Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File:                     5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier:          27WnMqzGDcb+r/icFcI7KwyH3vn7XvRQj3ATlgSgZNk=
Subject key identifier:   94:45:FA:55:0D:6D:AB:54:5D:C8:D2:1D:2A:B7:99:26:35:22:FA:8F
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer:       /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial:       019FAA504C4502B6E52CB5D5C7BF858B40E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number:          1975
Signing time:             Tue 28 Jul 2026 20:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:16 +0000
Files and hashes:         1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: mvqhdmwjFLQYXL1+DNItF0RKW+ePwrl6LvmQOuF1SWE=)
                          2: zL-LWx-Rz7OMaI1EPMJkxLg31_M.roa (hash: cgNfkZmen0X8xi6X3N5ufjIJZAx+Um78IAgsseJM+y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:4c:45:02:b6:e5:2c:b5:d5:c7:bf:85:8b:40:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
        Validity
            Not Before: Jul 28 20:00:16 2026 GMT
            Not After : Jul 29 20:00:16 2026 GMT
        Subject: CN=9445fa550d6dab545dc8d21d2ab799263522fa8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:e6:ee:22:da:0e:0f:73:6d:99:c6:d4:fa:
                    a8:43:01:ad:cb:b1:1f:ec:36:a0:11:fb:e8:fd:46:
                    50:42:f8:ce:13:57:6f:16:d3:6e:c2:d0:06:fc:5d:
                    e9:b5:d4:15:73:eb:76:93:00:7c:c9:86:b1:ea:f0:
                    10:de:f8:f0:29:06:f2:a4:b6:b2:26:0c:5c:c0:4a:
                    b5:ab:f0:48:f7:6a:38:10:96:e0:3d:f3:3c:7e:bb:
                    38:a9:b0:ae:84:1f:e1:89:ed:8d:a5:83:e2:0a:6c:
                    1f:87:34:df:64:4a:ae:18:76:7e:88:79:ca:fb:3d:
                    4f:6c:80:8a:f9:10:20:2d:87:77:7a:8b:05:d4:3b:
                    ad:4a:0c:14:19:f4:d0:6d:41:34:37:57:1f:34:61:
                    14:2d:4b:a3:53:0c:bf:0e:66:4b:8d:2d:18:9a:0b:
                    c8:29:b7:48:03:1d:f0:f7:6a:3c:6f:41:f6:43:3c:
                    81:a8:fc:25:7d:e4:15:6b:ba:22:a6:bb:a1:f9:6f:
                    cf:54:5e:8a:69:40:9f:6f:da:e3:a9:29:55:34:47:
                    44:98:8b:82:34:2a:24:83:c7:2e:e3:71:a5:4f:c0:
                    ae:6f:b9:ac:f0:20:a9:d1:62:d5:5e:0f:bf:ee:eb:
                    26:d0:15:1d:c8:f0:fa:67:dd:b2:24:28:d2:be:97:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:45:FA:55:0D:6D:AB:54:5D:C8:D2:1D:2A:B7:99:26:35:22:FA:8F
            X509v3 Authority Key Identifier:
                keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a0:e3:ca:3f:35:c8:be:83:19:fe:c1:0b:65:8c:41:c5:ec:
         fd:53:de:37:2e:d0:08:cd:5e:6e:df:c5:65:58:44:44:09:f2:
         d7:9a:37:01:80:43:81:53:35:37:77:79:44:62:e8:d8:bf:4f:
         4a:53:39:3f:f0:e0:c2:a3:23:02:8b:45:5f:fd:2f:06:21:c6:
         96:90:13:55:61:8c:36:ae:75:39:f0:91:ff:f0:07:30:f9:26:
         92:68:4c:df:a3:20:a1:e0:5d:89:2c:55:d6:6f:d7:99:c6:58:
         92:9f:e7:d2:5c:d1:a8:c4:86:c4:1b:a5:71:34:dd:86:83:26:
         76:11:48:ef:cd:7e:64:b1:be:06:a0:df:4a:ba:a1:c6:8a:c2:
         45:fe:49:0c:90:e7:19:80:ec:52:be:17:e5:0b:0b:82:b0:b7:
         7f:3a:bb:bb:43:10:ca:62:5a:62:0a:9d:3f:5a:87:be:c1:e6:
         07:74:58:8c:03:54:86:fc:8a:ac:96:2f:39:74:4a:f6:17:4f:
         84:d2:a4:8d:bd:e8:e8:ef:1f:db:87:26:8d:d4:70:07:d9:47:
         17:2a:e0:bc:7a:79:c5:9f:00:9a:b1:f2:ce:7c:32:dc:41:52:
         5d:d2:ca:94:a5:bc:cf:e0:43:0e:db:e2:99:d4:d9:b9:cd:4e:
         fd:57:bb:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUExFArblLLXVx7+Fi0DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2RmMTU1Yzg3YTU5MGFjMWU1Mzg1NDRjZjMzNTZlNGZj
ODE3NDgwHhcNMjYwNzI4MjAwMDE2WhcNMjYwNzI5MjAwMDE2WjAzMTEwLwYDVQQD
Eyg5NDQ1ZmE1NTBkNmRhYjU0NWRjOGQyMWQyYWI3OTkyNjM1MjJmYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34Lm7iLaDg9zbZnG1PqoQwGty7Ef
7DagEfvo/UZQQvjOE1dvFtNuwtAG/F3ptdQVc+t2kwB8yYax6vAQ3vjwKQbypLay
JgxcwEq1q/BI92o4EJbgPfM8frs4qbCuhB/hie2NpYPiCmwfhzTfZEquGHZ+iHnK
+z1PbICK+RAgLYd3eosF1DutSgwUGfTQbUE0N1cfNGEULUujUwy/DmZLjS0YmgvI
KbdIAx3w92o8b0H2QzyBqPwlfeQVa7oipruh+W/PVF6KaUCfb9rjqSlVNEdEmIuC
NCokg8cu43GlT8Cub7ms8CCp0WLVXg+/7usm0BUdyPD6Z92yJCjSvpfX5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRF+lUNbatUXcjSHSq3mSY1IvqPMB8GA1UdIwQY
MBaAFOc98VXIelkKweU4VEzzNW5PyBdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQt
ZGRkN2JmOTNkMzU2LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQtZGRkN2JmOTNkMzU2
LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqDjyj81
yL6DGf7BC2WMQcXs/VPeNy7QCM1ebt/FZVhERAny15o3AYBDgVM1N3d5RGLo2L9P
SlM5P/DgwqMjAotFX/0vBiHGlpATVWGMNq51OfCR//AHMPkmkmhM36MgoeBdiSxV
1m/XmcZYkp/n0lzRqMSGxBulcTTdhoMmdhFI781+ZLG+BqDfSrqhxorCRf5JDJDn
GYDsUr4X5QsLgrC3fzq7u0MQymJaYgqdP1qHvsHmB3RYjANUhvyKrJYvOXRK9hdP
hNKkjb3o6O8f24cmjdRwB9lHFyrgvHp5xZ8AmrHyznwy3EFSXdLKlKW8z+BDDtvi
mdTZuc1O/Ve7YA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:49 2026 by rpki-client