Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          cxypQwR64Rc7omSUp8NHLfLJXIAd6RkSxEhyfiveQ/8=
Subject key identifier:   8F:AA:9D:7A:CB:AD:E2:C0:27:BE:97:82:03:B2:0B:01:61:D7:33:C6
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       019FA8CFDB8BF99BB5CACD50A94254A4D9BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0D82
Signing time:             Tue 28 Jul 2026 13:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:22 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: qWYrP1LIv4GJ29STBhfvfdjci2Righc19qFMzqvqfAQ=)
                          2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:db:8b:f9:9b:b5:ca:cd:50:a9:42:54:a4:d9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Jul 28 13:00:22 2026 GMT
            Not After : Jul 29 13:00:22 2026 GMT
        Subject: CN=8faa9d7acbade2c027be978203b20b0161d733c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:65:1a:ff:de:04:de:4a:65:b5:62:91:41:
                    28:d8:29:a3:2b:b6:56:f0:59:7e:7e:8b:16:58:16:
                    6e:fc:29:29:46:75:6a:9e:ab:6e:e2:5d:86:b9:c3:
                    89:61:8c:e1:91:a0:0a:c6:66:75:06:16:5d:6d:5b:
                    dd:a8:82:8a:d4:f0:72:aa:13:78:fa:0c:f8:2f:ac:
                    eb:35:5b:80:da:b1:2e:99:92:b1:2a:ac:c0:1e:4b:
                    5a:2b:f1:f0:35:26:0b:08:44:2d:dc:5b:88:f1:47:
                    9b:2c:f9:f6:07:4c:a9:d1:c8:1b:ae:ae:ff:ec:75:
                    3a:60:d1:e3:fd:d0:66:84:df:71:aa:d0:31:cf:4f:
                    b9:99:c8:3d:49:fa:2f:c5:57:3d:84:46:9a:8a:43:
                    b4:cf:c6:59:73:4c:48:c7:8e:48:a2:60:af:8a:45:
                    81:81:c4:4b:df:48:2c:88:ee:18:35:a4:53:81:ca:
                    53:49:81:69:c7:dd:f0:59:f9:22:13:52:55:9e:b7:
                    b1:8a:45:dd:8e:0e:af:81:55:64:24:d8:e4:3e:53:
                    7b:c6:47:6c:66:79:e4:0a:2d:89:44:99:1d:2f:50:
                    a5:80:52:55:e9:c4:72:50:57:ef:8e:e9:ee:d1:17:
                    5d:67:7a:ca:6c:2d:39:45:21:62:ca:f0:f6:fa:b6:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:9D:7A:CB:AD:E2:C0:27:BE:97:82:03:B2:0B:01:61:D7:33:C6
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3d:52:ad:c3:69:0d:ac:5c:fd:5d:2d:0f:52:17:f3:70:63:
         64:f3:68:74:b4:df:c3:f9:84:33:32:17:5b:79:cc:ad:fa:92:
         86:91:90:0c:79:c5:f5:21:9e:18:cc:4a:dc:43:38:8c:6d:ba:
         5e:dd:78:b3:d4:e3:52:2b:d8:6b:33:75:14:b7:c1:05:71:b6:
         4e:ce:bd:0c:9e:06:8a:64:de:eb:b9:b4:d9:ff:60:db:b9:62:
         fd:e7:42:8d:41:1b:f1:a5:82:02:ad:78:8f:86:33:a0:4c:cb:
         ee:79:83:0e:1a:8c:75:1f:b2:20:9d:78:2f:94:0a:53:e0:a9:
         59:68:19:6f:56:38:a2:10:06:13:51:a3:fb:6e:d9:57:ed:9f:
         61:c7:57:d3:8e:b9:cb:da:64:72:8d:ca:f4:0a:68:ea:a1:c7:
         5f:79:51:13:84:53:21:b3:d1:73:d7:92:6a:dd:f2:b5:55:bf:
         68:a9:f7:e9:6d:63:6d:d6:8b:c7:18:20:5d:bc:68:b2:64:c6:
         ed:fe:8d:64:b8:99:98:6e:b9:0d:97:e3:78:69:94:d3:b1:97:
         ed:37:c8:6e:1a:71:b5:b4:e9:1d:ff:a9:05:76:c3:c6:fc:28:
         35:5d:e9:41:bb:d8:48:b3:34:52:2e:99:14:ee:21:04:fb:25:
         34:22:6f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:14 2026 by rpki-client