Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File:                     5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier:          WakyKaUlHXGWgjnBI+vpT5daQORW0MzY4FaLOO4vLyw=
Subject key identifier:   E5:89:D0:89:9F:C5:BC:61:D7:EC:A0:F0:0C:E7:71:0F:19:F7:AD:16
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer:       /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial:       019F18D67A507201B4E1D45539B5435B0CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number:          1304
Signing time:             Tue 30 Jun 2026 14:02:16 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:16 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:16 +0000
Files and hashes:         1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: bia96kxaiJtyd/DpDMZZUJ4mhZhyLPCn7kAsScdtyd8=)
                          2: wnKKZs8CL5sITpd1bsL8mCN_whw.roa (hash: x/oWyELUEfox1cdM+OjmJcPeW5wZ59veRKaEMseu1OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:7a:50:72:01:b4:e1:d4:55:39:b5:43:5b:0c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
        Validity
            Not Before: Jun 30 14:02:16 2026 GMT
            Not After : Jul  1 14:02:16 2026 GMT
        Subject: CN=e589d0899fc5bc61d7eca0f00ce7710f19f7ad16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:21:70:00:5b:1c:e3:48:ac:ad:4e:0c:e9:
                    18:75:18:54:95:ae:7c:82:60:f4:14:0e:4e:2d:74:
                    e2:59:14:c1:ca:36:d0:f5:02:67:1d:96:e2:16:cc:
                    a1:87:7b:6b:a8:10:a3:ca:9d:ff:ce:26:44:31:57:
                    cf:7f:a8:f3:2b:95:e1:ed:df:0a:c5:50:8e:b3:d3:
                    39:69:c1:6f:44:19:56:c3:80:1a:1f:a0:4f:85:2f:
                    d7:4f:ba:24:ff:b8:2a:94:5e:fa:ac:e0:1b:1c:58:
                    5b:36:3a:05:5a:f8:ba:cb:a2:a0:85:8c:8b:aa:d4:
                    13:28:d8:57:98:8f:51:51:9e:78:d9:8e:cd:57:2c:
                    6e:54:d4:80:a5:5e:d0:9c:23:e3:d1:cc:c3:a1:ac:
                    e9:2d:ce:73:31:dc:6c:6d:f9:aa:31:75:da:39:73:
                    d2:21:34:ed:8b:46:66:8d:4e:c4:a9:51:e7:d1:9c:
                    64:cb:83:fa:17:ee:10:21:57:06:e4:5d:28:d5:da:
                    02:bd:78:95:8d:92:f2:67:47:7c:7e:03:82:7f:25:
                    b2:1d:db:8c:62:2b:f2:d0:6c:d2:73:5c:08:1a:6b:
                    f9:a7:6a:90:8e:0f:49:7b:f8:b6:94:8e:16:08:48:
                    d6:75:10:10:1e:0c:cf:62:16:5a:c3:47:d9:bf:9c:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:89:D0:89:9F:C5:BC:61:D7:EC:A0:F0:0C:E7:71:0F:19:F7:AD:16
            X509v3 Authority Key Identifier:
                keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:22:28:0c:90:7d:3a:5a:1c:6a:2d:af:4c:0b:e4:34:62:40:
         10:fe:f6:cb:6a:74:c6:9b:e9:16:cb:a1:07:2b:dc:af:34:df:
         4f:5f:f2:97:74:7a:ae:43:d4:8b:55:64:13:52:89:32:2a:9f:
         a5:b1:9b:c1:84:9a:86:49:77:b0:84:fb:9d:26:83:98:99:2b:
         90:ac:8c:8c:8a:1c:9d:3b:5e:92:2f:70:84:c0:6d:6a:40:d2:
         b0:d5:f8:60:94:b4:89:37:78:db:75:b0:01:df:02:f8:96:90:
         8c:48:25:21:0b:81:4d:0c:a5:8b:ff:3b:17:75:ee:18:c0:35:
         ed:7b:da:88:41:7d:4e:f8:41:1e:7a:85:3f:5e:27:45:12:2d:
         d7:b9:1a:b9:37:e6:63:05:58:7b:d2:ee:0e:8e:5e:72:49:49:
         c2:36:40:e3:46:75:8d:4c:df:cf:5a:24:db:2b:e5:3d:e8:bc:
         6c:c6:e1:d5:25:09:30:62:51:42:b5:a3:9e:1e:fe:93:d9:6a:
         23:b4:40:15:cd:e8:70:d9:e9:02:2c:24:eb:e1:9d:14:55:d5:
         64:96:28:db:1e:a2:d3:ab:2a:0b:4a:06:0c:c9:c1:6e:ff:f9:
         4c:5a:b1:e4:17:42:d2:41:b8:0d:10:0a:b6:d6:44:a1:f6:35:
         0d:94:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:14 2026 by rpki-client