Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File:                     5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier:          W8pjRTaW6AE7GuSovU1K62Z13i4cLSF04+/HeYxR3dI=
Subject key identifier:   4C:4B:14:FB:85:95:AE:E2:C9:AA:85:4D:50:71:5F:9F:CD:81:2B:A7
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer:       /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial:       019FA8CFBD8014C0896821C80530712E31E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number:          05EE
Signing time:             Tue 28 Jul 2026 13:00:14 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:14 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:14 +0000
Files and hashes:         1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: 6Y3IT8RsGAFLgTzId+UahHdeuMCOUbIhyQg6Buh6tLU=)
                          2: rhEDto9LAcb21HwkdYYZj263_-Y.roa (hash: vpJNUlsikgDQkbTcXSuN12zAPLHXSB+mONKm4pukuXs=)
                          3: yD0u6CnOVpuk9WvVpytgxRU4D0s.roa (hash: hrSKknGCTUHrpDRk30g1RyFkiWwqNDnyIxOmbM3GicI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:bd:80:14:c0:89:68:21:c8:05:30:71:2e:31:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
        Validity
            Not Before: Jul 28 13:00:14 2026 GMT
            Not After : Jul 29 13:00:14 2026 GMT
        Subject: CN=4c4b14fb8595aee2c9aa854d50715f9fcd812ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:24:14:88:fe:e2:e1:df:66:ab:46:46:a1:
                    0a:c3:d2:2d:2f:6c:e6:4b:a6:13:73:fe:14:14:6c:
                    11:8f:3b:c3:e8:26:e1:85:f6:44:a3:7e:45:bc:19:
                    1c:e7:44:0a:ac:aa:f8:33:0d:a7:f6:26:cf:e6:60:
                    ec:fc:e9:c5:25:d1:18:06:62:53:e5:79:3f:db:a6:
                    31:2b:9f:1b:39:64:73:21:6f:7a:c4:fe:7d:30:c6:
                    da:8a:34:cf:11:93:37:80:37:16:2b:ac:62:1b:4a:
                    e2:b1:ab:63:00:6c:f8:7a:fc:a9:ed:ce:1d:a5:25:
                    d3:5c:d3:f0:19:ff:09:e1:37:66:53:7e:d4:34:bf:
                    25:84:e5:26:91:67:30:62:ae:da:a1:cd:4c:90:6c:
                    b6:5c:64:29:b3:99:e8:85:14:44:e8:6c:48:f3:5b:
                    61:bb:64:66:e3:20:db:ad:1f:ae:62:de:3c:75:c0:
                    ca:df:75:11:b4:c9:bb:87:5c:99:30:f9:f9:10:46:
                    85:ed:6c:d9:02:a7:13:d9:31:0a:ee:14:8e:ff:76:
                    79:c0:49:8b:d1:05:42:3c:3e:f2:18:36:0b:96:de:
                    3c:ae:14:f2:92:a9:d6:7a:6f:24:e5:db:25:c9:ac:
                    ec:a8:33:54:a2:92:9f:32:29:72:39:43:22:9c:bf:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4B:14:FB:85:95:AE:E2:C9:AA:85:4D:50:71:5F:9F:CD:81:2B:A7
            X509v3 Authority Key Identifier:
                keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:21:e1:59:91:ff:df:b2:bf:66:8d:c1:f9:5a:36:f0:bc:
         0d:41:a2:94:71:a8:fb:96:3c:13:7d:25:57:dd:10:5d:fb:b4:
         d3:33:df:65:20:2c:0d:a5:d7:ea:a6:7a:3f:c7:9e:1e:8c:f3:
         c7:19:f8:ec:50:48:8b:00:9c:4c:47:ca:90:96:f7:52:01:e8:
         c1:1f:81:71:df:13:cb:f3:62:26:dc:1b:c5:12:90:2f:bf:f6:
         c1:b3:de:0f:53:20:92:9f:07:ba:6f:5f:ce:4c:a7:52:8d:5b:
         ca:f8:70:4d:96:24:a2:70:9c:c3:2e:cd:f7:c3:c2:b0:a4:25:
         17:54:3e:27:c9:5f:a2:4b:8f:28:62:d3:11:4d:60:1b:07:64:
         06:60:88:d7:d1:34:1e:8c:dd:32:c3:63:b8:96:dc:93:11:e8:
         e3:73:73:cd:36:e1:e2:57:07:c2:32:56:44:d8:19:73:ed:55:
         99:9e:d7:4b:57:c8:7b:d2:89:d6:c9:2d:55:46:31:32:c5:b1:
         26:73:b3:11:5b:57:a4:45:9a:19:bf:f7:4c:7c:35:68:6f:c1:
         64:44:2b:58:73:91:53:bc:fb:fb:56:fd:27:bf:d0:ce:3f:eb:
         58:a1:33:53:9a:f1:0c:3d:f5:a3:e8:fe:72:53:07:89:e7:78:
         d9:f5:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:36 2026 by rpki-client