Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          IzY/Th1B0hqefHh9lk2ZbZBk7Rq/ZjJvBo8KieVUsbE=
Subject key identifier:   5C:A1:C5:FE:01:F6:BC:2D:DC:F5:02:43:5F:E4:ED:3D:12:49:A0:EA
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       019F190D61B85C89128E7060A290D9E45944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          0932
Signing time:             Tue 30 Jun 2026 15:02:14 +0000
Manifest this update:     Tue 30 Jun 2026 15:02:14 +0000
Manifest next update:     Wed 01 Jul 2026 15:02:14 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: pTktgBkpcSLhVHnToPGjr+kEgwVnni6fBAmAF7wKIQU=)
                          2: 5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa (hash: 9owh74vfAaCJ/1OVELmifFfpJ8uxpYLTHNGPMitNfLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:61:b8:5c:89:12:8e:70:60:a2:90:d9:e4:59:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Jun 30 15:02:14 2026 GMT
            Not After : Jul  1 15:02:14 2026 GMT
        Subject: CN=5ca1c5fe01f6bc2ddcf502435fe4ed3d1249a0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:67:48:6b:94:7e:3a:30:04:1d:10:ed:3c:
                    bc:42:92:e1:5f:0b:d4:5e:81:3b:7e:7f:d6:27:c1:
                    ad:b5:7e:d5:dd:7d:4e:86:3b:15:d1:62:1e:9f:cb:
                    4a:73:47:e3:13:9a:6e:8b:bc:5d:cb:99:0a:39:d2:
                    57:0a:4a:fe:aa:51:f3:3e:57:dd:df:9d:50:3d:51:
                    23:72:57:e2:86:9a:5c:07:cb:d9:1e:51:05:b7:e9:
                    f9:81:ca:2c:e7:71:ad:6a:2d:24:d6:67:bc:67:cb:
                    67:5d:f5:09:91:ef:39:29:58:be:f8:9f:70:ed:35:
                    df:8c:3c:14:fb:c9:43:da:39:65:63:10:e7:f6:45:
                    f9:ae:1d:41:83:d1:70:64:da:92:69:aa:e9:2d:76:
                    47:d0:24:9f:46:5b:38:10:47:09:79:9b:d2:6e:69:
                    cf:9e:ff:75:c0:a9:04:49:c2:dd:d2:48:4b:50:a2:
                    d9:c4:b2:1c:12:ad:b1:a8:6a:8a:3f:9b:86:6d:05:
                    41:4c:77:b7:86:55:3c:dc:55:9b:9c:01:38:11:6a:
                    54:61:6c:6a:87:cd:89:13:11:5b:23:97:72:43:70:
                    53:d8:27:11:6f:cc:f2:9b:c0:0a:0b:61:4a:e0:a5:
                    ac:9a:8d:5e:f6:06:43:59:25:2f:c8:77:b3:c7:1e:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A1:C5:FE:01:F6:BC:2D:DC:F5:02:43:5F:E4:ED:3D:12:49:A0:EA
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:c9:e8:68:53:42:1f:b1:b7:59:bb:0f:79:63:57:23:4f:
         87:43:b0:d9:2a:1f:43:89:8a:36:d8:88:50:3f:ae:cf:ca:7a:
         51:b4:87:ba:71:a4:2a:62:ab:b5:b3:9c:6a:61:0b:f0:0a:90:
         f2:7f:fb:b2:10:ce:3c:69:41:41:f4:75:cf:dc:ac:f8:66:e3:
         20:dc:e7:dc:23:4c:57:48:1d:7b:d3:a7:c2:8b:db:3e:b6:6f:
         e9:35:2c:6e:7d:1b:63:73:60:19:3f:e4:d6:d7:b3:15:22:75:
         f7:c2:0c:85:5d:a5:d4:2b:2d:fe:27:c3:fd:d3:7e:77:9c:f5:
         3e:5c:72:dd:3f:71:d1:30:cc:32:ea:54:f7:46:3d:be:e8:3a:
         ee:c8:84:7e:fe:42:c3:1c:fc:f7:4a:58:a7:ed:f8:ed:92:dd:
         6f:44:fc:0f:18:c8:b1:57:53:bb:8a:cf:8f:1e:82:11:d5:da:
         6c:91:43:da:a2:32:14:82:e7:51:cc:8d:1b:2e:b8:4d:42:3c:
         64:ca:6b:5c:7d:7d:de:a6:e5:2a:2b:80:af:93:95:00:b5:96:
         ca:71:c2:61:7d:e1:01:e4:75:e0:d7:b5:09:25:c4:99:4d:49:
         8b:c7:11:04:f2:10:43:65:8a:e7:78:8d:cc:a0:05:33:4d:bc:
         0e:2d:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:39 2026 by rpki-client