Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File:                     5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier:          rNvwX+qRDQt+Y2R6q5cwhSO2vrKQozvoLsRFiE1Bwx8=
Subject key identifier:   D1:B0:25:86:D2:91:08:A6:61:12:BB:1C:90:A0:71:62:C7:19:C8:2A
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer:       /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial:       019EC0DAF0EAC87D7631EE8630BE26CF7CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number:          0173
Signing time:             Sat 13 Jun 2026 12:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:34 +0000
Files and hashes:         1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: riw6BJcIC7KPzpZ2GmlakM1LegEKQ46x836t60rg7zs=)
                          2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:f0:ea:c8:7d:76:31:ee:86:30:be:26:cf:7c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
        Validity
            Not Before: Jun 13 12:00:34 2026 GMT
            Not After : Jun 14 12:00:34 2026 GMT
        Subject: CN=d1b02586d29108a66112bb1c90a07162c719c82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:96:e2:b2:12:32:0b:fe:c8:89:09:97:cf:
                    48:ec:37:30:50:7b:e6:64:86:e3:c9:c9:d2:f4:71:
                    4e:4b:20:9a:41:2c:f7:5d:2a:87:c5:e4:4f:84:ee:
                    d0:7d:68:43:a3:21:d1:88:0c:28:b8:b2:68:98:93:
                    48:d5:9f:a4:38:a2:00:2a:c3:5e:d0:1a:1f:9b:bb:
                    40:b5:fb:46:6c:72:d0:5b:9b:d8:9e:8b:a1:a9:5a:
                    2b:8c:0e:e1:ff:79:76:7d:a2:5c:87:cd:46:56:70:
                    9a:f9:d3:00:c7:4c:c3:7d:74:c5:6a:86:2e:6e:13:
                    d2:6a:cd:a0:8b:64:ca:fc:82:42:ae:4c:cf:4e:6a:
                    9f:43:ea:08:42:c2:3c:a2:7d:1d:07:91:30:c1:92:
                    57:4f:b5:4f:95:b9:6e:bc:19:e4:25:7d:fa:c6:b3:
                    a9:58:91:c7:66:ba:36:8c:92:2b:c0:48:cb:31:25:
                    70:64:57:61:62:93:c7:78:5d:81:fe:45:8a:ab:6c:
                    c9:4b:03:cb:1c:03:31:0b:d5:fe:d7:29:10:89:bb:
                    87:4f:f9:bb:3f:0b:32:52:4e:1c:42:39:10:ef:01:
                    f3:77:01:13:2a:b5:0f:a1:f3:f2:8d:c0:77:28:c8:
                    7f:3a:46:4c:2e:63:c8:df:9f:4a:ac:ce:06:f7:f7:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:25:86:D2:91:08:A6:61:12:BB:1C:90:A0:71:62:C7:19:C8:2A
            X509v3 Authority Key Identifier:
                keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c2:bb:48:89:94:4d:7b:bb:8f:71:3d:19:5f:53:86:b4:f6:
         e3:34:03:2e:ff:e0:31:f8:d3:6d:b4:ca:b3:9a:85:27:9a:74:
         97:e2:64:49:6e:2a:f9:92:c0:ba:0f:b4:f2:77:f1:85:da:c6:
         46:3f:0a:7b:ce:32:13:38:fe:71:42:d5:62:ca:6d:38:97:87:
         ef:f0:4a:a2:79:4d:f9:01:63:1a:02:13:9b:4e:9a:29:ca:00:
         51:93:00:af:18:2c:c0:dc:b4:bc:5a:13:02:c6:3c:96:f7:50:
         d6:4c:e4:88:20:94:f3:f9:62:a0:9b:82:6e:89:a4:a0:4b:bb:
         a4:ce:d9:58:07:7f:ee:80:a9:96:20:0a:c4:34:be:cf:eb:54:
         9e:1f:0b:ce:8f:14:34:2d:61:90:d5:09:96:99:ee:d5:0c:04:
         94:58:b2:a8:26:1d:f2:b3:58:40:11:c6:02:20:be:3a:bc:22:
         3c:6a:18:6c:3d:f8:93:b8:b1:89:7e:49:a1:4c:f3:c8:18:92:
         14:d0:7f:1a:fa:88:3d:93:be:89:87:52:d0:8f:3e:2b:d3:4b:
         cd:67:45:26:4c:2a:99:91:67:3b:76:b5:d5:16:d2:64:7a:de:
         8d:c9:6f:eb:b8:e1:a7:54:63:01:7c:62:a6:eb:67:a4:be:43:
         f1:35:24:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:13:49 2026 by rpki-client