Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          5cFja7+6yn3+gWasF3oHmCUut9e8qSQOiAwQdl1bJWE=
Subject key identifier:   F7:82:F1:4F:44:0E:42:7A:7D:15:9A:57:F2:5D:6D:BC:C4:C3:00:30
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       019EBF23E5C2A3B551598CB52D5EA7CCB828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0D09
Signing time:             Sat 13 Jun 2026 04:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:01 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: 3gwf7LQAdFfH9D/n9r8OyiSowhafEw1spMkWL7YO2po=)
                          2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:e5:c2:a3:b5:51:59:8c:b5:2d:5e:a7:cc:b8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Jun 13 04:01:01 2026 GMT
            Not After : Jun 14 04:01:01 2026 GMT
        Subject: CN=f782f14f440e427a7d159a57f25d6dbcc4c30030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:23:7c:56:d3:6f:55:1c:de:48:5b:d7:27:
                    20:09:d3:e3:50:f0:ee:a1:1b:14:fc:09:5f:3d:78:
                    e5:88:b7:ec:b7:1f:ee:86:2e:ea:c9:45:cb:8c:60:
                    c1:77:44:cc:4a:6c:8f:da:b2:fb:8d:a2:a1:8f:42:
                    1e:7e:81:bc:0f:40:20:2e:eb:5b:6e:79:c0:e0:c6:
                    74:dd:cc:b5:ab:36:bb:85:8b:24:75:90:2f:b0:11:
                    4f:fc:01:0c:d0:ec:7e:bd:d8:f3:02:50:e1:24:e8:
                    e7:4d:f7:d4:9f:e5:bc:88:7d:67:be:89:46:86:a8:
                    07:f9:d8:10:7c:85:6f:8e:ae:66:37:df:6f:6c:47:
                    49:97:d6:95:84:31:34:8f:56:c6:e1:0d:9a:58:36:
                    50:79:24:92:cb:40:36:49:ac:f5:93:4b:db:0d:73:
                    71:0d:9c:af:c8:a8:8b:fb:29:5f:cb:d7:55:77:c3:
                    be:b4:e5:81:a6:41:c3:f8:1e:e4:5d:6e:50:29:be:
                    72:de:55:55:71:d4:c4:d0:fb:0f:a5:d6:cb:83:52:
                    0f:da:33:0b:27:6c:0c:49:38:a6:1f:0f:40:52:86:
                    e8:89:68:0f:8e:01:3e:84:25:1f:44:b1:8b:8e:38:
                    8c:4a:19:49:ac:b1:e1:3f:0d:43:9c:d8:1f:53:d3:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:82:F1:4F:44:0E:42:7A:7D:15:9A:57:F2:5D:6D:BC:C4:C3:00:30
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:62:ed:2c:7b:a8:3f:af:59:e1:00:71:a3:45:7d:be:05:52:
         d2:bc:1e:27:0a:d2:f9:6d:9a:04:59:5e:8f:25:dc:05:9e:be:
         4f:32:0a:04:5b:ac:dd:67:55:6f:fd:5d:51:b8:5d:3a:70:8c:
         56:9e:31:d4:72:aa:1b:c2:5a:02:1e:12:23:ac:1c:93:05:e1:
         00:db:db:de:a4:e9:2a:7d:95:14:32:6f:ee:b1:d2:41:98:0d:
         76:03:06:6a:87:4b:d8:6f:98:e2:4a:c6:42:c6:32:53:fd:f5:
         fb:58:dc:eb:5c:8c:d4:96:22:b0:85:28:80:9c:c9:a4:4a:90:
         27:54:a9:e8:36:13:fc:15:f7:62:ad:68:1c:ab:4e:16:9d:c4:
         06:69:fe:0d:b0:1d:ff:28:57:cc:1d:af:0e:7c:45:6f:74:3c:
         31:54:8c:0e:27:8b:06:ee:24:1a:77:d6:3e:4e:4f:4c:cd:d9:
         ad:9c:7c:85:dd:e4:5f:1c:3b:5d:8f:84:8c:2f:b5:8e:9d:d7:
         61:d7:e7:33:79:5b:43:12:1d:7b:ab:d2:95:dc:29:f5:72:d4:
         62:58:9a:5d:fc:50:ad:f8:95:fd:bc:68:66:e7:88:16:a5:02:
         05:3d:f5:6d:f4:04:05:dc:3d:03:77:1b:73:bf:4c:eb:39:69:
         35:8a:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:04 2026 by rpki-client