Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File:                     53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier:          qoNS8plIwhtXCRkH6Q3VW+f3w6+s8vrqUC8p5GXOUUk=
Subject key identifier:   8D:01:E4:C8:43:3E:10:55:E1:28:3E:F7:DD:0A:9A:AD:FE:5B:94:9B
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer:       /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial:       019F0C2CB0F740B0F527FF3694AA5C4FF39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number:          0595
Signing time:             Sun 28 Jun 2026 03:01:23 +0000
Manifest this update:     Sun 28 Jun 2026 03:01:23 +0000
Manifest next update:     Mon 29 Jun 2026 03:01:23 +0000
Files and hashes:         1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: GevZfa+VzCoTE0a6ET9Xui5ybk7Tzb7Ra7VvrHmv2es=)
                          2: TQEZqwqBvL5LSKJlBpz9ZlwxI2k.roa (hash: h28Y5SLCkXSu2nNw0njBdHdQWxez9aqEeYAyLE+jLNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0c:2c:b0:f7:40:b0:f5:27:ff:36:94:aa:5c:4f:f3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
        Validity
            Not Before: Jun 28 03:01:23 2026 GMT
            Not After : Jun 29 03:01:23 2026 GMT
        Subject: CN=8d01e4c8433e1055e1283ef7dd0a9aadfe5b949b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:d5:3a:a7:33:a1:04:64:56:5a:34:69:34:
                    3f:16:7b:9e:93:b2:37:08:0b:20:38:3c:c5:2b:24:
                    e1:b0:1d:0e:b2:27:3c:80:5d:eb:cd:4e:67:05:c6:
                    20:e1:48:36:13:4a:b3:fa:53:d3:d6:81:aa:1e:83:
                    8a:69:75:14:ac:dd:bb:39:ef:b5:bd:ee:1f:54:76:
                    9a:4b:f3:1f:50:08:bd:73:01:f5:e4:42:fe:e5:b1:
                    c4:9e:ab:b8:ca:bb:d5:5f:16:27:b2:e7:bd:dd:5d:
                    27:09:65:81:dd:dd:b4:5e:47:5e:d5:30:6b:a5:3d:
                    98:ed:9b:b7:34:7f:d7:93:ba:b3:47:45:f3:22:4b:
                    7e:2e:cb:76:7d:f0:07:1b:0a:72:83:b9:49:e7:a4:
                    34:ac:f1:f9:39:aa:74:76:9c:85:60:2a:f2:47:a5:
                    a7:84:ce:a6:cd:26:07:a3:53:fd:31:be:4c:99:fd:
                    39:d7:71:0b:97:8b:05:b6:56:86:ae:26:e7:04:f4:
                    0d:fc:90:4a:56:57:f3:1e:f4:60:0f:81:87:8b:31:
                    d2:2a:c8:fa:d1:06:22:cd:76:11:fe:e9:0d:bf:f0:
                    4b:fc:99:85:88:0c:20:b3:92:d4:42:c0:36:f9:de:
                    df:10:b6:74:26:52:00:3e:21:17:3e:88:39:72:4c:
                    15:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:01:E4:C8:43:3E:10:55:E1:28:3E:F7:DD:0A:9A:AD:FE:5B:94:9B
            X509v3 Authority Key Identifier:
                keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:b3:31:e5:2b:ea:f5:fc:11:c2:8d:db:e7:41:f6:f7:71:
         f6:eb:28:34:37:1d:2a:ff:3f:ed:fc:22:f3:36:bf:44:d7:c3:
         37:61:38:df:ce:a8:5e:22:db:5a:0b:51:fe:b6:a7:0b:4b:05:
         8a:d7:b4:b8:8e:90:9f:d7:ff:3a:d6:0d:be:6b:fe:d6:7e:9d:
         3e:a3:7f:d5:3d:df:26:31:26:39:01:4e:5c:83:f7:2b:65:72:
         fb:d5:7b:ce:53:ce:94:bb:cf:7a:ad:02:d0:80:62:2c:51:a9:
         a2:6e:39:f9:a8:43:b1:64:4c:ae:26:34:0d:a7:5e:97:ad:cf:
         90:86:32:6f:0e:54:b6:fb:58:3b:59:97:c7:51:3e:d8:45:6f:
         78:21:2e:ec:1e:2d:f8:83:7d:f6:c2:b3:0f:2e:91:fd:04:73:
         ca:4d:81:25:9b:b3:31:0a:63:23:56:f4:0c:19:e7:a7:38:54:
         12:97:62:10:cf:6c:fd:c9:8c:d2:63:84:71:04:ea:3d:46:84:
         10:d5:4d:2a:29:02:1a:2f:b2:8c:b0:87:0b:7f:0a:ec:55:3c:
         1c:9c:21:28:a9:af:51:87:64:f4:cb:80:6e:3a:d7:de:04:b4:
         d6:86:b3:cc:5a:59:b3:fd:4c:2c:14:4d:c8:36:a5:03:ad:8a:
         b0:03:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 08:04:09 2026 by rpki-client