Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
File:                     E--253AYyTVaU4hW1OueUGl19TU.mft (raw, json)
Hash identifier:          iiR543IIvv/QRstrV5yet8TIpCa0PYQmPHlR1nWae7Q=
Subject key identifier:   C5:93:81:FF:A5:01:F4:24:97:34:BD:2D:56:E6:7C:DD:DF:B9:27:4B
Authority key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
Certificate issuer:       /CN=13efb6e77018c9355a538856d4eb9e506975f535
Certificate serial:       019FABD0F35BAE33D09B0295A253ED9386AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
Manifest number:          028C
Signing time:             Wed 29 Jul 2026 03:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:25 +0000
Files and hashes:         1: E--253AYyTVaU4hW1OueUGl19TU.crl (hash: 9Q6GOyk+cOrMdQDqG8GB5apom6TT+qmfvTzB55zWuGE=)
                          2: pn0eecPtI3ydGJyzmDixGdijU0M.roa (hash: hsAKDf191EtjscgSuEpFCHm/Jr/4jq8uJLk58v0knFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:f3:5b:ae:33:d0:9b:02:95:a2:53:ed:93:86:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13efb6e77018c9355a538856d4eb9e506975f535
        Validity
            Not Before: Jul 29 03:00:25 2026 GMT
            Not After : Jul 30 03:00:25 2026 GMT
        Subject: CN=c59381ffa501f4249734bd2d56e67cdddfb9274b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:72:2f:7f:cc:bc:c1:05:44:9d:35:ae:7b:
                    b8:b5:a7:18:9b:ea:c1:06:02:9c:a1:3d:60:ea:de:
                    19:1e:ba:c1:43:5d:83:41:dd:e1:75:d2:b3:7f:27:
                    ea:17:fe:31:9c:3d:af:c5:78:31:28:03:1e:65:3a:
                    e8:40:98:07:b0:16:e9:1e:d5:c3:b5:7c:89:34:2a:
                    3d:17:dd:06:b0:65:a4:5d:30:6a:f6:c5:26:ec:7a:
                    66:eb:f1:66:c2:0c:72:9d:eb:2e:5e:12:01:54:dd:
                    1c:fe:a5:2a:57:5c:bd:b9:38:52:3d:ec:a8:e0:42:
                    f8:a2:93:14:1b:e1:a5:35:e6:eb:d2:2e:78:94:98:
                    78:dd:3a:43:43:b7:27:76:49:31:12:bf:c4:12:13:
                    7d:68:92:79:18:96:d9:c7:13:f8:93:79:e7:63:be:
                    e6:ca:68:c7:13:bd:17:02:64:d9:11:af:55:5d:bf:
                    74:c9:d4:d5:36:cd:67:d9:98:4c:c7:6c:24:1c:8b:
                    d1:2b:8d:b5:1f:f6:e5:0b:6e:85:82:03:07:00:e9:
                    c6:e3:a9:60:a6:2e:4c:af:0e:41:f1:68:22:e7:48:
                    f1:79:28:66:01:b2:ef:28:0e:b4:2a:8c:f6:d3:c1:
                    c3:b9:28:81:b5:5b:d5:58:c6:9e:c0:6b:45:b6:70:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:93:81:FF:A5:01:F4:24:97:34:BD:2D:56:E6:7C:DD:DF:B9:27:4B
            X509v3 Authority Key Identifier:
                keyid:13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2c:93:40:7a:3a:02:82:3b:c7:5d:50:53:16:fe:f0:97:ae:
         60:d5:11:46:92:9d:52:5f:d8:4a:5b:1b:9f:5c:1c:c5:ec:61:
         58:38:d6:d6:6d:d0:be:66:ee:ac:8f:db:46:3c:39:de:39:cf:
         fe:88:2c:d2:89:2d:75:58:da:5b:05:15:2e:ea:22:fa:32:7b:
         b7:ba:16:ac:b3:b9:5a:b4:f8:c5:e2:22:21:0e:96:e4:d0:60:
         7f:87:ab:79:e7:0a:61:5c:17:b0:5b:d7:57:e3:87:db:15:96:
         2e:a8:b3:4c:8f:cf:41:e6:2c:72:b4:53:28:a0:a3:88:93:a3:
         5f:76:3b:7a:b1:a5:0e:91:e2:06:4d:20:21:9c:7f:a9:d9:6d:
         90:ba:ab:d0:be:32:37:b9:c2:58:c2:9b:4e:3c:5e:f3:57:ab:
         cd:dc:f3:ea:c1:a2:68:01:09:66:40:24:a2:9a:be:8d:23:90:
         a6:ee:a8:e5:72:5d:c0:1a:49:76:d7:30:eb:09:b8:21:24:58:
         29:66:70:6f:48:ea:d7:b2:67:fa:f3:ed:76:e4:e7:ee:d4:65:
         60:f5:46:8d:1b:27:8c:7b:54:ec:8e:89:68:5a:a8:00:32:67:
         10:3c:fc:44:7a:8d:0c:9d:53:70:7f:f3:49:99:f6:6a:50:45:
         ee:08:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:10 2026 by rpki-client