Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          ZM5F8nxcZNnB7K/d/dYkqO4FXKM6lrlbIqxgPwhTVF0=
Subject key identifier:   DE:AE:E1:D5:02:DB:5A:5E:ED:9D:86:36:54:1A:2F:9B:44:B1:2F:C2
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       01A0016EC59C5F93875076EC6424A9874753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          17BE
Signing time:             Fri 14 Aug 2026 18:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:31 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: IKpzmlVyyD14FXHLVM7P6wj8nNnPB1EkIbvuu4uJO8g=)
                          2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:c5:9c:5f:93:87:50:76:ec:64:24:a9:87:47:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Aug 14 18:00:31 2026 GMT
            Not After : Aug 15 18:00:31 2026 GMT
        Subject: CN=deaee1d502db5a5eed9d8636541a2f9b44b12fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:e2:56:50:84:aa:72:a5:ed:45:f9:69:c8:
                    a0:77:35:1f:de:2a:49:0a:16:6d:72:7e:be:e4:3b:
                    8f:c3:ea:34:6e:18:d1:0b:81:0c:44:db:59:7a:c6:
                    cf:43:d3:0b:c4:01:20:fb:b8:d2:c6:c0:15:3b:03:
                    be:7d:ff:be:9b:c8:8e:7b:b3:d1:7d:25:6c:e0:39:
                    da:33:ed:62:12:bc:10:09:f2:ca:d8:89:c8:62:28:
                    94:c4:6a:39:91:19:aa:ee:00:6a:fc:86:9b:86:67:
                    37:63:46:97:a7:f4:b1:0d:cf:3f:e3:f8:e9:33:71:
                    69:d3:07:bd:36:92:02:04:f2:26:49:8f:9e:c9:24:
                    05:9e:b0:e6:0d:6b:29:b6:30:0e:f0:b4:c8:26:05:
                    40:f1:3e:7b:ee:b8:97:57:ea:62:d1:03:82:44:b7:
                    52:4a:98:0c:7c:00:80:1c:d2:ed:a3:c5:d8:0f:fd:
                    08:de:d2:b7:86:48:e4:6b:0a:72:92:f8:ed:9f:cd:
                    3c:81:e9:df:f0:72:63:33:1c:49:08:23:b9:a7:11:
                    07:35:fb:c7:77:29:31:1a:76:0a:aa:0d:d7:fe:f8:
                    9d:69:f6:31:21:cd:cb:2b:ca:cf:cb:1d:1f:0d:f6:
                    ca:63:a2:bc:09:72:a4:1c:75:d9:bd:3b:ce:f7:7f:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AE:E1:D5:02:DB:5A:5E:ED:9D:86:36:54:1A:2F:9B:44:B1:2F:C2
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:56:f4:bc:8d:91:44:77:e7:fd:e8:cd:c6:57:d6:39:5f:
         14:eb:de:37:97:14:d0:f0:26:dd:d8:d0:97:19:c6:fd:22:ba:
         0e:b3:83:ef:55:29:2e:b1:d1:b8:9b:88:a8:ba:ec:f0:6a:3d:
         71:df:5f:90:6c:dd:5d:01:bc:f4:ae:47:80:4c:e6:c4:e2:e5:
         65:98:92:ca:7f:f8:56:9f:b1:cd:07:1f:cf:c4:4e:6f:91:d5:
         e0:98:f2:8c:79:2c:fc:cb:60:35:05:40:51:0a:75:1e:4e:da:
         f8:61:1b:02:85:09:0e:70:a8:c4:05:da:d4:30:ef:fa:2c:56:
         ab:62:78:fc:bf:b7:af:71:d8:17:87:43:ce:22:c1:73:6d:5e:
         03:41:11:ff:3a:2b:ca:6f:19:34:15:f0:49:c8:74:1d:57:d5:
         e6:0e:de:1a:cd:68:07:44:08:e5:d0:70:6c:2e:1b:90:92:65:
         22:25:69:b4:49:02:27:3c:57:1b:47:00:c4:73:aa:22:5e:65:
         2a:84:7f:0e:42:61:99:00:10:58:e6:ab:4d:1d:a9:8e:80:9b:
         2c:89:0b:17:47:90:23:73:52:70:c6:12:5f:56:50:b4:6d:66:
         d0:78:9e:dd:5c:0c:2c:ba:8c:31:5d:63:b7:fe:a7:9e:28:8d:
         8d:57:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:14 2026 by rpki-client