Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File:                     d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier:          sghJrVxbU98y0Rte7+Nm2Ji2CmAPSrKt+TMZIlYQSsc=
Subject key identifier:   51:CB:02:8A:2E:E1:7F:47:35:92:85:3E:BF:BF:3B:7E:F2:CC:A9:C9
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer:       /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial:       019FAC75B14269E7A9F6661D7C42B71F3225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 06:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:21 +0000
Files and hashes:         1: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: SUDC6Wmn/3UN4oOxsite9k7zvYAnIeO1wcruVouERcA=)
                          2: ycQ9UZI7n07LVhcSojHNBe-1YKE.roa (hash: lff+KvYO2g0/AePrhAZf5pu7/6YYDH+6BXgpxI3UwiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:b1:42:69:e7:a9:f6:66:1d:7c:42:b7:1f:32:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
        Validity
            Not Before: Jul 29 06:00:21 2026 GMT
            Not After : Jul 30 06:00:21 2026 GMT
        Subject: CN=51cb028a2ee17f473592853ebfbf3b7ef2cca9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:d8:43:82:c9:d5:0e:64:5e:6c:8f:93:14:
                    5a:2c:46:b5:57:ee:94:d6:ad:bd:d4:00:8b:64:1d:
                    76:5b:3d:3a:18:e7:e2:33:e6:fb:fe:ea:6d:ed:42:
                    9e:23:9d:2a:75:7d:aa:17:2c:39:95:c4:3a:da:05:
                    1f:43:9f:d5:22:30:56:84:9f:c0:41:c3:df:a5:74:
                    21:75:36:f9:4c:a3:d0:35:1e:f3:c3:da:c8:ae:48:
                    c9:5b:69:57:bf:7e:c0:71:c3:4a:03:1e:5e:36:92:
                    08:6a:35:c8:b7:6c:00:4b:f5:97:39:e8:5e:40:4b:
                    09:38:fd:54:61:72:dc:14:a0:29:f0:06:83:30:39:
                    22:1c:da:96:ab:a0:7d:8a:e2:71:cc:82:d0:2c:98:
                    49:1f:d1:70:b5:77:30:b3:5b:0c:50:54:93:5b:bb:
                    28:55:a1:d4:81:9d:56:e5:74:b0:b8:99:18:ff:71:
                    08:4c:43:0b:e3:29:77:b9:d0:31:7f:45:a4:b8:cc:
                    97:c4:7f:df:df:33:c8:b9:ce:7f:0a:0d:b9:06:fb:
                    66:c9:93:0b:b9:cd:0a:a2:49:13:d2:d2:ce:b2:51:
                    be:99:ce:6d:ef:5c:b3:45:e5:20:bf:b6:76:ba:82:
                    8f:2d:40:a5:84:51:a8:5e:31:b6:a9:c8:2d:12:61:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CB:02:8A:2E:E1:7F:47:35:92:85:3E:BF:BF:3B:7E:F2:CC:A9:C9
            X509v3 Authority Key Identifier:
                keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e0:30:4f:af:ab:4d:b6:fc:83:eb:cb:1b:df:c5:61:cd:05:
         bb:93:f0:6c:26:9f:3f:d2:49:a1:14:f5:a1:52:cc:ed:e0:5d:
         aa:3f:93:b8:6a:39:93:16:7a:6e:67:16:97:a1:b7:72:90:22:
         18:c7:74:ff:fd:78:b7:bc:22:d3:3a:65:05:a1:d7:85:1e:7b:
         66:f7:48:79:50:84:1f:64:a0:8f:13:dc:0b:2c:4c:bb:05:3d:
         5d:4d:2a:bb:4d:4d:0f:ee:c1:7f:19:ce:d0:ed:bb:1d:d3:89:
         9e:4e:ad:57:d5:b3:14:55:37:9c:f3:a7:e8:af:04:ba:96:6a:
         13:13:d4:e9:ac:a7:64:0d:5e:78:99:b9:c3:79:df:ae:aa:63:
         2c:da:44:98:8b:a6:ca:45:19:1c:fc:75:d1:03:c6:09:a0:3c:
         6e:d6:1f:1c:65:52:54:37:ae:21:2e:ee:df:c6:b0:e8:0f:20:
         81:34:5c:4f:d8:73:53:35:11:9b:c9:ff:3e:bc:b5:4d:60:c0:
         aa:34:74:ea:3e:86:81:a0:60:ef:4e:f8:03:bf:ae:d0:60:9e:
         02:6d:d4:14:ee:81:0b:8c:59:6b:3a:20:48:0c:c4:39:0f:95:
         05:ec:7a:5f:cf:9b:a1:f8:05:64:91:c2:44:58:86:be:3f:5c:
         d8:dc:ba:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdbFCaeep9mYdfEK3HzIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj
MjI5Y2MwHhcNMjYwNzI5MDYwMDIxWhcNMjYwNzMwMDYwMDIxWjAzMTEwLwYDVQQD
Eyg1MWNiMDI4YTJlZTE3ZjQ3MzU5Mjg1M2ViZmJmM2I3ZWYyY2NhOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdfYQ4LJ1Q5kXmyPkxRaLEa1V+6U
1q291ACLZB12Wz06GOfiM+b7/upt7UKeI50qdX2qFyw5lcQ62gUfQ5/VIjBWhJ/A
QcPfpXQhdTb5TKPQNR7zw9rIrkjJW2lXv37AccNKAx5eNpIIajXIt2wAS/WXOehe
QEsJOP1UYXLcFKAp8AaDMDkiHNqWq6B9iuJxzILQLJhJH9FwtXcws1sMUFSTW7so
VaHUgZ1W5XSwuJkY/3EITEML4yl3udAxf0WkuMyXxH/f3zPIuc5/Cg25BvtmyZML
uc0KokkT0tLOslG+mc5t71yzReUgv7Z2uoKPLUClhFGoXjG2qcgtEmEIKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHLAoou4X9HNZKFPr+/O37yzKnJMB8GA1UdIwQY
MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt
NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl
LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+AwT6+r
Tbb8g+vLG9/FYc0Fu5PwbCafP9JJoRT1oVLM7eBdqj+TuGo5kxZ6bmcWl6G3cpAi
GMd0//14t7wi0zplBaHXhR57ZvdIeVCEH2SgjxPcCyxMuwU9XU0qu01ND+7BfxnO
0O27HdOJnk6tV9WzFFU3nPOn6K8EupZqExPU6aynZA1eeJm5w3nfrqpjLNpEmIum
ykUZHPx10QPGCaA8btYfHGVSVDeuIS7u38aw6A8ggTRcT9hzUzURm8n/Pry1TWDA
qjR06j6GgaBg7074A7+u0GCeAm3UFO6BC4xZazogSAzEOQ+VBex6X8+bofgFZJHC
RFiGvj9c2Ny6wg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:22 2026 by rpki-client