Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          96ZgrkuwWUK5oB8CGr7yyNH0Rsb6eOvPmKnGnLhqQ4U=
Subject key identifier:   7B:A6:6F:69:F1:8E:CE:50:27:AE:14:62:D1:EE:A9:2F:CA:FA:E9:5F
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019FA975281153B1CCDAE71EE6437F7F5548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          0BA1
Signing time:             Tue 28 Jul 2026 16:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:55 +0000
Files and hashes:         1: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (hash: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s=)
                          2: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (hash: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk=)
                          3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: E8q6rMrWyRE56z0EPONrGjZfWXDvhteE9LT6znKIiSc=)
                          4: H4QLFR4-VWtTH3wvuaow12NPB4c.roa (hash: bdQlsc3BPSHO6Zn9QaadsNsV4OnEPV5+i5GaKzval08=)
                          5: VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa (hash: ZjsRHcqnbmBi1pKtOmtj/GMa3B6D/+8G+2zRtMncp6A=)
                          6: p3_p0oefeCWIGWl--B6scwMOl68.roa (hash: TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=)
                          7: x1IDat6YDBdzEhpue2RnoEodHRk.roa (hash: GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=)
                          8: zPofNoaI2RS9IpHftjHCFMeYgVg.roa (hash: GrlWnZ81qO00EP6m7P5v1VXEnw8zBrYaQ+SSPFWD5L0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:28:11:53:b1:cc:da:e7:1e:e6:43:7f:7f:55:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Jul 28 16:00:55 2026 GMT
            Not After : Jul 29 16:00:55 2026 GMT
        Subject: CN=7ba66f69f18ece5027ae1462d1eea92fcafae95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:a9:47:20:ce:1f:0f:96:db:8c:38:42:87:
                    7d:89:54:d9:11:b0:7a:a5:d0:9b:c2:3e:f9:20:ff:
                    0a:9a:b5:26:52:c6:85:a1:87:75:29:1b:3f:ae:b6:
                    c9:01:44:0c:6d:1e:85:a7:d4:a0:13:9f:9a:d2:88:
                    52:00:7a:ea:cf:d2:1f:32:f2:de:f4:58:43:60:fa:
                    77:36:2c:5c:97:ed:20:e2:58:8b:aa:2a:db:f9:e9:
                    8a:28:d9:9b:ed:44:86:4b:c1:e0:6b:c8:a0:9a:c9:
                    b7:eb:cf:c2:a5:fa:e0:0b:18:9a:d5:49:db:b7:2c:
                    48:9e:06:24:e3:99:7a:35:24:46:be:a5:87:de:71:
                    bb:e3:9a:a8:67:5c:1d:e0:b2:fa:01:9e:0d:d2:ea:
                    4f:06:72:ab:51:f7:aa:8d:06:99:39:65:fa:b6:2c:
                    99:87:45:b3:c9:85:37:02:33:3b:f8:5a:ad:df:59:
                    a6:4c:60:b4:2f:7d:19:ce:d1:0d:e4:01:c2:c8:b5:
                    68:8f:a9:37:0b:b5:fa:cd:48:97:b0:39:7c:dc:0c:
                    bc:fc:4b:9f:fd:07:18:3a:4d:b0:6a:37:36:f9:eb:
                    f7:51:5d:25:66:a5:78:59:55:a7:2f:d7:cc:09:6f:
                    a3:02:15:c2:60:c8:6b:20:98:cc:95:50:57:a7:d2:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A6:6F:69:F1:8E:CE:50:27:AE:14:62:D1:EE:A9:2F:CA:FA:E9:5F
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:67:12:b6:08:bf:7a:3b:27:e5:f1:cf:ef:0a:76:55:e2:cb:
         da:97:93:70:5d:82:d6:c3:f6:f7:4d:c7:4d:6f:ee:a2:5a:42:
         4f:58:a1:1f:67:ba:71:7b:89:ff:53:46:95:fe:21:bd:7a:d7:
         68:7a:7b:fc:a1:52:17:18:86:00:80:44:17:82:b9:ed:3c:9e:
         4d:9a:ad:d3:0c:60:15:1d:b2:c5:ec:22:f5:66:2b:30:02:37:
         25:34:15:07:8f:bb:42:44:fe:fd:e6:64:f4:fb:2c:26:25:c4:
         c3:48:ca:11:71:b3:e9:bf:05:6e:95:da:7b:b7:5d:b4:1b:61:
         4a:6f:60:e0:4d:65:34:d8:62:2f:76:ce:57:4a:db:52:f6:53:
         01:17:a3:8a:6d:6d:be:63:5b:5c:a8:e6:54:01:f0:7d:52:6c:
         a6:ca:34:20:34:19:cd:b9:46:8e:cd:19:1e:7d:39:b3:bf:b4:
         89:ef:3f:01:bb:e2:72:90:2c:9a:f4:0e:c5:27:8f:39:fd:05:
         73:0e:1a:84:84:90:56:41:e3:45:05:62:86:fc:03:7c:53:00:
         aa:ac:c5:3c:ad:81:64:f7:54:88:e5:98:db:d2:97:53:c2:38:
         69:d2:ea:57:89:62:7b:16:b6:cf:e2:c7:74:9e:34:f5:94:cd:
         af:2a:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:58 2026 by rpki-client