Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          BgFE7k8mag+p500ti594bvKNjeWQiiDheBgBYjBeCpY=
Subject key identifier:   8C:8E:B5:BC:0F:49:18:5F:DE:3A:64:E9:55:CD:EB:65:8B:80:90:0E
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       019F190CDA1DE4434042C861670EB3351444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          1922
Signing time:             Tue 30 Jun 2026 15:01:40 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:40 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:40 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: khZwnQ97AFEDViVr0b6iLusR5Si4JwxtSGMh2kAi8cc=)
                          2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:da:1d:e4:43:40:42:c8:61:67:0e:b3:35:14:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: Jun 30 15:01:40 2026 GMT
            Not After : Jul  1 15:01:40 2026 GMT
        Subject: CN=8c8eb5bc0f49185fde3a64e955cdeb658b80900e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:05:b3:92:cc:a5:26:fd:fe:b0:34:9b:3a:
                    35:22:7b:dc:a8:3b:5b:86:7f:20:34:3f:86:d5:fc:
                    d2:fc:9d:ab:d7:45:de:7f:13:81:eb:4e:47:30:f3:
                    12:b5:f3:0a:45:a2:64:79:6f:77:50:63:5d:82:f7:
                    b5:aa:b9:57:35:e1:8b:9e:f0:66:08:73:98:53:60:
                    ec:a6:a1:d5:c1:0c:d9:64:d4:3f:9f:56:63:f0:a9:
                    2e:41:7e:f2:23:3f:84:8d:d1:8a:aa:4d:41:cf:9d:
                    0f:b0:d9:ce:b9:50:43:bc:2e:a7:6d:9e:42:9f:f0:
                    c9:8a:40:44:ff:61:0f:34:7f:52:4d:ef:ef:7a:3a:
                    fd:c2:d0:ae:b5:bf:1c:58:5c:18:c8:09:1d:cb:db:
                    d1:50:b8:5e:41:62:a2:84:ca:9d:26:3e:92:cb:d0:
                    f8:b4:0b:eb:6b:f4:13:f4:5c:e1:6a:2e:a6:5f:df:
                    e7:86:92:43:a3:2a:f1:a3:f2:81:a6:a5:04:4e:13:
                    e1:ea:a3:6e:80:a0:b3:c3:35:f0:eb:c9:fe:5e:f9:
                    0c:56:de:ce:7b:26:b0:5d:3b:1f:35:b8:1c:04:81:
                    a8:71:46:74:c9:28:1a:56:01:12:5a:48:4b:af:af:
                    2a:9a:31:23:cd:77:be:e9:fc:d8:35:62:e5:be:68:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8E:B5:BC:0F:49:18:5F:DE:3A:64:E9:55:CD:EB:65:8B:80:90:0E
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c6:3b:4a:fb:55:9c:94:da:6b:01:cf:e1:ab:24:6a:4a:42:
         e8:d6:5e:19:13:ab:66:4c:4f:a9:5b:5a:a7:06:65:3a:11:57:
         02:65:98:91:26:98:d7:14:d8:85:49:93:18:5e:1b:25:d1:28:
         e1:49:b0:1e:06:50:7c:de:ac:ce:b8:91:9d:f6:5c:fe:4f:1f:
         7b:8a:14:0c:88:2c:34:c0:e5:36:54:f1:30:5c:d3:7a:80:18:
         15:08:e3:c4:f6:f3:21:ad:7d:91:6a:fc:40:2a:7a:fe:01:36:
         26:2c:e0:03:07:d6:9a:0d:d6:26:3f:12:a2:48:18:e3:fb:71:
         99:95:58:3c:2e:e8:53:c7:af:04:90:f3:a4:13:17:4b:0f:f3:
         e3:2d:82:9f:a7:38:42:b5:2b:71:8a:b7:9e:7a:67:a9:1b:4f:
         ce:f4:2c:aa:db:1e:6b:a0:a6:cf:0a:26:8e:34:75:40:e9:a7:
         fc:73:02:a5:96:54:07:de:5b:b3:9a:7b:f2:4c:90:19:78:68:
         2e:e5:68:29:ce:04:79:81:bf:a4:68:6e:a7:35:c8:b9:c9:34:
         5e:cd:1b:e6:2b:78:9e:92:0a:f0:5e:e6:00:7e:98:8e:65:69:
         cb:f6:26:cf:68:22:dc:d3:a9:e3:70:e2:88:e2:bb:c5:da:b8:
         0b:a7:fa:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDNod5ENAQshhZw6zNRREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NDNmYzIwM2Y3MDZmOTczMTQxMjc2MWIyN2ExYTRiMzk1
Y2ZjMWUwHhcNMjYwNjMwMTUwMTQwWhcNMjYwNzAxMTUwMTQwWjAzMTEwLwYDVQQD
Eyg4YzhlYjViYzBmNDkxODVmZGUzYTY0ZTk1NWNkZWI2NThiODA5MDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1kFs5LMpSb9/rA0mzo1InvcqDtb
hn8gND+G1fzS/J2r10XefxOB605HMPMStfMKRaJkeW93UGNdgve1qrlXNeGLnvBm
CHOYU2DspqHVwQzZZNQ/n1Zj8KkuQX7yIz+EjdGKqk1Bz50PsNnOuVBDvC6nbZ5C
n/DJikBE/2EPNH9STe/vejr9wtCutb8cWFwYyAkdy9vRULheQWKihMqdJj6Sy9D4
tAvra/QT9Fzhai6mX9/nhpJDoyrxo/KBpqUEThPh6qNugKCzwzXw68n+XvkMVt7O
eyawXTsfNbgcBIGocUZ0ySgaVgESWkhLr68qmjEjzXe+6fzYNWLlvmie+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyOtbwPSRhf3jpk6VXN62WLgJAOMB8GA1UdIwQY
MBaAFORD/CA/cG+XMUEnYbJ6Gks5XPweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWIt
YzBmOWQwODdmYzEwLzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWItYzBmOWQwODdmYzEw
LzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMY7SvtV
nJTaawHP4askakpC6NZeGROrZkxPqVtapwZlOhFXAmWYkSaY1xTYhUmTGF4bJdEo
4UmwHgZQfN6szriRnfZc/k8fe4oUDIgsNMDlNlTxMFzTeoAYFQjjxPbzIa19kWr8
QCp6/gE2JizgAwfWmg3WJj8SokgY4/txmZVYPC7oU8evBJDzpBMXSw/z4y2Cn6c4
QrUrcYq3nnpnqRtPzvQsqtsea6CmzwomjjR1QOmn/HMCpZZUB95bs5p78kyQGXho
LuVoKc4EeYG/pGhupzXIuck0Xs0b5it4npIK8F7mAH6YjmVpy/Ymz2gi3NOp43Di
iOK7xdq4C6f62Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:43 2026 by rpki-client