Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File:                     5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier:          Ls3xO6lA9oQ67KT2TxEx5zf7PKsYK2LgJgvlBiwXR3s=
Subject key identifier:   0E:0E:4F:A9:BD:AF:DF:16:00:53:99:76:39:2B:C0:3D:E6:F3:FF:8C
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       019FA974E1E4FB3A10421BDCB7AA820DE9D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number:          1516
Signing time:             Tue 28 Jul 2026 16:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:37 +0000
Files and hashes:         1: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: 6Tlqt6dtqI/zBlkPRGp3pQ5O4kkCSd5lbcvN9u2R2JQ=)
                          2: A1D00v3A4CQZLEI4nsAImmP-iFw.roa (hash: E/3ao48NIzK+YhB3GFzpFI3pAlwXP3xA9O+zTwVZIJ0=)
                          3: GJZc_gLiiRe7OqjNr9x1ky7xXpg.roa (hash: 8nJXVrKq22+Fo+U1/ucjOBB+qvYDFNRUhH11zvrhaPE=)
                          4: kqPwo-tGhdHXOEYZAA2rZ5T34g4.roa (hash: 4MUqRPaEDTzgXrU6Y0k0IEZ7T2M+taIszXucXEvAMGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:e1:e4:fb:3a:10:42:1b:dc:b7:aa:82:0d:e9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Jul 28 16:00:37 2026 GMT
            Not After : Jul 29 16:00:37 2026 GMT
        Subject: CN=0e0e4fa9bdafdf1600539976392bc03de6f3ff8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:3b:61:3e:f8:ff:68:58:bf:6f:56:f9:3e:
                    30:3a:49:d9:62:cf:34:b3:74:e9:ca:05:0f:59:5f:
                    41:d7:f9:45:d2:cc:9e:f1:09:57:65:e8:4e:4c:ab:
                    f1:33:12:61:3d:30:9a:0f:9a:b4:03:66:1a:8d:56:
                    8d:58:a0:d8:cc:c2:1a:1a:01:7e:f0:af:f2:97:12:
                    a2:28:b2:75:1b:50:06:5c:34:55:5b:82:f4:cf:71:
                    3c:57:1a:a7:1a:be:0b:ae:71:76:b2:b2:72:6c:e2:
                    21:9f:80:d3:ad:fc:03:16:c5:78:ac:b5:c0:38:bd:
                    cc:08:94:1e:cd:c0:40:e2:9b:ea:26:62:e2:22:28:
                    2c:76:52:4b:62:88:ef:eb:49:3d:e1:db:72:ef:96:
                    4a:22:f7:1d:02:bb:de:48:64:4c:7d:8c:e3:7f:a4:
                    6b:17:a3:19:7f:7b:c0:11:d5:8b:48:ec:52:f1:ba:
                    d4:35:79:47:96:48:b8:b5:38:0d:be:0a:37:13:31:
                    53:f0:22:6e:f5:59:a3:b6:fc:e5:00:72:9e:19:4c:
                    50:9c:fd:9b:b8:f8:82:7c:01:41:40:d8:8c:da:25:
                    33:d6:53:6c:87:4c:3b:2d:49:36:eb:65:5c:6e:ed:
                    36:26:7e:fe:a9:09:43:ce:8d:ca:09:32:44:a9:9d:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0E:4F:A9:BD:AF:DF:16:00:53:99:76:39:2B:C0:3D:E6:F3:FF:8C
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:c5:39:09:23:23:06:3b:71:5c:96:af:82:e2:60:26:34:
         6e:1f:96:68:6d:77:55:a2:73:9c:ff:d0:28:5a:30:4c:ed:e4:
         7b:a5:45:7e:bf:0c:cb:86:62:0c:a3:c0:33:fa:14:87:7f:a1:
         87:d2:b6:b0:d2:41:fc:00:04:6c:30:cf:8a:0a:f9:31:13:da:
         3e:3e:34:e5:e9:4a:9d:24:e6:4a:9b:54:93:1b:6e:38:33:81:
         78:b7:43:63:70:4e:58:3b:d4:8d:1f:00:a5:b8:da:49:0e:81:
         81:6e:53:84:9f:6e:8a:c8:f0:c0:c3:db:30:ed:05:0b:b2:1f:
         29:37:17:20:48:ce:81:aa:f5:ca:b5:4d:d2:7b:c9:13:0c:ed:
         e7:23:f8:05:36:2f:4a:17:c3:fe:26:bd:1b:9e:42:65:ff:96:
         ce:06:64:0d:08:88:60:f6:18:c0:d6:c4:6b:cd:0b:60:1a:a6:
         a8:fe:5a:c5:05:d9:ad:80:4f:4e:fe:41:85:c1:1e:1a:bb:6c:
         47:ff:88:4d:1c:3e:92:ff:e6:20:ae:63:d9:1f:28:7b:ca:f9:
         75:48:b8:2e:34:47:28:4c:fa:f3:35:dd:40:03:8a:bb:8e:dd:
         7f:00:88:f0:78:8c:00:d0:ca:99:2a:3b:c3:62:fb:65:11:27:
         3d:65:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:25 2026 by rpki-client