Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
File:                     5wVXsySVkhfZJZvs0aBUm2_6n2U.mft (raw, json)
Hash identifier:          cBfGBNBkEPxag0fP+7hRvEYXHjavo63lH1c6rHVvN30=
Subject key identifier:   0E:45:27:2F:FC:F0:E9:5B:11:D1:49:02:3A:88:E3:E3:DE:64:15:3E
Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
Certificate issuer:       /CN=e70557b324959217d9259becd1a0549b6ffa9f65
Certificate serial:       019FA93DB53DA7E79CE961EF86D2151C2F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
Manifest number:          0732
Signing time:             Tue 28 Jul 2026 15:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:20 +0000
Files and hashes:         1: 5wVXsySVkhfZJZvs0aBUm2_6n2U.crl (hash: 03cNWqaCkcpHouhjAuaF8cuZVdXij+1DOIBeDhLuj/Q=)
                          2: 6Yzr3OVTJb9VB8KOsOxhQRp4BfY.roa (hash: 1ZZncd6nFuezEkjQjpjvgnWBLsAhF4uDMkbMpIZAlJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:b5:3d:a7:e7:9c:e9:61:ef:86:d2:15:1c:2f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65
        Validity
            Not Before: Jul 28 15:00:20 2026 GMT
            Not After : Jul 29 15:00:20 2026 GMT
        Subject: CN=0e45272ffcf0e95b11d149023a88e3e3de64153e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:83:ae:f4:cc:c0:51:8f:6a:ae:77:46:92:
                    b5:7c:54:be:0c:1d:aa:6f:2d:78:6e:2f:df:1c:88:
                    c0:af:14:20:ea:2b:83:2a:65:e2:88:fb:d1:5e:51:
                    4c:d3:e6:4f:ca:0e:36:73:3e:30:58:4b:86:66:d3:
                    2e:a9:4f:b3:ef:33:60:29:11:cf:ee:ef:8b:db:e6:
                    d1:da:3f:ed:22:09:94:03:00:56:6d:6b:fc:b6:39:
                    5e:ba:c4:9d:f0:cf:ff:f6:6f:93:82:f6:b5:1c:02:
                    99:08:ab:95:a5:3c:14:a7:e2:b2:ed:71:e1:45:21:
                    df:ca:35:86:6c:2a:cd:78:de:04:76:91:cf:c9:6c:
                    cb:bc:7d:2d:f1:34:38:24:7c:cd:b7:5f:bd:ed:09:
                    0c:c5:18:cb:d9:e5:70:be:14:c7:7f:2a:87:ea:8e:
                    63:1b:69:0e:53:a7:c7:c6:b1:69:47:36:87:80:b7:
                    15:ff:f3:cd:a3:60:01:5c:b0:14:5d:17:b8:e4:ff:
                    83:4b:ae:ec:b1:5d:e9:45:85:fc:72:a8:5a:3b:44:
                    9d:1e:8a:24:36:4e:81:1c:be:3b:f7:94:8c:ae:14:
                    2f:c3:ce:f1:7e:88:77:eb:3b:dd:9a:c7:2d:19:3b:
                    96:b9:02:d1:d1:54:56:2f:cc:6e:9f:29:c2:9f:c6:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:45:27:2F:FC:F0:E9:5B:11:D1:49:02:3A:88:E3:E3:DE:64:15:3E
            X509v3 Authority Key Identifier:
                keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:9a:8f:99:13:be:65:08:57:ea:a1:dc:6e:95:9a:54:ac:
         39:6f:a3:6f:37:dd:d0:8b:a0:01:73:a7:5a:21:58:d8:f2:b6:
         73:a0:b3:07:e0:ed:62:bf:d5:17:6e:7c:d0:2a:8f:1f:68:6f:
         46:11:43:bf:bd:40:b5:98:29:e0:d0:47:6b:9f:80:77:20:ff:
         35:59:71:4e:81:cf:4f:6e:2a:89:0a:23:86:25:3e:cd:41:a7:
         d3:09:b1:e1:ca:fc:3d:ae:3d:19:41:f2:08:b7:88:e8:85:3a:
         70:69:14:98:ba:4b:47:54:4e:b3:23:41:6c:bc:0f:42:7f:7e:
         b7:4e:dc:ea:1c:23:43:1a:56:f7:0e:1b:cc:16:bb:9e:ad:5c:
         99:ad:91:6f:43:33:1a:bc:1d:f9:4b:c0:15:56:f0:53:0e:79:
         3e:22:90:79:97:f4:d5:e6:60:40:3f:20:6c:98:19:45:ad:b8:
         3f:e8:1a:35:c8:cf:a7:e7:57:71:90:76:61:57:08:2d:76:be:
         f6:09:84:5b:36:72:1b:84:19:43:cf:43:c1:6e:c5:f0:12:58:
         f0:b3:ce:e2:84:46:d2:74:39:05:2b:67:de:ee:cb:a6:6a:16:
         3d:8c:a8:ab:48:40:ca:ad:50:cd:f9:16:7c:bd:a5:c2:65:8e:
         1a:49:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:14 2026 by rpki-client