Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File:                     5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier:          D2GkJg3ZGei2zkclkoMvubUJQRSBxBz0cP45r2m4TSU=
Subject key identifier:   C3:5D:EB:6F:CE:C8:6A:52:F6:FF:AF:8A:27:7D:26:71:DF:38:4A:19
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer:       /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial:       019FA3E0B0B892E079D4BA481FDBA20C4354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number:          037C
Signing time:             Mon 27 Jul 2026 14:00:39 +0000
Manifest this update:     Mon 27 Jul 2026 14:00:39 +0000
Manifest next update:     Tue 28 Jul 2026 14:00:39 +0000
Files and hashes:         1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: pj+HJHzFKTJK2vwEKZhNq8Ns/0EFrBYXQefSlwAUWcw=)
                          2: C2kt_D4OC_bCATP96J0Lcecrh_Q.roa (hash: /GUtwL0d0bHUSEUzfz0h1Hs+05AAyT7TJrjMS7ynWWY=)
                          3: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:e0:b0:b8:92:e0:79:d4:ba:48:1f:db:a2:0c:43:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
        Validity
            Not Before: Jul 27 14:00:39 2026 GMT
            Not After : Jul 28 14:00:39 2026 GMT
        Subject: CN=c35deb6fcec86a52f6ffaf8a277d2671df384a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:c4:28:37:a1:05:2e:16:71:06:b6:8a:4f:
                    03:21:83:4d:e7:e9:bd:de:c5:df:03:1b:b0:92:a5:
                    a4:4b:66:05:96:9b:4b:cd:f5:e3:95:72:99:4b:7c:
                    2f:ce:df:dd:f6:b4:fe:47:b6:d4:f1:d9:b5:2d:96:
                    d4:5e:a3:03:a3:39:ed:03:26:bd:93:72:6d:ae:57:
                    b9:87:12:53:44:1a:47:3a:37:d4:76:98:45:a9:8f:
                    34:50:c3:96:40:1f:fb:4b:fb:20:13:59:b8:44:41:
                    09:ca:e3:63:83:46:9b:60:a2:99:c2:2e:86:39:a3:
                    9f:a5:73:29:c1:0d:cf:4d:93:34:f1:44:64:9f:66:
                    6a:87:ec:3f:bd:ec:d4:58:a4:33:7f:fa:79:6b:24:
                    81:29:2f:e0:59:60:cd:f6:66:aa:a5:98:b2:40:a3:
                    21:ff:e3:0f:db:88:02:d6:6e:83:86:60:a5:61:4a:
                    1b:66:6f:fc:1d:fc:18:e2:f6:91:4d:4f:cb:09:2f:
                    00:0f:30:8e:fc:dc:48:da:38:32:b4:c6:dd:01:ee:
                    f2:be:59:5c:6e:a0:f2:3f:af:a2:1d:b9:e6:23:eb:
                    44:10:3c:8f:9d:fb:cf:48:43:c7:23:85:25:ab:4f:
                    50:45:c6:05:09:34:fc:72:55:c7:6e:c6:b0:bf:1c:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5D:EB:6F:CE:C8:6A:52:F6:FF:AF:8A:27:7D:26:71:DF:38:4A:19
            X509v3 Authority Key Identifier:
                keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4e:66:21:05:44:4a:37:80:e1:1c:d3:9c:16:03:fe:96:35:
         f7:dc:7f:6e:48:b5:94:28:b4:fd:8b:17:a7:93:78:37:1c:06:
         2b:ca:de:d7:b2:af:e9:30:26:1f:6e:e7:41:9a:19:b3:2a:5e:
         d6:7d:21:29:c4:e9:11:d8:04:d5:3d:5a:a4:6c:dc:9f:51:0b:
         6c:0d:52:cf:10:74:9e:7d:ca:93:11:2f:4f:28:c4:e8:6c:70:
         cb:07:ed:c2:71:7d:b9:4f:7f:cd:46:df:13:b3:3b:99:86:f3:
         d3:12:18:05:5f:86:d7:8c:09:80:d1:a1:13:9f:aa:fd:1f:6a:
         b2:0e:f3:73:ba:87:ee:a9:3e:50:2c:7c:8f:a8:e0:43:52:8f:
         24:92:02:fe:c5:5b:9f:df:9b:6e:f5:4b:9c:4d:a8:02:93:70:
         de:39:be:b2:b1:81:ee:35:10:c3:2f:92:42:62:fb:5d:99:eb:
         2b:ef:48:f2:dc:20:62:c3:3d:2b:2c:a9:25:0a:38:fc:62:22:
         3f:bb:05:b6:3b:fc:bf:ff:2e:46:8c:3e:ac:2a:5b:5b:55:4b:
         5f:e1:8e:cf:b8:8a:3a:fc:b2:46:41:2f:06:dc:1d:9e:c9:1d:
         be:e7:25:79:f1:a7:4b:3e:45:e8:09:44:b5:d9:7e:37:d6:55:
         b3:1b:5d:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+j4LC4kuB51LpIH9uiDENUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDUzYzQ3ZjIxZGQ2NjUyYjY3ZmVmNDk1Yzk0ZmRmZDE1
MjhjZWIwHhcNMjYwNzI3MTQwMDM5WhcNMjYwNzI4MTQwMDM5WjAzMTEwLwYDVQQD
EyhjMzVkZWI2ZmNlYzg2YTUyZjZmZmFmOGEyNzdkMjY3MWRmMzg0YTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxTEKDehBS4WcQa2ik8DIYNN5+m9
3sXfAxuwkqWkS2YFlptLzfXjlXKZS3wvzt/d9rT+R7bU8dm1LZbUXqMDozntAya9
k3Jtrle5hxJTRBpHOjfUdphFqY80UMOWQB/7S/sgE1m4REEJyuNjg0abYKKZwi6G
OaOfpXMpwQ3PTZM08URkn2Zqh+w/vezUWKQzf/p5aySBKS/gWWDN9maqpZiyQKMh
/+MP24gC1m6DhmClYUobZm/8HfwY4vaRTU/LCS8ADzCO/NxI2jgytMbdAe7yvllc
bqDyP6+iHbnmI+tEEDyPnfvPSEPHI4Ulq09QRcYFCTT8clXHbsawvxxPHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNd62/OyGpS9v+viid9JnHfOEoZMB8GA1UdIwQY
MBaAFOTVPEfyHdZlK2f+9JXJT9/RUozrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEt
OTVkNTNiNTMxNTQ1LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEtOTVkNTNiNTMxNTQ1
LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE5mIQVE
SjeA4RzTnBYD/pY199x/bki1lCi0/YsXp5N4NxwGK8re17Kv6TAmH27nQZoZsype
1n0hKcTpEdgE1T1apGzcn1ELbA1SzxB0nn3KkxEvTyjE6GxwywftwnF9uU9/zUbf
E7M7mYbz0xIYBV+G14wJgNGhE5+q/R9qsg7zc7qH7qk+UCx8j6jgQ1KPJJIC/sVb
n9+bbvVLnE2oApNw3jm+srGB7jUQwy+SQmL7XZnrK+9I8twgYsM9KyypJQo4/GIi
P7sFtjv8v/8uRow+rCpbW1VLX+GOz7iKOvyyRkEvBtwdnskdvuclefGnSz5F6AlE
tdl+N9ZVsxtd1w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:47:38 2026 by rpki-client