Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
File:                     5-aiybui7N1AdLMVN1mDXoI6uOQ.mft (raw, json)
Hash identifier:          wSDnVHgfPaa6PSiohQfHsztulAVn8MAz1hym8y8TXdg=
Subject key identifier:   9E:EA:16:4D:92:C6:CF:D7:23:D6:7E:4B:F4:A8:9C:8A:E7:E8:9F:E8
Authority key identifier: E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
Certificate issuer:       /CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Certificate serial:       01A001017C67D4A9CE3C0CD1A161EF27D325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
Manifest number:          10E0
Signing time:             Fri 14 Aug 2026 16:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:09 +0000
Files and hashes:         1: 5-aiybui7N1AdLMVN1mDXoI6uOQ.crl (hash: xnwvds+H4hBRPgY/CoOf+RuVK344cm6G1dEta+ErGRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:7c:67:d4:a9:ce:3c:0c:d1:a1:61:ef:27:d3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
        Validity
            Not Before: Aug 14 16:01:09 2026 GMT
            Not After : Aug 15 16:01:09 2026 GMT
        Subject: CN=9eea164d92c6cfd723d67e4bf4a89c8ae7e89fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:41:d7:b0:27:25:5d:96:78:a2:02:49:d7:
                    0a:81:f7:5b:6b:f7:4b:07:8d:e3:a1:30:ad:dc:ec:
                    7c:ee:e7:69:3b:93:78:f8:bc:8c:52:98:81:67:76:
                    b5:b8:dd:90:32:6a:05:8d:9a:26:fa:e5:47:ed:eb:
                    0f:db:9a:4b:75:7d:40:05:59:24:14:51:8d:35:36:
                    34:c8:ec:b0:91:c5:1c:d0:60:9f:8d:22:54:6e:00:
                    52:94:3a:66:b1:48:bb:ef:bf:8b:bc:79:e0:ab:93:
                    19:b6:15:3f:84:2a:ae:9a:90:fc:3a:77:46:93:11:
                    19:0b:ac:96:21:70:10:58:a1:ac:41:36:03:68:9a:
                    1c:a6:26:4e:11:2c:de:ec:be:e4:15:09:e8:a5:cb:
                    e0:da:b6:2c:62:bc:d0:ba:83:af:27:8f:18:e7:24:
                    83:06:fd:7e:6a:81:27:b3:7b:84:7c:c5:bb:22:60:
                    c0:35:ad:fb:f2:36:1a:62:79:8f:13:e5:07:89:49:
                    28:da:9e:a1:5b:44:18:6d:73:49:78:d0:93:e3:de:
                    67:e9:57:a3:30:be:fc:1b:a1:29:f4:2e:ae:ff:68:
                    fd:95:a5:3b:0b:f1:96:e0:ea:1c:42:76:89:11:87:
                    26:f5:83:fc:f3:c0:23:18:b4:eb:11:8a:50:55:02:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EA:16:4D:92:C6:CF:D7:23:D6:7E:4B:F4:A8:9C:8A:E7:E8:9F:E8
            X509v3 Authority Key Identifier:
                keyid:E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:3a:01:94:a8:cb:3d:c9:19:9e:c7:e8:b6:24:8b:c1:0d:
         5f:af:c2:1f:a2:19:cd:f1:66:a7:11:61:c3:f1:1b:18:de:f7:
         3a:93:49:3c:c4:68:5d:7c:5a:28:87:9c:7e:e3:9e:08:cb:1a:
         09:f2:e5:c9:8d:9a:be:43:69:58:e2:e9:ce:dc:09:17:cd:07:
         7f:ca:a3:67:ae:ee:67:50:3c:68:46:db:15:03:70:5e:75:5f:
         22:29:78:83:ba:e1:a1:97:83:30:23:17:09:1b:77:35:c9:dd:
         e6:8a:dc:66:52:86:6f:5e:2f:a8:d4:70:ff:01:69:93:1c:f6:
         6d:dd:91:b0:43:2b:c2:02:63:b2:90:0c:5e:66:a9:a5:99:2c:
         b6:42:54:1e:ec:0e:0b:b1:d8:88:5d:c8:0f:ad:14:2b:22:25:
         b8:04:7c:63:5f:08:c6:53:45:1d:80:69:cc:44:22:25:06:87:
         6e:0f:28:c5:78:fb:7a:44:c0:56:c9:84:15:be:6d:ee:7b:b3:
         a8:81:40:06:42:0f:73:eb:1c:de:46:d6:e0:b3:31:71:13:cd:
         a5:dc:18:f3:ab:9f:aa:8b:e7:66:f7:68:59:00:d8:5e:cd:3d:
         4c:30:c9:50:09:60:00:18:37:8e:30:a8:de:e7:8d:98:f4:08:
         b9:a8:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:08 2026 by rpki-client