Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft
File:                     5iZBnHp8u1opWmA-HiCrWIBGqNU.mft (raw, json)
Hash identifier:          Sv+4NydkQMKXTQDPb7bEs6cAUDFamQ84TBIxq0ZmZ5Q=
Subject key identifier:   1C:F3:D7:B2:9C:E6:5E:52:16:31:C3:FA:E7:27:0B:8E:A9:4F:F5:4A
Authority key identifier: E6:26:41:9C:7A:7C:BB:5A:29:5A:60:3E:1E:20:AB:58:80:46:A8:D5
Certificate issuer:       /CN=e626419c7a7cbb5a295a603e1e20ab588046a8d5
Certificate serial:       01A1871AF8510BB990D2969879CE6D5074E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft
Manifest number:          72
Signing time:             Thu 29 Oct 2026 10:00:53 +0000
Manifest this update:     Thu 29 Oct 2026 10:00:53 +0000
Manifest next update:     Fri 30 Oct 2026 10:00:53 +0000
Files and hashes:         1: 5iZBnHp8u1opWmA-HiCrWIBGqNU.crl (hash: YvBtYlBdD/zFJaPljlgmvgWFrxexCaBAcBYKUZlDHso=)
                          2: R_VE7I1x806EwoUXiVIa0NbmKcE.roa (hash: ZLm5fL0I7xiA37P8uAbGttpZNuJsPoY5cD/EgAdWn4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:1a:f8:51:0b:b9:90:d2:96:98:79:ce:6d:50:74:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e626419c7a7cbb5a295a603e1e20ab588046a8d5
        Validity
            Not Before: Oct 29 10:00:53 2026 GMT
            Not After : Oct 30 10:00:53 2026 GMT
        Subject: CN=1cf3d7b29ce65e521631c3fae7270b8ea94ff54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:49:16:be:76:53:a1:30:6c:5f:b0:68:f5:
                    fd:cb:ed:39:e0:99:25:b1:7b:d3:f8:90:c6:28:12:
                    cb:6f:a0:62:c4:13:e9:05:5a:ee:a7:d2:29:7d:f7:
                    c2:9d:29:a7:34:62:7f:88:9b:91:bc:57:47:0b:d0:
                    63:72:56:ab:53:ff:b7:a2:54:f8:12:f9:09:14:e2:
                    fb:85:82:1b:0c:19:71:4c:88:88:7e:7e:19:a7:f7:
                    0e:0a:df:bb:8b:75:d2:af:7c:82:da:50:bb:37:c8:
                    b8:60:27:25:d6:d9:13:72:2f:77:11:57:7f:64:61:
                    d7:b0:f3:d1:b9:2e:c6:b1:57:48:47:db:59:0f:dc:
                    be:11:f1:d8:49:2b:21:c7:c1:c3:e2:54:74:f4:0a:
                    0c:82:77:36:88:be:64:84:aa:4d:51:be:82:ee:e8:
                    d7:f4:14:30:b6:e9:c7:08:52:36:d6:1c:d4:37:8e:
                    60:ba:26:c5:d0:7c:db:13:47:08:4f:a8:fe:e6:65:
                    2f:f5:c6:11:42:2d:b0:91:50:98:2d:7b:53:7b:6a:
                    8f:38:11:91:a6:d3:0d:80:c4:bd:83:db:2a:43:1b:
                    5b:00:33:65:60:55:74:ce:1a:83:9e:b9:1b:5b:14:
                    98:a9:51:ad:91:f2:81:7e:1f:24:25:bf:ba:b1:0d:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F3:D7:B2:9C:E6:5E:52:16:31:C3:FA:E7:27:0B:8E:A9:4F:F5:4A
            X509v3 Authority Key Identifier:
                keyid:E6:26:41:9C:7A:7C:BB:5A:29:5A:60:3E:1E:20:AB:58:80:46:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:a9:2d:0c:b1:52:8d:fd:ca:7f:c7:2f:a1:fc:23:11:ec:
         2f:4c:98:35:37:2a:c0:66:2d:63:a5:cc:26:24:18:a2:9c:ac:
         66:14:0a:fb:2e:9d:48:c9:f7:6d:c3:d0:ee:bc:9e:09:9f:a3:
         40:ce:34:e4:e4:3d:1b:03:a1:22:fb:97:80:44:00:b3:49:b5:
         8b:9e:e8:b6:4c:c7:ea:57:f4:40:61:ec:07:01:1f:08:c1:4c:
         93:a4:ff:2f:55:4d:4a:c1:b1:ba:a0:6b:e5:e8:71:f8:a8:8d:
         d3:df:27:56:2c:c2:f3:03:71:c6:bd:10:a1:37:e3:a5:8a:67:
         c8:aa:f8:ed:ea:91:71:13:c8:78:6e:5b:58:b4:b5:32:bd:46:
         d0:0d:51:47:5d:44:0d:ed:47:89:32:c3:ba:24:6c:d3:e1:43:
         96:bc:d8:a0:ba:15:fd:99:4f:ce:d7:82:bb:25:ca:21:2e:89:
         c9:d8:24:cd:a6:fe:3e:87:59:77:bb:26:77:dd:ef:53:bf:71:
         c3:62:f9:04:a1:ce:e2:fc:21:24:1d:67:8e:f6:99:e0:9e:b9:
         c4:e4:f6:e0:12:ba:97:5f:2b:78:a0:0a:83:cf:df:76:37:4c:
         aa:30:b6:31:cf:23:57:b0:e4:d2:b2:95:76:7b:b0:54:aa:f2:
         c6:a1:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:56:22 2026 by rpki-client