Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File:                     5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier:          2HfKDiZcX7ktE5Nz91hjTAwgmJ5/Ydcr3z+nBUffWGc=
Subject key identifier:   79:00:F0:6C:5B:F9:93:1F:77:A8:F1:F5:67:60:33:98:C3:EA:3B:42
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer:       /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial:       019EBFC7F7F5201FC6D8823A21F00DDEFF77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number:          096D
Signing time:             Sat 13 Jun 2026 07:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:13 +0000
Files and hashes:         1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: F9iYKbpgzCM13iNZugf9nw+Cw2v8tj3KMDoM1PZ1ogw=)
                          2: 7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa (hash: NOJagwW5QOv6tMhfF2OqRIEJAaU7K3GfJCIh+Pm2aDU=)
                          3: 8AM52ao9n7ZIIGEzs-8YgbfhwPQ.roa (hash: lYKzKODJEnnDJ+KgMuq1pi/8YZEFtPtdvl7coiYrhQE=)
                          4: ABvW-1VqbSDcf540tHClkzOyb9g.roa (hash: tCUTk3vplCMwsVpz24IlWs8R7PpmKQHPhX6E3iUJitU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c7:f7:f5:20:1f:c6:d8:82:3a:21:f0:0d:de:ff:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
        Validity
            Not Before: Jun 13 07:00:13 2026 GMT
            Not After : Jun 14 07:00:13 2026 GMT
        Subject: CN=7900f06c5bf9931f77a8f1f567603398c3ea3b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:ea:d1:d6:bb:6b:bf:04:96:e3:2f:34:c0:
                    c3:56:e4:5a:c3:ca:60:7a:00:c8:64:7f:d3:16:4f:
                    01:9e:90:e2:09:12:69:35:24:b8:1b:b2:97:31:56:
                    f1:01:f0:b8:ac:f9:4b:72:c3:c1:74:dc:a6:77:7f:
                    18:bd:29:99:d6:00:f4:ff:0a:b6:2d:92:c6:d0:d0:
                    1e:dd:50:93:d6:a7:61:e6:e6:55:e0:88:88:45:42:
                    13:db:c2:bf:5a:ea:43:ca:7e:72:a5:35:c9:34:ea:
                    1b:c6:16:53:1a:3f:6b:3d:fe:f5:82:83:db:43:6b:
                    22:38:43:2e:27:4d:04:07:0b:9e:66:fa:55:a2:fa:
                    55:ec:e3:cb:99:e7:af:5a:79:bf:c3:49:58:13:99:
                    9f:88:2e:bc:a5:a0:d4:d8:4d:b6:a8:5e:4e:6c:b7:
                    fa:22:11:ba:8a:c9:1f:a7:77:07:10:c2:51:84:03:
                    75:a4:f3:7d:cd:0b:c4:84:41:15:ce:70:6d:10:3a:
                    a6:ad:d6:aa:ff:f4:05:90:5d:1e:01:5c:22:a8:33:
                    99:16:51:db:7f:e1:27:85:ad:f7:31:4a:92:66:88:
                    7b:63:32:c5:44:96:d6:c3:88:b2:f9:b9:c8:79:a4:
                    01:23:14:c4:43:77:5c:67:cd:34:58:b8:72:91:e7:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:00:F0:6C:5B:F9:93:1F:77:A8:F1:F5:67:60:33:98:C3:EA:3B:42
            X509v3 Authority Key Identifier:
                keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:a3:69:aa:85:47:6c:0e:f2:d4:3a:a6:cb:23:50:84:ee:
         f0:01:82:8e:e4:4d:71:c0:eb:32:69:ef:f2:cc:23:06:d2:ea:
         0c:23:bf:26:53:09:54:99:6a:4a:0f:f9:ea:d8:f5:ad:22:9f:
         26:aa:69:7e:cc:8e:e4:da:d6:36:3f:46:08:62:3b:2d:d1:01:
         41:2c:e2:c9:94:a1:ff:d9:aa:bb:39:be:71:85:2f:f4:82:0c:
         f1:38:78:dc:82:f6:3a:ca:e2:67:81:70:19:c2:e3:fd:4f:aa:
         fa:b7:36:f9:c0:8f:01:1e:08:8a:5c:03:3e:a9:4b:78:35:d3:
         69:1c:62:19:8b:a9:bb:89:e4:82:cc:30:8e:d6:b7:ee:c0:03:
         b0:4b:81:48:66:80:bf:c9:31:f1:a4:4d:d0:eb:53:77:fe:9f:
         79:18:f3:f6:67:ce:57:b4:d2:8d:1f:07:7f:6e:bf:82:32:7f:
         88:6f:6e:c8:15:38:32:e6:d5:8b:cf:d3:d1:d1:cc:75:dd:cc:
         7e:50:dc:c2:fd:be:27:07:e0:c6:1d:5b:b1:d6:53:a2:67:de:
         4e:3f:23:a1:0f:a2:4e:ea:78:5c:e7:41:88:dd:6d:64:df:1e:
         72:09:60:94:c5:f4:1e:31:b3:4e:57:44:ae:da:12:b9:1e:e9:
         d7:32:e1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:52 2026 by rpki-client