Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
File:                     5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json)
Hash identifier:          3BuYeTkJuk76iFZ0HfHujruKQB3JqTAQV0G5ks6RJRE=
Subject key identifier:   1D:7C:07:8D:98:A1:11:C7:A6:67:C2:A0:78:F6:1C:42:B5:F5:F9:A6
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Certificate issuer:       /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial:       019F11C0D1761D489D85686B21C9CE048499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
Manifest number:          1985
Signing time:             Mon 29 Jun 2026 05:01:16 +0000
Manifest this update:     Mon 29 Jun 2026 05:01:16 +0000
Manifest next update:     Tue 30 Jun 2026 05:01:16 +0000
Files and hashes:         1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: TaeIkiHA1WYzPVtlYOiKQEunfFlJrOqdxA6Ui6g/bUw=)
                          2: RHa6C-9jNNLaQ89byBphWXQhs0Y.roa (hash: MC7bJV6p4PnQ8SBWeR6fNqikexZCV82B1zCu9BiJXRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:d1:76:1d:48:9d:85:68:6b:21:c9:ce:04:84:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
        Validity
            Not Before: Jun 29 05:01:16 2026 GMT
            Not After : Jun 30 05:01:16 2026 GMT
        Subject: CN=1d7c078d98a111c7a667c2a078f61c42b5f5f9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:fe:61:3b:39:98:4c:92:76:bd:cc:af:d8:
                    cd:ed:55:5d:ac:85:13:15:4f:d0:3a:82:e1:85:65:
                    c7:f4:72:fb:f8:1c:6f:20:89:41:1e:c7:0c:2b:1d:
                    0b:fa:84:11:ef:9b:b5:27:4f:ee:3a:3d:ea:0e:d4:
                    a2:3f:05:4b:30:77:f3:98:9f:b0:c3:4b:4a:65:b2:
                    a9:2c:b9:40:f7:4b:d2:70:c3:d9:b8:6c:24:d9:6c:
                    c5:4b:bb:bf:2d:c3:b4:aa:4b:9e:a4:5d:a2:73:6c:
                    5d:86:45:b6:7c:6c:d7:51:99:f9:12:86:9d:4c:c9:
                    5d:8a:52:49:35:8e:e0:8b:89:9e:6c:42:10:87:2f:
                    0b:3e:18:61:06:4b:38:81:93:c5:73:7f:44:3e:1d:
                    a6:ef:42:8d:87:7a:31:d7:6e:b9:e6:33:f6:ad:9f:
                    c0:f4:f3:a2:dc:54:08:76:ef:1c:8e:87:ef:b3:23:
                    64:48:7a:aa:3e:7d:68:8b:1d:36:fb:45:96:fd:60:
                    b4:29:e8:b1:40:d7:1d:63:4f:0d:94:17:68:54:55:
                    eb:f4:24:e3:69:23:18:92:d3:bb:eb:07:5b:f0:c4:
                    7d:07:37:b2:40:24:65:17:03:53:96:5f:a1:d3:8c:
                    71:76:6b:bf:7f:c5:ad:99:43:38:15:09:22:51:e6:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7C:07:8D:98:A1:11:C7:A6:67:C2:A0:78:F6:1C:42:B5:F5:F9:A6
            X509v3 Authority Key Identifier:
                keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f1:c6:d7:09:6d:35:9a:35:43:1f:7f:e9:6f:1e:0a:83:4f:
         39:3d:d0:cd:a1:bd:33:bd:27:7f:10:73:70:b7:1c:ac:59:fd:
         06:31:3d:55:3a:22:dc:af:c4:ec:ad:3b:fc:4f:cf:9b:55:ba:
         cc:9f:3d:2f:37:7a:05:fb:30:c5:cc:64:3c:e1:f3:ff:59:e0:
         d1:33:a7:a8:74:48:1c:ca:c6:60:a3:94:63:f3:9c:1b:19:c0:
         ee:ff:36:3a:0b:b4:23:b5:0a:ca:d6:5b:57:f2:ef:51:7d:f9:
         36:91:c9:c2:87:04:8b:18:3a:c7:3d:54:6c:f5:a8:2c:63:88:
         02:30:01:0c:74:84:98:b4:05:ee:24:ad:d2:ae:56:ab:b6:38:
         62:64:c3:21:76:45:b8:29:b0:95:85:a6:40:22:ab:04:be:43:
         63:47:ad:b5:20:4c:af:af:60:4d:e3:11:e6:f8:66:a5:6f:3d:
         df:1b:11:6e:7c:af:fe:8a:cb:91:bd:13:fe:8c:cd:fc:b8:d0:
         5a:e7:b9:b9:93:6e:5c:c6:22:99:e3:d9:14:c3:cf:9a:c0:40:
         46:3b:f3:8d:e0:8c:91:d6:73:25:c5:cc:1f:e1:f3:bd:8d:cc:
         65:01:a7:f4:b8:55:e9:37:ba:0d:27:99:30:2b:7e:9f:2b:8a:
         5c:df:32:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:52:41 2026 by rpki-client