Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          zCUHaMonqgzPxMAdxelr+ChC7zMPip50oWyns0Tb6Bw=
Subject key identifier:   35:91:82:FF:26:F8:77:EF:85:66:37:66:5A:45:FE:D1:F2:3E:57:00
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       019FA975B35755EF3167DD8F6572DA358CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          1420
Signing time:             Tue 28 Jul 2026 16:01:30 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:30 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:30 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: Qdvh+zYpoMKkQGYx2wj6ZebwZtC+OoXXsIAe3i22dQw=)
                          2: NaC2EXhqguVissfFb8R9GK-pfWk.roa (hash: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:b3:57:55:ef:31:67:dd:8f:65:72:da:35:8c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: Jul 28 16:01:30 2026 GMT
            Not After : Jul 29 16:01:30 2026 GMT
        Subject: CN=359182ff26f877ef856637665a45fed1f23e5700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:d7:52:c5:01:65:66:ba:63:f0:a9:a0:c7:
                    d2:ce:11:c8:35:f9:5d:b0:b8:bb:ae:b3:f1:ea:55:
                    41:2a:69:aa:7b:54:06:52:06:90:6c:09:73:22:9a:
                    27:a8:d8:da:4a:e2:a1:ee:06:d7:c6:1c:46:93:64:
                    a5:9c:32:36:e6:fd:7d:91:69:69:2d:d3:91:43:00:
                    4d:1d:ec:ab:81:59:6e:fa:12:16:dd:d3:cb:7e:5b:
                    9f:4f:cd:c8:2e:35:05:4f:10:03:01:31:57:dc:d0:
                    69:f6:5a:c4:18:f6:77:1c:9f:d0:f1:0d:f4:3b:6b:
                    01:0a:28:a8:c9:a3:e7:07:12:1b:88:b3:26:e7:5d:
                    e8:38:54:de:e7:46:77:b4:ea:72:46:90:d6:07:7b:
                    3b:61:68:3a:e7:2f:dd:38:c5:ec:cf:05:48:b3:c6:
                    1f:31:e4:26:c6:34:f1:61:ed:24:79:7d:58:0b:d4:
                    9e:7c:97:9c:f8:c0:c2:e1:4e:df:a1:21:15:e5:f0:
                    bb:b8:da:3c:cd:8c:1a:23:26:8a:6e:a0:d3:fc:b8:
                    94:e6:e5:ec:23:60:1e:8c:9b:1d:5e:ba:3a:be:0c:
                    3a:ca:a3:87:a9:fc:07:45:51:86:52:2c:cf:74:6e:
                    58:33:a6:38:d1:a2:8d:4b:64:04:e7:eb:d3:6d:93:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:91:82:FF:26:F8:77:EF:85:66:37:66:5A:45:FE:D1:F2:3E:57:00
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e6:41:4b:15:5b:89:12:bb:d6:bb:9a:ec:bc:4d:d6:5e:d7:
         4c:6b:f1:87:25:36:a3:a5:db:ed:29:83:13:78:49:2d:e8:e1:
         6b:f2:5d:e4:fc:92:39:9b:cf:78:39:b5:b8:cf:43:5c:c2:23:
         69:62:78:6a:c0:d7:1a:b8:35:36:37:93:bf:f0:b3:d7:29:ee:
         b8:34:31:29:20:34:a5:7b:f4:15:a2:5a:2c:3f:7e:86:cc:0c:
         98:f1:96:05:4a:fc:97:e5:64:04:ae:88:1a:49:8c:c1:fc:5a:
         88:be:9f:91:f7:02:65:72:16:83:04:d4:0f:be:a3:5d:61:a5:
         d6:9d:3e:08:cf:1e:e3:79:69:67:47:cf:b7:b1:d6:f5:bf:9e:
         0e:0d:94:6c:2b:8c:d0:33:be:d6:be:55:aa:89:16:c8:99:d5:
         33:71:74:0d:ac:73:65:75:5e:53:a3:90:b3:5a:6b:d8:6a:94:
         8b:6e:4f:06:43:da:83:cc:a9:61:66:21:d8:ae:09:25:14:a5:
         5f:29:d8:79:ce:d1:fb:2b:94:0f:3a:c3:b3:98:ff:4f:24:71:
         79:5a:de:e5:34:8c:c7:ad:48:10:69:dc:97:8a:3a:e6:1a:2d:
         a2:93:af:f3:ff:08:d1:72:4d:86:d2:6a:94:3f:ff:e4:be:73:
         85:a9:6c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdbNXVe8xZ92PZXLaNYyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZmZWU3ZTc2MmY5YTA2ZmUyZjQ3ZTdhMWU1MmQ5ZWJh
N2ZhZmQwHhcNMjYwNzI4MTYwMTMwWhcNMjYwNzI5MTYwMTMwWjAzMTEwLwYDVQQD
EygzNTkxODJmZjI2Zjg3N2VmODU2NjM3NjY1YTQ1ZmVkMWYyM2U1NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxTXUsUBZWa6Y/CpoMfSzhHINfld
sLi7rrPx6lVBKmmqe1QGUgaQbAlzIponqNjaSuKh7gbXxhxGk2SlnDI25v19kWlp
LdORQwBNHeyrgVlu+hIW3dPLflufT83ILjUFTxADATFX3NBp9lrEGPZ3HJ/Q8Q30
O2sBCiioyaPnBxIbiLMm513oOFTe50Z3tOpyRpDWB3s7YWg65y/dOMXszwVIs8Yf
MeQmxjTxYe0keX1YC9SefJec+MDC4U7foSEV5fC7uNo8zYwaIyaKbqDT/LiU5uXs
I2AejJsdXro6vgw6yqOHqfwHRVGGUizPdG5YM6Y40aKNS2QE5+vTbZMGywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWRgv8m+HfvhWY3ZlpF/tHyPlcAMB8GA1UdIwQY
MBaAFNNP/ufnYvmgb+L0fnoeUtnrp/r9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzkt
ODdlMWYzODY2MzYyLzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzktODdlMWYzODY2MzYy
LzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+ZBSxVb
iRK71rua7LxN1l7XTGvxhyU2o6Xb7SmDE3hJLejha/Jd5PySOZvPeDm1uM9DXMIj
aWJ4asDXGrg1NjeTv/Cz1ynuuDQxKSA0pXv0FaJaLD9+hswMmPGWBUr8l+VkBK6I
GkmMwfxaiL6fkfcCZXIWgwTUD76jXWGl1p0+CM8e43lpZ0fPt7HW9b+eDg2UbCuM
0DO+1r5VqokWyJnVM3F0DaxzZXVeU6OQs1pr2GqUi25PBkPag8ypYWYh2K4JJRSl
XynYec7R+yuUDzrDs5j/TyRxeVre5TSMx61IEGncl4o65hotopOv8/8I0XJNhtJq
lD//5L5zhalsHQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:30 2026 by rpki-client