Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File:                     5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier:          hbiiY25soBZjvmTBI8MRPaaxIIkiN7Q5Qmas2O8HUFk=
Subject key identifier:   89:B7:12:A5:4E:62:A9:31:3F:AA:DF:D2:1F:76:B4:97:3E:F9:AE:1E
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer:       /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial:       019FABD1227D5D910FB9BB335FD166FF27F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 03:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:37 +0000
Files and hashes:         1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: T+Uxis7yWCM3R46p2kvvfMjOjGgvQyo64oaWlul8YYo=)
                          2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:22:7d:5d:91:0f:b9:bb:33:5f:d1:66:ff:27:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
        Validity
            Not Before: Jul 29 03:00:37 2026 GMT
            Not After : Jul 30 03:00:37 2026 GMT
        Subject: CN=89b712a54e62a9313faadfd21f76b4973ef9ae1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:75:25:67:22:0e:b4:18:f5:db:28:8f:89:
                    b2:23:ac:87:9e:e8:b9:c9:54:d5:6f:cc:09:2a:6f:
                    bc:33:0a:0c:6b:e8:c5:25:2b:e7:fb:b1:6b:32:c1:
                    ec:de:17:27:88:c2:6b:9a:1b:48:db:53:92:8c:50:
                    0f:53:49:a3:ee:de:f5:ee:13:b0:19:3b:5d:f6:2e:
                    64:0f:87:90:34:b6:93:bf:09:39:82:1e:4f:72:74:
                    54:4d:bc:2c:4f:f2:11:50:1a:49:96:89:34:d4:75:
                    12:5c:94:22:fc:98:92:1f:8e:40:ec:43:3e:c2:0f:
                    5c:fd:1c:7e:35:6f:81:a4:76:91:88:1c:0c:24:bf:
                    0b:2a:a5:33:b9:1d:5a:1b:a8:17:ab:5a:b5:8b:90:
                    06:6e:76:cf:31:5a:e1:42:bc:be:ba:d4:09:34:ff:
                    e6:ce:02:9a:c1:b5:55:53:c9:17:ca:4f:3a:24:5d:
                    92:c1:00:c5:21:56:83:bb:ed:f2:af:53:7b:7f:98:
                    c4:3a:d0:b5:91:fc:55:72:eb:19:d7:85:3f:e2:5f:
                    99:0f:3f:8c:e6:ad:d0:bd:a7:b7:53:d6:8e:3c:bf:
                    cb:12:cc:00:44:d1:19:1c:2e:71:a2:da:72:b4:ca:
                    c7:7b:7c:e8:03:a9:30:da:70:a4:56:8c:1a:7b:c4:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B7:12:A5:4E:62:A9:31:3F:AA:DF:D2:1F:76:B4:97:3E:F9:AE:1E
            X509v3 Authority Key Identifier:
                keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:d3:28:d8:0b:09:74:eb:3f:a1:44:3c:16:93:a1:2b:b7:
         f9:7c:ce:e8:dc:0e:b2:4a:85:5e:d1:28:8a:92:90:8c:c2:9b:
         4d:a3:29:74:fd:65:f9:1f:60:45:2b:ad:c3:57:e8:c7:bc:66:
         bc:16:df:cd:e7:77:43:7e:e0:4a:14:60:5e:f8:88:5e:6d:e9:
         11:ce:8b:fd:06:d4:dc:78:b1:8b:3a:22:97:f5:c8:5d:14:fb:
         69:82:03:b2:02:54:0d:11:02:dd:91:57:c6:7b:66:8c:57:f5:
         00:23:a9:0b:11:36:cb:aa:0f:bf:15:6f:ac:16:a8:0e:be:4c:
         60:b5:69:69:8e:82:f5:22:8c:45:7c:2e:2d:26:07:c8:f3:92:
         0d:d4:d2:99:e8:f5:ea:42:79:72:1e:d7:bd:89:96:c1:ac:fb:
         c0:7f:66:5f:59:96:ad:06:3c:a6:06:2b:54:82:91:6e:2f:dc:
         c5:64:60:27:0e:b4:42:f2:05:1b:3b:51:15:81:bc:92:c6:0b:
         cf:18:dd:23:e4:f6:5a:ba:3c:00:8b:b9:59:ec:bc:bf:57:20:
         81:30:d9:1d:51:6d:40:a6:db:b5:ea:3b:1c:49:45:ba:2d:18:
         dc:8b:21:08:f6:75:bc:bb:30:c0:a2:a0:6e:c6:a9:9f:c4:d7:
         6c:52:e7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:24 2026 by rpki-client