Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File:                     5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier:          5D4lrzi99ymFfHBqBbVIl2UaqVnN+8+9noSFbPggxuk=
Subject key identifier:   E1:CB:B4:26:9E:0D:14:1D:E4:B8:A5:41:3C:DB:59:B0:B6:A3:A4:F1
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer:       /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial:       019F190CE624CFD1AFA49A49E2CAC1BBF1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number:          0EFD
Signing time:             Tue 30 Jun 2026 15:01:43 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:43 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:43 +0000
Files and hashes:         1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: ysuT9XIIwidmgc1LdzzTGIJQ0smD+CW4inmlCeyI1i0=)
                          2: X5xasRCAPW_8AqrOyyfOnavLV3w.roa (hash: MKvIXTaUYcBmqhG/1QMaETUtrI13kI75foPOMSHT8WU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:e6:24:cf:d1:af:a4:9a:49:e2:ca:c1:bb:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
        Validity
            Not Before: Jun 30 15:01:43 2026 GMT
            Not After : Jul  1 15:01:43 2026 GMT
        Subject: CN=e1cbb4269e0d141de4b8a5413cdb59b0b6a3a4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f6:a5:fc:85:5f:3c:90:16:1f:34:74:5c:5a:
                    b8:4e:c0:ec:18:6a:72:ca:ce:36:8e:c5:b8:a1:a6:
                    7b:3d:d6:10:b2:e6:ba:3f:7c:a0:92:da:3b:86:3b:
                    83:c0:da:36:90:1e:a5:cc:8b:b0:22:1f:08:b9:9c:
                    48:2b:a6:df:40:a5:8e:30:23:77:a1:cd:ce:81:16:
                    38:12:94:22:28:88:66:d8:5e:7a:73:2b:03:a3:a8:
                    e4:f0:dc:c8:f6:50:d0:c6:f2:96:90:28:3f:c8:b0:
                    0d:01:32:7c:1e:93:6f:35:c2:31:49:53:ba:19:11:
                    25:30:fc:93:63:32:f4:37:ea:90:af:a6:08:9b:6c:
                    79:98:2e:b6:1e:db:be:9e:e5:b5:9c:e1:13:2b:4e:
                    6f:e7:66:9c:95:a0:45:89:80:29:c4:32:7f:87:30:
                    91:3b:38:06:67:ce:0e:bf:59:f6:75:ff:ac:ea:e2:
                    1e:fe:42:4e:09:1c:f8:cf:25:b4:09:63:34:27:43:
                    5d:fa:02:86:f8:dd:d0:4a:9b:35:fd:4d:88:2d:62:
                    ad:6c:11:8c:2f:dd:f0:29:91:8c:70:10:23:eb:5c:
                    4b:df:7c:6e:06:0c:13:c1:27:bb:c3:cc:00:ca:5c:
                    46:57:5d:1f:6a:b9:80:4e:5f:37:86:ae:e9:e1:13:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CB:B4:26:9E:0D:14:1D:E4:B8:A5:41:3C:DB:59:B0:B6:A3:A4:F1
            X509v3 Authority Key Identifier:
                keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c3:28:6f:9d:36:5a:f6:1f:e5:e7:89:b0:32:c5:51:81:91:
         f8:e8:24:ee:63:b7:09:07:ec:67:b7:3a:81:ce:26:83:4a:5e:
         29:43:f1:4b:8a:aa:43:f0:85:48:73:66:76:c2:dd:96:84:77:
         9c:50:ea:38:50:de:a9:8c:2b:19:20:53:a7:ce:5d:3e:f3:74:
         ff:84:ce:b8:7e:a4:fb:a5:93:9f:1b:b7:8d:55:94:bb:a7:43:
         0c:aa:2d:90:97:2f:33:23:5b:ea:58:46:b2:e1:1c:87:6d:e2:
         2e:29:4f:24:ea:6a:5d:18:28:b3:d2:08:92:23:42:28:75:e5:
         ee:69:55:b5:d8:f7:83:d4:a4:17:fc:43:65:0c:6c:05:07:a4:
         1d:8e:37:f0:1e:91:2d:30:fa:61:e3:d9:7c:24:f0:1a:fe:42:
         3d:88:8c:38:e4:87:51:30:03:93:23:63:46:6d:14:b0:ee:a8:
         9c:7e:0a:61:8e:25:aa:7a:b6:24:86:34:29:8d:7a:29:4b:30:
         50:d6:94:16:40:88:dd:71:7b:72:55:26:b3:42:e6:c6:85:02:
         ae:06:2d:19:8f:6a:7d:88:bf:7e:86:e6:b5:75:33:4d:96:77:
         e5:6f:45:43:69:d2:97:be:4b:01:5b:c8:e5:1d:41:39:c2:bc:
         a5:0f:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:59 2026 by rpki-client