Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
File:                     5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json)
Hash identifier:          Myx9PSCZAQQN1K8qRZPuCYe1vZWNCQzDO7SfZGOcRac=
Subject key identifier:   7F:5E:99:21:F8:57:64:9F:CB:99:0E:AE:99:E0:FC:F8:60:47:51:8B
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Certificate issuer:       /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial:       019FA750031A7C6DEFB587C2142B8DDE9C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
Manifest number:          026C
Signing time:             Tue 28 Jul 2026 06:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 06:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 06:01:06 +0000
Files and hashes:         1: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: zuVMtTo+vXbVJiywCDQfe1azycGpRR4n79e6OWbK274=)
                          2: WfbgqzFvbp8TCWxSG_sNKuLnLRk.roa (hash: jfHBs52kM4vMm6kxJTz0eoaLnYZ9f8a9vM4u4mqutm0=)
                          3: aB79fGj4vXTZE5XL5eriNSFisHA.asa (hash: 1qM7sm32yNwlqaxmCx8pUKuLeMMUaDuzmS9PF1Xa8zE=)
                          4: bABKElQpuUR5qvAEktEyWURQ4XE.roa (hash: xB7baZkS+NXVYrZMh8EL0mNmqqM8iQ6l8pfIwSwvFAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:50:03:1a:7c:6d:ef:b5:87:c2:14:2b:8d:de:9c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
        Validity
            Not Before: Jul 28 06:01:06 2026 GMT
            Not After : Jul 29 06:01:06 2026 GMT
        Subject: CN=7f5e9921f857649fcb990eae99e0fcf86047518b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:0c:e7:ff:7e:eb:05:a6:32:e5:16:c9:c5:
                    6b:4a:a0:65:0a:67:d8:38:e2:b0:a7:b9:b2:55:54:
                    fb:cb:a1:8a:30:34:31:1a:d2:40:f9:88:1f:90:d2:
                    f8:f8:54:53:49:41:d8:4d:67:3a:70:11:d7:54:10:
                    9e:4e:af:78:88:5a:72:8e:0b:95:2e:41:74:93:01:
                    31:55:23:53:a9:52:c9:de:4e:f4:03:bf:73:68:df:
                    61:b3:9f:0b:b2:fc:e9:32:e1:1a:e0:c5:de:06:6a:
                    60:0e:70:9e:1c:8b:9d:9e:79:e9:47:22:79:02:fd:
                    b5:d4:34:ae:80:e3:87:fa:6d:0a:d6:45:7d:16:36:
                    e8:f9:f0:15:6d:07:a6:b6:4d:33:49:bb:5c:c7:c2:
                    ce:94:f4:8c:d4:31:22:e0:ae:49:3a:08:c6:45:fe:
                    26:85:d4:07:c0:1a:66:ef:0e:27:bc:68:02:51:e4:
                    23:f1:43:b9:ff:05:99:3b:3a:ca:47:04:ea:f6:78:
                    40:8c:5a:5d:bc:a0:27:12:73:e7:c9:05:85:1b:03:
                    84:fc:2b:13:ce:8b:fe:a6:47:7b:25:44:7a:35:7d:
                    26:2d:f7:a7:8f:1b:5e:32:f1:b4:30:fc:3f:38:22:
                    9a:4f:f8:61:c3:79:68:2e:fd:4c:9e:af:c6:e0:74:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5E:99:21:F8:57:64:9F:CB:99:0E:AE:99:E0:FC:F8:60:47:51:8B
            X509v3 Authority Key Identifier:
                keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:fc:6f:17:4f:80:fc:71:fc:a8:6f:bc:3a:d1:0f:08:b2:
         0f:a7:f3:3b:a6:e7:70:55:2a:f4:7f:85:1f:42:03:47:46:ac:
         4d:8e:a5:15:e9:0c:1e:38:30:8b:a5:cb:8f:c0:71:35:44:49:
         51:86:12:dc:92:1d:c0:fd:df:4f:e4:e3:d8:79:19:93:cc:72:
         94:34:30:a5:ce:df:7f:d2:5a:93:0a:45:9f:77:25:fa:20:73:
         50:33:03:8d:8c:dc:bc:35:95:2c:17:0d:86:01:49:80:a1:56:
         37:ad:de:2b:d6:9f:09:6e:ca:a3:de:b3:3d:8d:c8:7e:c1:e5:
         68:65:d3:8e:37:e3:7f:30:67:55:06:8d:11:3d:fe:1a:1c:80:
         a9:3a:5a:22:01:f7:5e:77:80:5a:df:f5:ae:f1:e2:8c:09:88:
         23:86:8a:39:82:6f:b6:d5:15:72:79:35:c1:6b:9a:40:2b:53:
         ad:55:df:d0:b9:5c:3a:5c:db:20:24:2c:2d:95:f8:5b:8f:28:
         81:54:db:f6:47:ed:37:4d:71:ea:01:82:91:07:c2:6f:b3:b5:
         bc:82:f8:ad:f3:b8:46:46:ee:70:1f:47:8e:0b:e4:f1:d8:79:
         b8:e7:50:78:22:36:cc:ee:09:92:89:1f:52:aa:6a:c7:a0:27:
         9f:c9:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:21 2026 by rpki-client