Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File:                     5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier:          6mtstb/gFvEZJoX45ldvXK/P/y4Gkaxb4VkQlZe9oH4=
Subject key identifier:   24:BE:78:4E:C6:48:F7:55:FC:3E:35:C0:A6:6A:BE:CF:A1:31:EF:A1
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer:       /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial:       019F1867801BED1F210C7EAC1F1401E2E75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number:          0F8F
Signing time:             Tue 30 Jun 2026 12:01:03 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:03 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:03 +0000
Files and hashes:         1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: 36XzCZXVPjZ7MLfL8BkVvOs99wfd/APl3HAhPvjFD9s=)
                          2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:80:1b:ed:1f:21:0c:7e:ac:1f:14:01:e2:e7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
        Validity
            Not Before: Jun 30 12:01:03 2026 GMT
            Not After : Jul  1 12:01:03 2026 GMT
        Subject: CN=24be784ec648f755fc3e35c0a66abecfa131efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:8b:d2:da:8d:18:ea:5b:fd:93:15:7d:dd:
                    e7:84:65:1b:ce:bf:9e:e1:fb:d3:9f:fd:2f:88:82:
                    22:d5:89:e9:6b:da:18:ca:48:69:54:42:cc:ea:76:
                    e6:dc:4c:1d:12:ee:98:37:fc:0d:b4:1a:ee:3c:58:
                    2e:8a:69:f1:2e:bd:71:51:35:a8:80:dd:82:a9:aa:
                    d2:45:85:0d:c6:02:92:a7:28:e0:ca:86:6f:82:0f:
                    e5:32:de:6d:eb:2d:ad:00:93:f4:55:9e:30:bf:4b:
                    6b:ec:39:cb:aa:9f:fe:a3:86:3e:70:c8:ed:04:88:
                    b4:e9:bc:43:3b:45:ae:32:3d:60:19:4d:3c:9d:0b:
                    1d:ee:c2:e6:38:5b:f3:50:c1:0a:a3:08:aa:29:96:
                    9a:53:13:32:0e:f5:50:56:43:49:f3:07:2a:b7:2b:
                    57:f9:76:61:29:71:09:f9:81:b0:05:6a:ae:45:ad:
                    93:cf:92:fa:b7:13:1e:9c:81:57:14:f5:49:54:c8:
                    60:df:a5:36:6e:2e:1d:a9:40:7e:b1:3a:7b:2d:bf:
                    82:6c:6f:47:2b:a9:c1:d9:32:cb:73:34:8d:7b:6a:
                    c4:74:ee:87:9b:8a:a5:1a:05:77:15:e8:c5:b7:bc:
                    93:2d:79:b4:29:61:35:37:1f:b0:1a:aa:eb:02:2e:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BE:78:4E:C6:48:F7:55:FC:3E:35:C0:A6:6A:BE:CF:A1:31:EF:A1
            X509v3 Authority Key Identifier:
                keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e5:78:e5:ed:a5:0f:5c:61:ce:78:23:cb:0a:43:c6:cb:62:
         76:87:00:f4:95:ba:c4:b5:b1:b6:41:8d:33:62:2b:2f:eb:f8:
         7f:ab:b6:a3:12:c3:b5:6b:90:ed:d1:9c:3f:9b:6c:16:e1:36:
         9c:66:f6:33:9f:98:03:25:36:18:30:ef:07:15:98:0b:95:fc:
         50:7f:42:07:03:b2:30:10:2c:d7:30:85:a9:14:ce:96:5e:7f:
         41:7a:bc:5a:38:49:5d:f4:4a:59:51:50:d5:e5:0c:97:2f:27:
         6b:0a:0f:b7:8a:0b:53:98:fd:07:64:e6:70:b5:2b:dc:98:c8:
         0a:37:79:56:27:27:79:91:4e:8b:d3:90:2b:5b:86:70:e6:74:
         cb:90:b6:3d:e6:76:b9:40:31:fe:55:84:7f:98:e0:4c:2a:8c:
         d5:7c:4d:17:52:50:d5:95:a8:7a:67:ab:41:6a:f9:a8:41:7b:
         b0:66:09:c9:de:6a:e3:bf:2c:a2:c1:8d:56:77:4c:d0:c2:27:
         70:5a:e4:78:f5:be:45:c0:59:25:82:f1:2f:db:d5:6a:ca:7c:
         38:78:d7:1d:31:ec:e4:41:fe:82:55:9c:c4:75:5e:63:9a:67:
         c3:6c:32:2a:24:da:9c:1b:33:19:c4:b2:e4:06:8f:2b:8d:d8:
         ca:d9:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:07 2026 by rpki-client