Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
File:                     e25aru9TlinMasqMmqETMUq4UUU.mft (raw, json)
Hash identifier:          LJlTGkr8bRAASM83nrJDX9P6ceeOtVpg9EAsnEuzUwQ=
Subject key identifier:   B5:1B:99:CD:CE:22:8E:BE:40:8A:8A:B2:6B:66:5C:11:DC:25:A8:B5
Authority key identifier: 7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45
Certificate issuer:       /CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
Certificate serial:       019EFD27092A6B8844B7EB4A9202D5691E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
Manifest number:          0113
Signing time:             Thu 25 Jun 2026 05:00:54 +0000
Manifest this update:     Thu 25 Jun 2026 05:00:54 +0000
Manifest next update:     Fri 26 Jun 2026 05:00:54 +0000
Files and hashes:         1: e25aru9TlinMasqMmqETMUq4UUU.crl (hash: WPVQIMyRlXS53AwlsaPq8AzXyDoWcH0ZTl05jr5Dhec=)
                          2: lzBvt8j7QjYQ1ElEK6XgDejWB_s.asa (hash: 5pT8OsSJlMwgdW//vHQ4jVWkbC26ni2BfE6UrfKD9fM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:27:09:2a:6b:88:44:b7:eb:4a:92:02:d5:69:1e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
        Validity
            Not Before: Jun 25 05:00:54 2026 GMT
            Not After : Jun 26 05:00:54 2026 GMT
        Subject: CN=b51b99cdce228ebe408a8ab26b665c11dc25a8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:fa:8c:ee:82:63:a6:9f:0b:22:76:88:9c:
                    f5:a7:5a:59:80:2b:07:ce:4f:fc:f9:04:18:12:ca:
                    3a:c1:ac:05:35:e9:85:4c:38:3d:20:cb:d5:e3:dc:
                    4a:c8:48:f4:02:17:c1:bb:f6:43:c0:13:2f:9b:c8:
                    67:5f:62:53:fd:0b:93:d2:b1:95:47:bb:c2:93:97:
                    55:18:09:cd:2d:62:6b:fb:53:2c:bc:57:4f:4c:7c:
                    f6:8c:f0:67:e0:83:35:fb:04:99:e0:14:98:06:d3:
                    4d:0a:3a:76:62:17:95:77:df:7c:35:16:d8:a8:bb:
                    fb:76:9f:ed:06:9c:3f:96:85:3e:ce:ff:f6:51:25:
                    f4:60:d2:0e:c4:60:e0:7a:9f:c3:f3:1f:d3:dc:02:
                    05:a4:97:cc:3d:77:9c:02:20:88:57:d7:79:db:16:
                    79:cf:97:35:fd:68:d4:e6:3d:8a:d0:4f:46:ac:17:
                    2c:9b:b8:c7:1e:12:a2:96:62:09:52:d3:57:a1:aa:
                    29:6d:d4:74:31:80:35:99:79:95:fb:64:23:b4:dc:
                    99:55:6e:70:22:c6:f7:66:31:6c:58:ec:fe:67:95:
                    bb:d1:fd:55:9a:b7:ca:e1:11:73:12:ce:3e:47:a9:
                    2f:95:23:02:a6:14:54:12:4c:1e:96:fa:03:de:33:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1B:99:CD:CE:22:8E:BE:40:8A:8A:B2:6B:66:5C:11:DC:25:A8:B5
            X509v3 Authority Key Identifier:
                keyid:7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:3f:b5:45:55:e0:35:62:4e:0e:31:35:f7:92:b5:a0:fa:
         1b:65:c0:f1:a9:0f:18:15:40:d7:82:d3:2b:04:e2:26:bb:64:
         a7:28:dd:48:e1:6e:93:9a:9e:45:4b:a0:9f:1d:13:94:ea:8c:
         4a:ee:e0:20:03:0b:a2:f0:b8:ed:37:49:c4:ba:82:18:d9:d8:
         39:e1:85:c6:bc:ef:68:5e:3f:6e:de:4e:ec:3f:89:61:c3:22:
         04:c6:a0:96:42:6a:aa:c5:19:bf:49:25:bd:c7:92:68:de:37:
         70:90:38:57:9a:e9:4e:86:3d:e0:fd:5c:2a:d6:49:50:69:f7:
         95:5c:9c:c6:e3:5f:33:6b:49:b8:8b:29:fa:fe:47:3b:b6:81:
         ef:6c:2b:e1:11:c1:f1:b0:3d:46:b1:fa:cb:31:22:9c:e7:dc:
         d7:53:78:74:7e:77:51:84:3d:6d:50:6d:c6:ae:c5:4c:d2:4d:
         f8:be:e2:a8:98:c4:e7:86:82:72:91:24:f9:fa:88:81:1f:45:
         ff:c9:88:be:36:8d:4e:1d:aa:22:12:d4:fb:f2:90:be:4f:28:
         98:33:cf:21:a4:ab:19:8d:e0:8b:32:3a:b8:f6:50:9b:be:47:
         33:97:8c:51:b2:96:a4:dd:c5:5c:88:8c:13:6f:c0:fc:ee:46:
         86:71:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:35:48 2026 by rpki-client