Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          +eysK8lewO+oC/LxB9MGtwrc7Z13cDdVRHwhnBbbVFs=
Subject key identifier:   6A:37:8C:D8:A8:8A:C6:A3:4A:8B:33:CC:5E:3B:33:D2:AB:43:CF:2C
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       019FA907C9E0B22F60810DE52CAFB902DA59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          14B1
Signing time:             Tue 28 Jul 2026 14:01:27 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:27 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:27 +0000
Files and hashes:         1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=)
                          2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: PoG+uAwVEFT0m2FGHZ1IHWHKD6tuAK8XROQOLZvAIWM=)
                          3: CtJ8OGkCaahCczfwEJKIo0Vg19E.roa (hash: G04Zndcd1iRvLKPAv2hVCE6UogK1m2W2eJhOAaju7+8=)
                          4: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=)
                          5: _vpq-qi4EQKFfckyOrU1g_mLI6k.roa (hash: NEepCH4VA5uYtx4dkADmgFVyzmZ4nNQxuJCHt+PP3M8=)
                          6: axnm0HQRmG8rizfv82dyns0e2_8.roa (hash: aV50CPhaYK3yIWcd+/HLRX9TlneZUNpfM8fhreah7uM=)
                          7: f_xKmFrmjIA78qUIL0QMNJGgKEk.roa (hash: C5FX/w2liydb0eZpv86Rq1hmajGY3P2SktyNH3juuk4=)
                          8: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=)
                          9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:c9:e0:b2:2f:60:81:0d:e5:2c:af:b9:02:da:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Jul 28 14:01:27 2026 GMT
            Not After : Jul 29 14:01:27 2026 GMT
        Subject: CN=6a378cd8a88ac6a34a8b33cc5e3b33d2ab43cf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:29:ff:c8:38:d9:e2:b0:24:e7:a6:c0:26:
                    49:60:b7:b0:a6:41:0d:b2:29:c3:bd:32:69:68:3d:
                    38:c1:7b:bc:ea:67:1e:3d:60:9f:1d:0b:03:ca:07:
                    10:e7:37:76:4e:5a:54:eb:68:4a:5a:ba:ab:ee:bc:
                    55:ea:37:22:e7:4a:92:a9:0d:37:d7:17:14:9e:ee:
                    71:c6:72:b3:af:91:70:92:73:b2:54:62:44:ff:22:
                    cc:33:e6:36:14:b2:72:c1:3c:a8:5e:dc:a1:a8:ba:
                    c0:4d:01:62:44:f8:01:f1:55:50:d4:e6:18:84:c4:
                    2b:27:78:73:10:05:b1:9a:b7:d3:fd:fd:59:5b:e0:
                    b4:63:b6:b8:b8:eb:70:4c:8c:62:b0:11:f1:43:f1:
                    5d:37:57:9e:22:76:d1:73:8d:01:1f:fb:07:6a:6d:
                    ec:97:8c:1c:86:97:07:9c:b9:87:72:87:15:33:c1:
                    c9:62:49:79:24:89:22:88:fe:8e:d4:b6:eb:e4:ed:
                    ff:b4:6a:d4:30:06:54:df:f0:f0:4c:7b:86:f1:8a:
                    b5:0b:1d:38:07:a9:85:de:65:cd:a2:0f:dc:f1:0e:
                    74:54:45:06:d7:d9:b1:d9:1c:1c:b6:e2:11:66:b4:
                    0d:02:b5:62:ac:dd:2b:9e:84:4d:dd:df:d2:36:ea:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:8C:D8:A8:8A:C6:A3:4A:8B:33:CC:5E:3B:33:D2:AB:43:CF:2C
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:13:81:32:ae:83:da:de:c8:0d:4e:9d:c8:10:1b:64:a8:11:
         66:4c:07:e7:1d:f3:47:e4:1a:22:af:05:5f:2f:be:48:53:43:
         65:27:e2:b2:46:16:b0:32:0a:52:c1:b5:c0:aa:42:49:52:87:
         46:3a:8a:2c:6a:e8:d3:63:5e:f9:7a:62:3f:6e:58:2e:7a:ab:
         ab:d4:80:57:96:bf:27:3a:af:3a:41:c6:c0:0b:53:b2:e5:17:
         e7:d0:51:d3:51:48:83:d6:a0:bc:2f:e1:1c:46:31:4b:e0:ed:
         cc:80:45:b9:a4:af:e8:3e:27:ab:cb:0f:f1:85:b2:52:40:fc:
         e5:da:e4:d4:10:e6:84:bf:7e:ae:dd:1c:fb:73:8a:1b:be:41:
         03:c8:7a:ad:62:d8:15:10:90:09:8f:fc:8b:19:fc:08:bc:9a:
         98:8d:c2:72:49:78:34:7a:71:22:2d:ff:0f:90:e3:78:75:df:
         35:f1:3e:0d:2c:fe:1a:9b:b8:a3:c3:2e:9e:9a:4a:35:d5:de:
         b4:e8:8f:0f:bf:7b:d1:e3:1e:be:2a:a5:cc:58:5c:bd:4a:16:
         8f:f3:0c:c9:82:37:e5:c7:f5:22:14:5d:96:21:8b:29:1b:0a:
         b7:1c:7a:bc:d1:93:b0:6a:13:e0:13:58:46:75:9b:33:8a:8b:
         f5:8f:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:22 2026 by rpki-client