Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File:                     5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier:          HTQTm04bz53oDvPzTPbZt13B52WFsz+F1eS+enG/NOo=
Subject key identifier:   C3:8E:31:C0:CF:CC:28:ED:B2:2C:8F:DD:6C:7C:FE:84:20:84:B3:5F
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer:       /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial:       019FA14DE206272007C41106DEFF93242E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number:          0483
Signing time:             Mon 27 Jul 2026 02:01:03 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:03 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:03 +0000
Files and hashes:         1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: +0qgW1+v/a3OTR+6d4LqAl5CWwgNsdH4cV8PdBdUxZM=)
                          2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:e2:06:27:20:07:c4:11:06:de:ff:93:24:2e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
        Validity
            Not Before: Jul 27 02:01:03 2026 GMT
            Not After : Jul 28 02:01:03 2026 GMT
        Subject: CN=c38e31c0cfcc28edb22c8fdd6c7cfe842084b35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:f0:a0:8c:43:7e:d2:12:d0:a0:5d:37:82:
                    b9:2f:da:8e:fa:0e:c7:0e:69:1b:e5:85:15:80:6f:
                    ea:9c:b1:37:7e:f1:ca:c2:25:e9:dd:ff:6e:82:3f:
                    0d:d3:01:cd:a6:2a:d2:cd:ca:2b:36:e8:ea:77:74:
                    f6:99:af:ec:92:79:3a:52:c2:bc:b4:92:e3:f1:99:
                    a0:54:a2:28:93:d3:df:32:ab:e5:10:0d:2b:40:f0:
                    80:3a:08:1c:80:56:3e:a2:2b:85:f1:e6:08:27:9a:
                    5f:de:63:8a:9f:76:38:70:f4:05:bd:7c:42:84:b3:
                    c8:d0:64:5b:b5:c6:ae:a1:74:50:c8:dd:6a:75:ba:
                    87:34:03:5b:ca:1e:2e:dc:80:3a:17:49:29:bf:c0:
                    e2:9e:41:9d:cb:29:a2:ed:8e:c5:0c:f0:f0:bd:13:
                    28:a1:34:6a:b1:91:b8:b1:fd:9d:dd:88:b2:2c:60:
                    83:08:a5:be:b1:79:e5:d0:6e:ee:54:5a:66:26:48:
                    f1:5e:73:9f:c0:cc:53:29:bb:6e:d1:b8:d9:cd:05:
                    e6:29:1a:60:ec:ba:ed:cc:32:b9:df:d4:56:fe:58:
                    ba:69:03:2c:d4:3b:66:54:60:59:4c:f3:e1:1c:04:
                    14:be:39:1a:96:31:14:61:32:8a:df:57:56:84:41:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8E:31:C0:CF:CC:28:ED:B2:2C:8F:DD:6C:7C:FE:84:20:84:B3:5F
            X509v3 Authority Key Identifier:
                keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1b:d1:3f:15:06:ee:fa:59:87:ed:df:2d:70:2e:c2:c7:64:
         68:ea:3e:65:56:31:f4:cb:02:08:79:c9:1b:04:d9:82:6e:b3:
         33:d4:1f:99:8c:3d:d4:f0:4d:8f:6a:01:92:59:ab:bb:1e:34:
         1f:b2:08:2f:79:00:99:cb:49:94:37:d6:74:01:ac:16:ad:d8:
         a3:7b:6d:e3:84:05:8e:08:f3:80:e3:0a:8c:c4:d6:81:a4:ca:
         ff:7c:0b:1a:52:71:49:44:e8:b6:24:39:d1:31:98:52:a8:99:
         dc:36:fd:28:89:ba:b2:bb:53:44:ea:1f:b7:bd:64:d2:73:0d:
         cc:4d:f4:09:aa:c7:1d:7e:0d:3d:39:0f:7d:f6:f4:82:71:5a:
         27:71:ef:1d:60:7c:f5:b5:09:51:7c:db:4f:ae:37:57:bf:24:
         b6:6d:17:c1:fe:f1:b3:d9:37:81:b3:14:e3:69:40:06:d5:99:
         0a:f3:f9:2b:3f:e7:46:67:f1:53:a7:6c:70:f8:7c:f1:0b:d5:
         16:85:25:e1:f3:37:10:45:a6:1b:b7:89:14:fb:fe:b6:12:1e:
         33:08:68:01:c0:3b:4e:62:47:03:49:3c:e4:47:eb:a1:44:10:
         ab:99:7b:d1:67:5e:89:b1:99:a9:eb:db:01:12:30:17:02:c8:
         67:dd:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:53 2026 by rpki-client