Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File:                     5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier:          zxSQkyG1L9HEESZvd3XJ5TccrhgksRP6ZMasg7/PAf8=
Subject key identifier:   E2:43:37:E3:12:55:A2:0E:B9:1E:A9:63:0A:7D:F8:25:3F:75:15:9E
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer:       /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial:       019F175468857DBFACE1903D146C0949F4E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number:          1984
Signing time:             Tue 30 Jun 2026 07:00:35 +0000
Manifest this update:     Tue 30 Jun 2026 07:00:35 +0000
Manifest next update:     Wed 01 Jul 2026 07:00:35 +0000
Files and hashes:         1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: ERm2BJBrcuC3qzpKmiNENKYgeSFF9SFDLM/q9uOexak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:54:68:85:7d:bf:ac:e1:90:3d:14:6c:09:49:f4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
        Validity
            Not Before: Jun 30 07:00:35 2026 GMT
            Not After : Jul  1 07:00:35 2026 GMT
        Subject: CN=e24337e31255a20eb91ea9630a7df8253f75159e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:1b:81:39:e5:80:c8:b2:ec:b4:11:51:ee:
                    f1:8e:db:94:5b:da:a5:32:c6:1f:32:3e:fb:f0:3e:
                    d1:75:5d:80:a9:33:de:80:8e:80:c1:34:87:58:1e:
                    2f:ce:ff:66:b9:0b:b3:0a:ae:aa:4e:47:1f:3d:22:
                    18:b2:ee:7f:70:b7:19:b1:97:04:01:28:28:ff:57:
                    52:01:7f:51:b5:0b:a4:37:87:75:a9:41:f7:ae:4b:
                    0f:88:2f:f2:48:c5:3a:7f:f9:a4:6d:36:ce:03:c4:
                    f0:56:04:2d:0c:33:1b:3e:6b:e5:be:57:55:61:16:
                    dc:0b:d3:6d:13:ab:e5:67:d0:74:f0:29:c5:45:f4:
                    eb:e7:bf:67:4a:18:bd:23:6a:1c:99:ee:25:4d:ca:
                    70:02:54:87:8c:25:c3:2c:a8:79:01:c8:c6:84:bd:
                    14:00:14:38:8e:7f:e9:bf:f1:d1:1b:44:31:70:26:
                    10:70:02:76:7c:d5:e3:28:04:c9:ca:a5:a2:b7:25:
                    60:00:31:6a:22:23:57:37:df:c3:9b:0c:b3:d8:5d:
                    b5:67:b9:22:42:b0:ae:63:79:5c:5d:6e:f2:44:1d:
                    6e:db:ac:8c:39:42:7a:ea:9f:7e:e7:ac:04:39:3c:
                    5a:ab:01:3c:71:b4:5a:74:3b:4c:20:c9:83:fe:b6:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:43:37:E3:12:55:A2:0E:B9:1E:A9:63:0A:7D:F8:25:3F:75:15:9E
            X509v3 Authority Key Identifier:
                keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bf:4b:63:85:94:5d:38:73:b8:b7:54:c4:ad:e5:5a:3f:95:
         14:b6:f1:61:ae:e7:a8:c7:75:af:02:aa:fb:7b:42:52:4c:ad:
         9e:1f:c2:82:fa:9d:be:45:fc:b2:ac:a2:71:c7:66:8c:41:65:
         86:77:aa:b7:14:54:d2:3b:1d:46:58:81:13:94:0a:a5:cf:83:
         d2:c3:99:69:9e:93:97:1b:35:23:1e:6f:23:19:52:a5:98:cb:
         b3:44:36:bf:7c:45:66:a7:9a:70:16:14:c1:99:80:87:9b:85:
         7f:55:44:c3:c8:42:09:98:7b:51:9f:a0:39:d5:a9:29:1c:2b:
         18:91:a0:ce:60:a6:dd:9e:78:a9:bb:03:09:69:0e:29:f0:02:
         ad:e9:c3:b1:a2:22:3e:3d:ae:07:06:b3:d7:e9:e3:5f:dc:85:
         69:f7:ee:4c:6c:05:e8:a4:77:29:0e:7f:3e:d6:91:9a:e1:5e:
         26:fb:51:f8:2a:fc:7c:7c:44:0d:2c:2e:44:50:ab:84:7b:61:
         c1:9e:37:a6:d7:27:ed:53:40:a1:f5:a1:3b:1c:81:3f:4f:d7:
         d3:7c:a3:ed:7e:10:02:af:09:7f:de:d1:e3:74:38:67:29:d8:
         42:cf:8e:43:96:ba:a9:05:55:d4:4d:34:22:09:e3:0a:f5:64:
         81:97:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:56 2026 by rpki-client