Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File:                     5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier:          M51pd8fP3kWPS7q1aEUWqroE8tLJQHWgfIBdZBPws/o=
Subject key identifier:   85:2F:A2:51:6B:4C:2C:ED:C4:87:09:14:75:70:10:7F:51:2E:48:79
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer:       /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial:       01A001DD6F504F9374A53B79D871901BD0CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 20:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:24 +0000
Files and hashes:         1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: kSzmnvW2iXgCdxwzGAa2pNOPE/IqMyke5+qqJL56gH0=)
                          2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:6f:50:4f:93:74:a5:3b:79:d8:71:90:1b:d0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
        Validity
            Not Before: Aug 14 20:01:24 2026 GMT
            Not After : Aug 15 20:01:24 2026 GMT
        Subject: CN=852fa2516b4c2cedc48709147570107f512e4879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:a3:9a:6d:22:31:92:ce:c1:0b:9a:18:65:
                    7a:36:10:b6:89:9b:8a:38:14:bc:53:f6:7f:96:40:
                    60:10:50:24:73:49:66:30:7e:17:bf:df:f7:c2:63:
                    49:ab:31:02:28:76:5a:46:32:43:1c:23:bd:34:74:
                    70:d0:28:5c:ec:7c:5b:c2:bd:88:35:a3:76:7e:72:
                    6f:40:e6:84:80:18:9a:50:20:4b:3a:d4:e5:32:31:
                    e1:02:19:58:0d:15:bf:3e:2c:d9:14:09:3b:2c:9a:
                    0f:c2:cb:e8:8a:7e:ea:8d:14:8c:89:7c:a6:97:b2:
                    95:e7:31:f7:00:f2:d5:f4:5b:78:19:35:c3:cc:3e:
                    03:d1:01:47:5a:a6:6d:1e:88:91:80:db:9b:a5:29:
                    d9:17:86:98:58:74:04:db:53:11:c1:60:a1:28:b1:
                    c0:6d:3f:f3:5c:3f:9c:03:63:3a:7e:bd:b6:02:94:
                    fa:6e:19:85:24:57:db:13:45:3f:5d:e2:06:54:8e:
                    10:91:34:a6:59:0e:c4:3d:6e:1c:ae:c2:71:e9:83:
                    9b:a8:4c:a9:60:4c:5a:84:3d:5e:7b:4e:ff:f9:b4:
                    a2:55:5a:ed:15:4e:55:b5:13:b4:52:6a:c7:41:6a:
                    a3:ca:b8:45:bb:c5:b1:1c:93:0d:35:8b:4b:16:12:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:A2:51:6B:4C:2C:ED:C4:87:09:14:75:70:10:7F:51:2E:48:79
            X509v3 Authority Key Identifier:
                keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:54:5a:3b:7a:e9:76:3d:a1:ad:ca:a3:2b:fc:ea:db:e0:59:
         4b:f1:0d:8b:bc:9f:31:3d:6c:11:d5:d6:5d:43:75:eb:48:50:
         43:bb:62:e6:14:a9:c8:19:2f:6b:b2:c8:fa:68:0f:5c:ff:fe:
         95:33:5a:8c:f1:1f:cc:19:43:90:c3:2c:7a:69:27:d8:d8:52:
         c9:71:d0:dc:32:58:fa:0d:8f:73:a7:4f:0d:61:40:c4:f3:80:
         fc:7c:fc:35:5b:5c:28:08:ba:6c:f1:b5:96:f0:ba:3b:24:ce:
         31:45:ff:40:eb:ad:eb:84:00:ea:ad:04:3e:d5:a6:84:eb:fd:
         6b:44:07:33:90:2f:7e:0d:00:46:fd:ee:ba:ab:67:b9:59:ea:
         ee:6b:f5:68:74:e5:11:10:e9:61:be:c4:61:4d:f9:c8:90:38:
         b5:82:f5:98:d2:f3:43:10:9f:fa:b6:f8:3f:24:b0:f8:a3:10:
         ed:c6:f4:72:7f:09:0c:3c:a8:34:95:05:2e:4d:13:96:55:42:
         1b:e3:74:35:53:ce:5b:31:0d:34:b8:18:23:3c:7d:89:06:bc:
         23:63:8b:4a:2b:6c:b4:92:bc:71:63:ff:d9:6b:06:4d:4e:b7:
         60:f9:01:5a:85:89:72:6a:ad:de:d5:7c:ee:51:15:c6:7d:25:
         ed:e6:08:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3W9QT5N0pTt52HGQG9DNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFlNTE5YzljZTc3NTc1ZDg5ZjA3Y2Y3MThmM2IwY2M4
NmVjNTUwHhcNMjYwODE0MjAwMTI0WhcNMjYwODE1MjAwMTI0WjAzMTEwLwYDVQQD
Eyg4NTJmYTI1MTZiNGMyY2VkYzQ4NzA5MTQ3NTcwMTA3ZjUxMmU0ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VGjmm0iMZLOwQuaGGV6NhC2iZuK
OBS8U/Z/lkBgEFAkc0lmMH4Xv9/3wmNJqzECKHZaRjJDHCO9NHRw0Chc7Hxbwr2I
NaN2fnJvQOaEgBiaUCBLOtTlMjHhAhlYDRW/PizZFAk7LJoPwsvoin7qjRSMiXym
l7KV5zH3APLV9Ft4GTXDzD4D0QFHWqZtHoiRgNubpSnZF4aYWHQE21MRwWChKLHA
bT/zXD+cA2M6fr22ApT6bhmFJFfbE0U/XeIGVI4QkTSmWQ7EPW4crsJx6YObqEyp
YExahD1ee07/+bSiVVrtFU5VtRO0UmrHQWqjyrhFu8WxHJMNNYtLFhIcdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUvolFrTCztxIcJFHVwEH9RLkh5MB8GA1UdIwQY
MBaAFOWh5RnJzndXXYnwfPcY87DMhuxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUt
MzhjNWIwYzRmMTUyLzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUtMzhjNWIwYzRmMTUy
LzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVRaO3rp
dj2hrcqjK/zq2+BZS/ENi7yfMT1sEdXWXUN160hQQ7ti5hSpyBkva7LI+mgPXP/+
lTNajPEfzBlDkMMsemkn2NhSyXHQ3DJY+g2Pc6dPDWFAxPOA/Hz8NVtcKAi6bPG1
lvC6OyTOMUX/QOut64QA6q0EPtWmhOv9a0QHM5Avfg0ARv3uuqtnuVnq7mv1aHTl
ERDpYb7EYU35yJA4tYL1mNLzQxCf+rb4PySw+KMQ7cb0cn8JDDyoNJUFLk0TllVC
G+N0NVPOWzENNLgYIzx9iQa8I2OLSitstJK8cWP/2WsGTU63YPkBWoWJcmqt3tV8
7lEVxn0l7eYIeQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:24 2026 by rpki-client