Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File:                     5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier:          jjOd0bEowpeMNz9Lv/7yMZy+vQLwpQlrm/miF6MIBdQ=
Subject key identifier:   D5:B9:5F:05:10:57:03:59:B7:38:3B:AA:80:83:D0:E4:3D:4B:1C:1E
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer:       /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial:       019FAA886FE98D795A878E34133C3A322E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number:          0C89
Signing time:             Tue 28 Jul 2026 21:01:35 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:35 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:35 +0000
Files and hashes:         1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: S5CKdJ6sK4EBdzluyQfrze6vmMGHb3PyKCJp1aK4Xgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:6f:e9:8d:79:5a:87:8e:34:13:3c:3a:32:2e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
        Validity
            Not Before: Jul 28 21:01:35 2026 GMT
            Not After : Jul 29 21:01:35 2026 GMT
        Subject: CN=d5b95f0510570359b7383baa8083d0e43d4b1c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:92:b8:45:36:9c:0c:97:11:db:fd:2c:26:9c:
                    c1:13:a7:97:24:d3:11:a3:fa:b7:7f:17:1b:58:5b:
                    fb:d4:cc:64:dd:08:50:bc:eb:0f:80:39:84:43:c8:
                    21:f1:36:44:ca:f7:d9:02:85:f6:1d:c4:2d:be:9b:
                    9d:18:37:56:d5:ef:50:70:6c:ce:96:28:3a:3a:23:
                    7c:77:de:6c:03:23:1e:5d:2b:42:e6:c9:b2:6a:76:
                    c4:c1:a8:02:6f:b4:3a:66:fb:c1:94:c3:7a:5e:52:
                    b4:a7:61:e8:d8:b8:f8:00:60:59:f7:be:08:ec:45:
                    72:61:d4:24:8e:4d:02:e4:4a:a6:77:0c:b9:3e:58:
                    b9:0d:a8:10:0f:91:08:5d:57:ef:a0:f7:aa:38:c9:
                    ec:68:90:70:a3:68:ad:ce:c6:6c:6f:2a:4d:52:ce:
                    03:45:06:32:68:49:d3:7b:50:e9:be:71:8c:8d:57:
                    05:af:e2:d8:b2:77:1e:a9:6c:43:43:46:da:b6:37:
                    fa:28:b0:c8:cc:f1:da:f7:8c:86:d1:f7:d0:3e:d6:
                    d4:0a:c2:41:2a:a7:0e:8a:3a:64:83:8d:3e:56:7d:
                    11:60:47:b2:51:5c:71:35:7e:a2:2f:2e:62:07:79:
                    e4:92:27:75:3f:6b:3d:d9:7e:f5:80:f4:5e:25:34:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:5F:05:10:57:03:59:B7:38:3B:AA:80:83:D0:E4:3D:4B:1C:1E
            X509v3 Authority Key Identifier:
                keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:38:40:29:c5:76:e3:20:02:69:6a:2a:24:7a:da:6b:21:
         34:f5:52:db:32:63:c9:cd:ea:ae:44:91:95:6e:0f:47:c1:ba:
         98:b1:79:87:83:59:87:50:bf:3b:f0:68:4d:8c:f8:86:8d:43:
         5a:1e:7d:35:df:93:ab:55:d2:38:e4:b0:8f:5e:2c:fc:70:84:
         b2:02:5c:e4:be:26:dd:49:ed:2a:20:78:45:db:c1:9e:8b:05:
         7f:37:b9:1c:52:d1:aa:00:1e:bb:50:2c:af:72:82:9f:51:29:
         d0:12:14:86:ff:b2:20:f6:c0:9a:18:66:9a:c0:26:75:ea:63:
         b0:18:eb:05:83:f4:07:6b:90:fa:93:6c:96:2e:d2:b2:0f:72:
         83:be:42:cb:6f:d1:01:ca:04:cc:ed:30:55:02:74:4d:08:82:
         42:ae:43:fd:78:7b:1a:f6:00:07:3a:15:f1:8d:21:cd:6e:4c:
         b5:c2:ac:3c:75:fa:bf:df:80:12:28:fe:73:75:a1:a0:93:63:
         bd:58:3d:63:90:4b:79:b9:3e:76:6d:25:26:a3:72:f8:cb:e5:
         39:bd:6c:34:ea:dc:23:44:de:9c:ab:14:55:ba:58:36:08:bf:
         f4:42:ab:35:af:7d:20:2a:d5:66:22:cb:dc:7a:7f:ca:c7:eb:
         e0:cc:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:17 2026 by rpki-client