Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File:                     5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier:          jo10mV79T7ECTkDmQ1CrChPcyOf2urjWiXlzZhafGYw=
Subject key identifier:   F4:57:33:E4:D6:D8:72:DA:D5:E3:EA:23:10:10:91:09:21:82:0E:C2
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer:       /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial:       019FA1846AC1A95E157FA857F5DE926214FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number:          0282
Signing time:             Mon 27 Jul 2026 03:00:37 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:37 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:37 +0000
Files and hashes:         1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: UPYAR2sYwzE/6axK//ksWxnsZ/Sovia88CRhqtI+QEA=)
                          2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:6a:c1:a9:5e:15:7f:a8:57:f5:de:92:62:14:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
        Validity
            Not Before: Jul 27 03:00:37 2026 GMT
            Not After : Jul 28 03:00:37 2026 GMT
        Subject: CN=f45733e4d6d872dad5e3ea231010910921820ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:8a:c3:a0:90:ee:98:3a:93:e5:ba:26:76:
                    e9:86:43:0d:10:fd:65:80:54:cb:7d:4a:f6:43:57:
                    f9:cc:74:38:c8:b9:1c:d3:6b:6f:2e:81:5a:2a:17:
                    7d:f1:17:32:7b:a0:93:6a:1b:0f:66:ad:9d:c1:e7:
                    75:c1:24:a9:fd:88:d0:9b:e7:db:9f:e8:cb:5b:59:
                    9e:be:96:d3:4e:62:4d:27:81:e7:db:9b:2f:4f:6a:
                    56:14:f3:e2:a8:62:04:69:62:fe:14:06:f5:c4:30:
                    7d:92:7f:f7:dd:3d:ed:08:28:11:ef:4a:73:e0:78:
                    57:0e:59:6f:b6:be:d9:69:d3:de:46:b9:31:78:e4:
                    ec:1f:8d:2e:5e:92:e6:ba:14:98:71:39:46:93:fa:
                    ba:18:b4:7e:aa:0a:ab:71:21:8b:a1:b8:97:0e:14:
                    a6:d4:9a:61:6b:4d:e4:e6:fc:dd:54:5e:5d:2c:bb:
                    54:e5:0f:67:e3:c5:dd:a3:39:7d:47:11:0e:ec:e8:
                    1b:c3:12:de:44:3e:2f:93:d0:c9:0c:b3:02:ae:36:
                    43:4c:ce:ce:35:97:81:77:50:f7:24:f9:c8:c3:cd:
                    f6:94:b6:8f:4f:5e:81:8d:8f:96:e8:d4:6c:9e:ce:
                    5b:21:b5:7e:f8:4a:81:fe:4a:66:90:85:ad:b7:21:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:57:33:E4:D6:D8:72:DA:D5:E3:EA:23:10:10:91:09:21:82:0E:C2
            X509v3 Authority Key Identifier:
                keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:48:46:7e:1b:4c:12:05:c0:21:7b:53:aa:da:c8:ed:8b:
         6e:f2:b0:1c:d9:f0:81:21:84:ed:6e:f6:64:cd:9d:da:4f:c7:
         08:66:be:7a:31:86:59:4f:15:db:e2:61:0f:b3:66:e4:60:9f:
         af:12:10:84:b6:4c:1b:3c:c8:eb:1d:47:1b:6d:eb:6c:20:f7:
         8c:c2:4e:1b:fa:0f:e7:1f:09:54:e0:48:ff:db:4c:f5:5a:fb:
         65:bc:76:af:69:86:c1:50:8d:49:24:08:57:a0:a6:6f:15:c0:
         93:b3:1e:56:87:da:6b:7c:5f:b7:83:d7:16:ff:89:6e:82:88:
         ff:84:62:38:77:be:48:67:4a:2d:8f:84:0f:36:95:58:a1:ca:
         5e:34:fa:1b:7f:b3:b1:38:fa:7b:cb:63:6d:1a:98:f2:6f:fb:
         94:e0:37:6a:4a:fc:ca:15:12:ca:00:48:f9:c3:2b:e2:ea:83:
         0a:30:da:f3:80:1d:91:44:ea:11:f4:43:aa:4c:1a:20:0e:83:
         53:fc:f0:88:f4:6e:64:9f:ea:bb:31:fd:0c:02:c3:58:13:b5:
         db:0b:4a:c7:f8:bf:3c:b0:52:42:11:62:22:60:62:77:89:c3:
         e5:f2:2a:bd:30:37:64:0b:cc:8b:de:96:1d:e4:ab:34:8c:4f:
         0d:ef:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:03 2026 by rpki-client