Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File:                     5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier:          uz565Rhok3eNm4kyvWXkKuENxG0oANF3cTMwXKttRNk=
Subject key identifier:   32:1C:B7:5E:FF:F8:89:1A:02:84:63:AC:10:21:B0:09:E8:5A:73:2A
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer:       /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial:       019F17FA011E048EB1F8A372407926C5C0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number:          1993
Signing time:             Tue 30 Jun 2026 10:01:27 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:27 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:27 +0000
Files and hashes:         1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: jzNqqLfitpxWpVRoDDbkw77pYS3078HC1q/L/wdq/z0=)
                          2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=)
                          3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=)
                          4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=)
                          5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=)
                          6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=)
                          7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=)
                          8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:fa:01:1e:04:8e:b1:f8:a3:72:40:79:26:c5:c0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
        Validity
            Not Before: Jun 30 10:01:27 2026 GMT
            Not After : Jul  1 10:01:27 2026 GMT
        Subject: CN=321cb75efff8891a028463ac1021b009e85a732a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:d5:b1:37:ae:34:0a:67:5f:07:b0:28:98:
                    26:cf:2f:44:52:79:d8:d8:91:2c:10:ce:23:25:49:
                    2a:b1:f3:09:ae:ba:18:93:5f:47:c3:35:06:09:8f:
                    5f:ba:42:51:bb:42:c1:ca:2c:7b:1c:1c:e3:36:11:
                    c5:38:b4:91:79:39:f2:e7:4b:24:3e:b0:2c:b0:7a:
                    dd:42:96:ce:75:dd:34:82:50:f4:c2:75:07:51:9c:
                    85:70:b6:68:a0:7e:80:c0:99:a9:90:1a:02:80:d6:
                    d6:c2:2e:52:09:65:84:f6:cc:30:97:66:4c:d5:2f:
                    90:3a:f9:b8:e1:51:2c:b3:28:4e:72:9a:cb:01:e8:
                    98:fb:f5:b1:b4:3a:15:59:4b:51:e9:a9:c9:e3:82:
                    39:9d:c4:16:8c:86:1d:65:ac:1d:44:eb:28:0d:c6:
                    db:47:56:3b:a3:f2:af:d2:f9:3a:af:54:a6:96:d1:
                    5c:d8:27:55:a1:38:b0:1d:aa:25:45:89:5d:20:f6:
                    44:2e:c6:34:98:74:35:89:6a:d6:52:42:48:e2:4e:
                    1f:18:5b:42:ba:91:ca:4e:fd:2c:ff:6c:d3:13:ed:
                    f6:c8:fd:32:85:64:8b:3b:55:64:05:3c:d6:42:da:
                    02:5f:24:70:da:2d:b2:df:b1:2a:4f:43:09:58:a7:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1C:B7:5E:FF:F8:89:1A:02:84:63:AC:10:21:B0:09:E8:5A:73:2A
            X509v3 Authority Key Identifier:
                keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1f:37:59:82:0a:a1:7f:79:93:f0:54:68:ed:4e:49:36:01:
         bd:31:e6:0a:35:c2:cb:ec:1a:8c:d0:a3:3c:9f:62:16:94:1b:
         ab:ba:34:24:2b:4f:a5:c9:8c:7c:ad:d0:d4:ad:08:e0:6d:ae:
         1c:4b:d8:2d:a7:b2:6d:ca:e7:ef:c5:76:dc:d0:ec:ee:ea:fd:
         8b:80:71:f1:74:91:be:6b:22:be:ec:25:bf:0d:d2:4c:b0:6f:
         ac:71:fb:27:c8:5a:5e:a2:c8:20:ab:8a:0f:5a:78:d4:cf:0b:
         09:a1:aa:80:bf:8c:13:a9:74:f2:18:0b:a2:11:d9:e3:4a:8e:
         42:10:15:fe:73:bf:a9:4a:30:95:d9:d5:e0:24:a6:39:78:a2:
         b4:8f:72:b4:4d:a4:63:0b:3e:50:33:c1:1b:f7:47:e8:e8:c4:
         46:aa:34:82:6b:0f:6e:3e:d7:fa:94:55:b9:7d:19:b9:80:eb:
         ef:22:2f:b4:53:39:45:c9:af:9d:52:c0:5f:e2:16:de:33:ad:
         b6:bf:c5:f1:e6:ff:19:bd:94:65:c8:4c:5b:3f:d0:8f:4a:fe:
         a1:5d:3f:12:74:a5:b1:05:d9:ac:e1:73:de:d2:0b:9f:8d:20:
         1e:45:24:3b:77:7f:ae:56:47:2c:a5:05:f2:29:a4:46:48:52:
         7c:ef:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:16 2026 by rpki-client