:8D:8E:E2:31:B9:E2:BE:04:2D:DF:72:6E:23:BA:0A:29:40:C4
Certificate issuer:       /CN=e5b58d8ee231b9e2be042ddf726e23ba0a2940c4
Certificate serial:       019FAC7723DCE32F796A4C5528FCD696B31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:56 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:56 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:56 +0000
Files and hashes:         1: 5bWNjuIxueK-BC3fcm4jugopQMQ.crl (hash: Quym+lmliipZ3zA6hilf2qSNa8cNQqiKlN8Ox6OQGCw=)
                          2: gVT7WHWOpKoeuWf1YpGh6GktCwk.roa (hash: skIYaxJD3wVcOeWH+NsicqBKZ2I8NxbZ8WrxWRzxFmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:23:dc:e3:2f:79:6a:4c:55:28:fc:d6:96:b3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b58d8ee231b9e2be042ddf726e23ba0a2940c4
        Validity
            Not Before: Jul 29 06:01:56 2026 GMT
            Not After : Jul 30 06:01:56 2026 GMT
        Subject: CN=a5c3549aaccdc01f405bac27c42ef023338a082a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:8b:50:93:0f:d6:7c:20:61:30:5c:40:fb:
                    d3:dc:e0:3a:01:23:52:c1:d7:c3:ea:6a:6f:a9:68:
                    40:4b:65:48:11:39:38:89:e2:b7:c3:81:66:55:a3:
                    2b:30:c5:69:6a:3b:33:be:96:84:b9:2f:00:6a:68:
                    19:ec:93:af:1d:ad:c5:bc:b4:61:21:d1:c2:95:09:
                    53:19:39:85:0b:df:ee:23:de:62:34:1a:65:56:9f:
                    5a:55:c1:1a:47:80:16:e7:f2:a6:95:c1:c8:38:b0:
                    86:1d:3d:b9:e3:53:37:86:1f:5d:a1:57:38:f0:83:
                    a0:73:ab:90:bd:ba:4c:9c:81:88:84:07:9d:c7:27:
                    06:39:ca:5b:e6:41:eb:ac:55:e9:e0:18:d5:f4:4b:
                    d3:e0:9b:0f:f0:6f:8f:fa:43:01:c5:75:aa:69:f1:
                    12:8f:d6:1c:d9:df:b0:f5:5c:1f:1a:c1:29:4d:7b:
                    e4:bf:9b:e6:4c:f1:2c:fb:d1:0e:c5:e1:a0:13:6c:
                    ff:b3:dc:94:fc:66:5b:14:0d:2f:f3:b6:75:e6:df:
                    18:96:d1:8c:b0:a7:d3:f5:20:e8:46:52:67:bb:80:
                    14:f3:c8:2f:6c:12:5c:dd:25:d8:2a:6d:28:07:ea:
                    2c:90:6b:57:4c:c6:9d:a3:79:41:fe:89:b5:b6:82:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:54:9A:AC:CD:C0:1F:40:5B:AC:27:C4:2E:F0:23:33:8A:08:2A
            X509v3 Authority Key Identifier:
                keyid:E5:B5:8D:8E:E2:31:B9:E2:BE:04:2D:DF:72:6E:23:BA:0A:29:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d6:79:82:4f:fe:45:f3:3c:1f:53:af:c0:61:d2:27:b6:c0:
         de:c6:61:b1:00:29:98:68:f8:17:16:c7:5b:44:f4:f9:5f:e1:
         28:d9:b4:ec:e2:76:a3:64:58:0a:78:29:26:4f:0d:2c:ab:8a:
         c4:52:98:b2:b8:5f:5e:b5:98:e5:9b:fb:a4:d9:de:db:30:c7:
         19:54:38:a2:e2:2a:aa:6d:f0:30:61:69:3b:6e:a4:34:e4:e1:
         22:45:c4:a6:6a:87:a5:ae:c8:c1:cb:1e:f2:47:e7:46:bf:a6:
         99:f0:e1:40:00:97:a3:7c:d3:0f:5a:c5:38:76:e8:05:5c:74:
         60:2b:9b:8c:37:be:5f:99:e8:5d:31:d9:d4:58:65:f0:6e:86:
         36:19:6d:14:4e:1b:fb:eb:31:db:f9:f3:94:bb:55:4c:d9:aa:
         9d:92:a2:48:7e:bd:49:37:77:de:4b:7e:1f:08:bb:9b:09:ab:
         dd:2c:c7:19:bc:d6:a4:1d:56:d0:dc:7c:77:db:29:39:b5:c5:
         27:8f:e4:1c:1f:6b:c5:ae:26:d8:ce:fa:fd:c5:c3:ed:f7:b1:
         b3:97:7c:0c:28:d5:54:16:4c:64:3b:40:c6:4c:55:ce:09:44:
         a0:8b:26:d8:a5:57:68:5b:63:71:5b:80:f0:06:1d:9d:40:58:
         12:5c:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:31 2026 by rpki-client