Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File:                     5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier:          3h51mrICYPY/FCyEPAQGfYMwn+PomU27kf1Ewi87Zeg=
Subject key identifier:   EA:36:5D:72:B0:4C:4D:AE:35:3A:F8:A5:D8:F3:1D:FC:13:10:98:1C
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer:       /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial:       019FAAF5A33345028AF3A911440430EB0D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 23:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:52 +0000
Files and hashes:         1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: iGhnbIAxcuh64FmWMe09K8NJSjD1jxPz86uTRRxkFwQ=)
                          2: 8n1cP-EeM_0aPON8tQRs5t94Tcw.roa (hash: oWMSKnzC7MzhiIiFzW+fvutsE0+XNV6RpmpSUYLiCP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:a3:33:45:02:8a:f3:a9:11:44:04:30:eb:0d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
        Validity
            Not Before: Jul 28 23:00:52 2026 GMT
            Not After : Jul 29 23:00:52 2026 GMT
        Subject: CN=ea365d72b04c4dae353af8a5d8f31dfc1310981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:62:c3:21:c3:c6:a2:f3:11:4b:3d:b9:a0:
                    5c:68:8e:fe:e0:a7:29:4e:79:b9:f1:ba:2e:48:cb:
                    73:6f:50:33:b7:5a:5e:f8:fa:ff:bc:94:26:a5:25:
                    2f:2b:4f:84:f3:21:08:fb:c7:fa:5a:45:29:28:02:
                    6c:c4:f2:3c:89:e4:5d:93:f9:9e:08:0f:62:49:21:
                    d0:71:bf:0e:37:85:e9:f5:ec:47:14:6a:c0:55:b3:
                    f3:d8:26:26:cb:af:16:a1:4b:42:74:87:1c:e8:43:
                    7c:4e:ed:fd:5f:61:ca:b5:93:1e:e1:28:85:bc:e0:
                    57:7d:39:d6:5f:11:21:31:9a:b0:c2:d7:4c:a3:a5:
                    53:d4:02:d8:5a:3b:f9:d8:ae:fe:a0:8f:d5:ae:dd:
                    da:3b:66:0b:6e:fa:5e:06:de:e6:dd:ed:48:5b:59:
                    e3:24:7f:02:5c:fe:e7:12:fa:89:a5:77:8e:33:5a:
                    3a:94:0e:f0:ba:a6:8d:01:63:a7:14:b3:c0:09:ee:
                    98:80:5e:4c:95:25:15:df:c4:63:8e:91:5c:16:c8:
                    18:0b:a2:b7:dc:06:6f:e2:51:9f:be:3f:ce:cc:13:
                    1d:13:72:ac:3b:f2:54:06:67:b8:af:9b:d2:da:f7:
                    fb:f0:96:3f:a6:a7:6b:f2:f4:04:68:3e:55:ab:be:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:36:5D:72:B0:4C:4D:AE:35:3A:F8:A5:D8:F3:1D:FC:13:10:98:1C
            X509v3 Authority Key Identifier:
                keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:40:fb:9e:b4:f1:68:68:66:da:50:81:03:f8:c8:6a:31:59:
         86:f5:48:cb:48:cd:fe:35:d0:fd:f9:fd:2f:d3:9b:39:8f:85:
         32:8d:29:02:1d:97:05:b4:bd:9e:c4:fb:38:be:a4:f5:64:cd:
         da:af:5f:83:7b:e7:09:14:a9:48:c0:33:6f:83:df:c3:5b:ae:
         27:57:80:a4:1f:c9:24:7b:ef:00:35:be:c9:7f:fb:f8:62:8e:
         91:da:f7:7a:be:c2:12:13:16:76:91:55:a5:50:1e:09:b6:51:
         d2:68:68:68:40:25:a2:39:94:46:72:d1:26:09:63:70:4d:a6:
         3c:ad:46:ae:86:07:39:e4:6a:45:d4:b7:3e:70:2c:89:5f:4f:
         0a:f1:e7:3c:f3:8d:56:e0:3e:11:2f:e8:a9:2f:77:25:3b:4e:
         a3:70:a9:5c:7a:26:3c:6a:d0:4c:8d:c6:58:54:89:4e:ac:bc:
         3b:25:14:42:43:54:03:ce:68:6e:82:c4:d4:9c:34:5a:e3:5c:
         1a:d9:d5:c8:23:ca:75:1a:3a:c4:56:3d:17:10:68:db:cc:dd:
         46:d2:e0:03:b5:97:d9:69:28:25:be:63:42:85:9e:4b:bb:cf:
         11:bf:d3:c3:71:85:9f:5b:df:fd:fd:b5:d9:95:34:43:63:e6:
         db:f2:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:23 2026 by rpki-client