Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File:                     5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier:          2eSltg/kEER47IpWjprarEjM7FOqFaDs3cqVplEIYcw=
Subject key identifier:   18:05:DC:89:A6:43:49:1F:5C:DD:3B:E2:3F:45:61:54:61:62:E1:12
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer:       /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial:       019FA8CFCFEC0566B2CDBD996AA38A0CF992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number:          06F0
Signing time:             Tue 28 Jul 2026 13:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:19 +0000
Files and hashes:         1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: cB93pSWLJdkQxiprl1E3tzd7zBVotkhX0UtJbVaFiI0=)
                          2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:cf:ec:05:66:b2:cd:bd:99:6a:a3:8a:0c:f9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
        Validity
            Not Before: Jul 28 13:00:19 2026 GMT
            Not After : Jul 29 13:00:19 2026 GMT
        Subject: CN=1805dc89a643491f5cdd3be23f4561546162e112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:07:3d:35:79:e1:7a:23:86:a7:89:d4:43:
                    69:b8:f5:e8:28:a2:bc:56:b4:47:c5:c0:76:0b:23:
                    0e:0e:7b:bb:f4:20:ed:65:85:af:65:ef:fd:2e:20:
                    f1:47:7c:92:81:21:41:7c:e8:07:86:89:98:6d:ee:
                    60:45:25:36:bf:58:3a:3d:de:5a:d8:a3:e2:4a:b8:
                    4e:ff:15:48:24:d2:f2:5f:c0:cf:4c:11:98:d8:92:
                    0e:a5:5f:0c:e5:50:a9:6a:5c:53:e0:bc:72:b9:50:
                    6a:b8:ff:5c:1f:10:ba:d3:b4:d7:06:60:b4:9d:1e:
                    c3:cd:e8:12:ba:e7:29:39:43:c6:1b:45:d1:bc:15:
                    18:35:80:f5:e8:e7:d8:b9:ae:37:12:33:0a:8c:d7:
                    6e:19:5d:a6:e2:79:7a:0d:8f:54:1f:1d:e7:97:57:
                    8a:be:d9:f8:42:60:a4:db:70:fd:e6:9d:3d:2d:2b:
                    2b:b2:ae:78:bb:fc:d2:9f:9b:76:b4:22:e8:9a:6b:
                    a1:f2:d2:77:38:0d:80:27:1d:c3:0b:14:91:05:98:
                    6f:87:ea:03:2a:67:a1:df:14:76:63:31:f8:11:ff:
                    4c:a2:63:8b:33:92:46:ef:4e:f1:05:ba:31:46:7a:
                    78:b0:4d:38:c5:31:de:31:c6:47:49:87:57:10:f7:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:DC:89:A6:43:49:1F:5C:DD:3B:E2:3F:45:61:54:61:62:E1:12
            X509v3 Authority Key Identifier:
                keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:31:18:ca:8b:c1:e7:3a:39:1e:07:89:ee:ec:fb:69:a1:ee:
         67:a9:3d:5f:a5:d4:36:bf:a7:78:9d:e6:50:39:d9:13:b0:5b:
         04:98:65:6d:8f:51:e1:ad:91:ad:7a:7e:b5:00:ad:ec:9d:c2:
         1e:ac:e1:cc:ab:d1:33:8b:eb:73:cc:43:03:1e:db:28:2c:f4:
         25:29:4f:ae:c6:ac:d3:c1:00:55:cf:2b:d6:f5:e0:ef:04:23:
         b2:52:7a:b4:01:01:50:0e:6c:b2:fd:aa:bd:c8:20:21:ae:84:
         cd:60:59:77:82:5b:d2:5f:3e:16:64:19:95:68:66:46:50:b9:
         2a:1e:cf:4f:4e:3f:23:f8:d7:b3:91:9c:90:66:ee:77:07:06:
         dd:f6:d5:e9:81:e3:8e:c9:0f:f5:77:6b:1a:cb:b7:fe:10:fe:
         07:96:8b:34:75:67:10:34:9e:69:48:d1:0f:d9:52:dc:08:17:
         d0:f8:43:18:b9:93:17:18:2d:67:ba:25:e2:04:43:fb:cc:ad:
         f4:8d:bc:37:76:08:a0:1f:24:1b:f8:5d:2c:24:91:89:de:63:
         00:3e:e7:0a:6a:21:9d:74:ed:53:0e:d8:7a:6b:07:1c:78:d1:
         b7:d9:03:c4:2f:e5:8a:29:76:9e:85:23:ff:8d:d6:3f:b8:d1:
         b2:27:d3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:18 2026 by rpki-client