Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          45VOSlGOZZF0wO6g/6TgfgISHikv01SqKvveAO+41sU=
Subject key identifier:   FA:C0:1A:0F:6D:2F:F7:21:06:C9:48:E2:29:45:86:E0:F2:12:A4:9D
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       019FA907065AB5182081BF730E8EE55105D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          05E8
Signing time:             Tue 28 Jul 2026 14:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:37 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: WY/0WVRUqEOuN6MG/atGQliTb4eHW0KbaFP0Keo2xj8=)
                          2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:06:5a:b5:18:20:81:bf:73:0e:8e:e5:51:05:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Jul 28 14:00:37 2026 GMT
            Not After : Jul 29 14:00:37 2026 GMT
        Subject: CN=fac01a0f6d2ff72106c948e2294586e0f212a49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:1e:b1:6d:bb:20:c4:6f:b5:45:ef:c0:7a:
                    8c:e6:49:0a:01:70:a8:e8:34:61:d1:97:a4:16:72:
                    a1:04:fa:c3:71:17:a7:78:bd:2d:e2:4e:a3:56:c5:
                    1d:08:6e:8d:9e:92:97:8e:8a:34:71:21:b0:15:b5:
                    f1:e9:0d:91:b2:9a:f7:e9:5f:65:5f:c6:50:45:89:
                    ab:cd:25:54:dd:9c:06:34:f4:b7:8f:38:87:ac:c2:
                    59:84:c2:67:0c:ba:42:2c:2e:38:22:b0:d1:88:4b:
                    37:96:3d:12:b5:88:1c:18:e3:0f:f6:da:a9:b5:d7:
                    73:be:81:1f:f5:63:5f:e4:e2:67:02:65:df:f9:74:
                    6c:5c:a0:67:cb:b9:90:6c:be:54:bd:52:45:ef:85:
                    c7:ab:a4:8a:ac:04:de:a1:f3:7a:a5:b7:67:7a:03:
                    2f:d2:81:e0:8a:41:37:67:6e:4d:62:f4:2f:9b:1d:
                    5b:61:f3:5f:22:e0:83:3e:4c:63:1d:42:bd:bb:73:
                    2b:25:e5:a2:08:93:dd:1c:77:b8:2d:a3:03:53:1e:
                    31:65:a9:a6:18:f0:01:22:bd:5d:0b:a3:cc:ce:0d:
                    f4:ca:e5:69:6d:ff:ec:7a:61:1f:60:eb:5a:fe:39:
                    58:8d:20:b3:9e:f1:eb:38:76:be:4e:68:4d:c5:54:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C0:1A:0F:6D:2F:F7:21:06:C9:48:E2:29:45:86:E0:F2:12:A4:9D
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8a:fe:86:59:65:ab:e0:d7:29:e6:c6:61:10:ed:fa:0a:a4:
         f3:c7:cc:8f:a8:be:fe:90:0b:68:0c:ad:f1:c2:45:28:d0:4f:
         bf:ca:4a:08:df:fa:2f:c5:4d:07:11:98:f6:a9:47:ab:bd:85:
         45:a4:a1:0f:c7:e6:53:ba:a5:d1:1d:4a:5b:87:b9:e5:0f:87:
         00:ee:4d:fa:aa:14:d4:58:65:b0:5f:ac:6a:5a:77:cc:16:63:
         46:24:77:93:dc:b4:b9:0b:47:1f:05:af:0a:2f:e5:9b:ad:a3:
         51:d1:c9:37:fe:bc:c5:26:5e:e2:d9:6d:01:36:19:c1:91:ef:
         89:e3:30:9e:75:6a:a6:8a:10:fd:7d:b3:78:22:4d:6e:f6:b7:
         81:c9:37:85:e9:45:a4:04:10:85:d4:1a:ff:10:75:47:b5:ff:
         08:66:aa:ec:60:41:47:6b:b8:40:d5:37:df:3f:24:79:2e:42:
         95:ec:6c:bc:83:5a:e0:86:81:5b:06:80:47:c6:32:6c:f7:3a:
         19:0b:f3:da:36:90:03:4d:c7:25:16:f1:58:c3:a6:92:bb:bc:
         5e:6c:c3:1e:17:48:1c:5c:aa:01:70:71:ad:98:a7:49:cf:d0:
         33:65:c5:6f:c3:f1:d8:e8:32:62:21:16:8c:2c:b7:83:a7:2d:
         f8:f6:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:57:19 2026 by rpki-client