Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File:                     5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier:          8kRDvZFYXQKc5Hk5MkZ7RNm044yfJGH2hOTWwO2KvPI=
Subject key identifier:   8E:5A:75:83:2A:03:A4:27:88:D0:64:25:3E:9E:27:76:6F:DC:64:3E
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer:       /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial:       019FA82AFE890F6BB4922D8C9E35D607A870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number:          1960
Signing time:             Tue 28 Jul 2026 10:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:17 +0000
Files and hashes:         1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: F22WKGL2p3DXh5pFMXtqxvUO1PHSmcqeuZbN+msnHqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2a:fe:89:0f:6b:b4:92:2d:8c:9e:35:d6:07:a8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
        Validity
            Not Before: Jul 28 10:00:17 2026 GMT
            Not After : Jul 29 10:00:17 2026 GMT
        Subject: CN=8e5a75832a03a42788d064253e9e27766fdc643e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:0a:8c:0d:56:0a:b6:8c:73:18:2d:a5:3f:2e:
                    18:c3:1b:cd:53:4e:da:d1:af:7b:f1:91:da:69:2b:
                    f8:d5:24:d1:f7:e3:bf:e9:97:a6:36:64:9f:ae:91:
                    2f:ec:eb:eb:10:90:d7:5c:c0:4a:9d:0c:cb:81:ba:
                    c3:68:ce:29:cd:6c:7b:30:05:92:5b:a2:04:19:23:
                    11:61:50:e3:3b:bd:09:68:66:eb:e6:4b:24:c8:d7:
                    64:ca:9f:dd:05:02:92:58:14:83:ae:d2:db:3d:69:
                    31:da:f9:45:93:a7:f8:22:07:30:f0:c2:9c:b3:b1:
                    3e:49:7e:cc:04:7f:b3:e9:b9:b2:72:fb:55:db:b7:
                    ca:66:43:57:14:a1:da:94:e8:9f:47:71:f2:d2:71:
                    2c:46:cc:ff:4b:a2:c7:95:71:cd:fc:fd:d4:58:97:
                    3b:88:93:ed:88:2c:14:22:0e:de:a8:cd:19:95:0b:
                    76:b7:e7:55:0d:58:d7:92:20:bd:0c:11:b9:c4:aa:
                    29:89:fe:a1:e5:c7:a8:75:7a:71:75:65:7e:65:e1:
                    b4:a8:9c:d7:3d:dd:81:62:3b:ce:bc:9b:4a:49:cb:
                    32:ca:7e:37:dc:74:94:21:fe:aa:8b:cb:4c:73:ac:
                    73:50:db:c8:2f:42:17:7f:5f:7f:ff:cf:b6:5b:4b:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5A:75:83:2A:03:A4:27:88:D0:64:25:3E:9E:27:76:6F:DC:64:3E
            X509v3 Authority Key Identifier:
                keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:4f:7e:e6:bf:24:5d:af:01:46:c6:7c:00:11:a4:26:9d:
         70:9a:4f:41:e9:3e:15:b9:ea:f6:79:d9:12:6d:3e:92:2b:15:
         d7:2c:88:65:52:03:2c:b7:03:03:a5:4d:33:3a:c8:fa:35:c7:
         04:d5:d0:78:70:e9:a3:b7:cb:46:e1:f2:19:b6:b6:95:a3:40:
         d7:87:90:4b:66:ff:00:db:4f:7f:4b:a9:3b:30:93:dc:17:04:
         3d:f8:32:8a:24:da:25:3f:5c:70:01:66:74:64:be:60:ac:b7:
         cd:52:f7:cc:69:c3:67:53:bb:54:e4:65:ad:56:58:1d:b3:01:
         e5:ad:31:63:bc:96:6e:73:d5:39:2d:89:db:03:0a:d7:c0:1b:
         b2:07:5b:8f:76:16:6c:b8:76:b7:34:e4:2e:f7:99:ba:52:bb:
         81:6e:89:1a:a9:71:27:31:67:be:91:5e:54:8d:cc:7a:63:6c:
         68:b1:1f:97:bc:13:0a:e0:5a:15:7c:81:8f:95:e7:4d:c7:75:
         a2:e2:fd:9f:90:1c:2c:e8:4e:14:88:29:27:42:dd:95:80:08:
         bc:ef:75:f9:1d:45:9d:15:f5:10:5e:6a:e2:e2:0c:07:5f:5d:
         a8:f6:49:f9:41:6d:93:60:7f:2f:fe:d6:a3:51:b3:62:38:f6:
         b3:ea:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:48 2026 by rpki-client