Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File:                     5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier:          ybj0jLjKq9swRliEw8UfhTapfcVDMQqiyeHJDzg/Jc8=
Subject key identifier:   22:5A:80:7E:56:CC:47:A4:54:36:67:48:05:4B:8D:10:8E:DA:2C:4C
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer:       /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial:       01A001DCCF5AE3AF312C7F548440AF10E005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number:          0D0A
Signing time:             Fri 14 Aug 2026 20:00:43 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:43 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:43 +0000
Files and hashes:         1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: G1M/pagBONpFXwyIijJ9jisi/JnINJLd0NmH4GsKAm8=)
                          2: pG1q5nAL-cGnJU_6__TqJaRLon0.roa (hash: brTouy8lyh5LkULXwzYt5uqnpGWf2jgORTWC0J3Zrr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:cf:5a:e3:af:31:2c:7f:54:84:40:af:10:e0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
        Validity
            Not Before: Aug 14 20:00:43 2026 GMT
            Not After : Aug 15 20:00:43 2026 GMT
        Subject: CN=225a807e56cc47a454366748054b8d108eda2c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:b8:28:a0:5d:96:30:28:d6:6b:e4:d6:b9:
                    47:35:09:d0:73:08:87:3f:39:3a:9f:4f:e1:3b:e9:
                    e9:df:eb:92:bb:4b:9b:c8:f4:77:92:71:0a:9f:58:
                    7c:17:ca:b1:be:1e:96:9b:10:55:cc:01:bc:b5:c4:
                    d7:a0:70:4e:b0:a7:68:22:07:9c:16:6b:e8:9d:59:
                    ce:cc:a7:b7:ac:9a:0e:4f:79:96:d9:c9:ef:90:b0:
                    cc:41:dd:03:81:9d:57:cc:3f:96:09:15:0d:01:cc:
                    7e:5b:c2:31:9e:54:32:dc:eb:8f:21:b7:60:9f:64:
                    9a:fe:e6:18:f1:28:b7:f1:49:7c:32:a4:c7:72:19:
                    e5:e1:a6:46:f1:66:d3:43:c6:2b:92:db:7c:df:8d:
                    64:42:d3:89:a5:19:3e:0c:83:59:72:2d:54:dd:94:
                    db:c0:e0:e0:b3:43:99:46:00:5b:6d:58:98:80:54:
                    e3:38:35:51:7a:7f:c3:84:6e:88:6d:56:00:29:de:
                    a9:f6:fb:20:f3:42:4f:d9:b9:9b:68:bc:e7:fc:ae:
                    b3:01:db:87:2a:92:ec:40:48:89:4f:7c:34:2d:79:
                    01:83:e0:b4:6f:9c:0b:03:dd:62:9a:5a:58:c3:84:
                    4c:6f:ce:9e:0d:b1:8e:af:4e:c1:bd:0a:1f:73:e8:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:80:7E:56:CC:47:A4:54:36:67:48:05:4B:8D:10:8E:DA:2C:4C
            X509v3 Authority Key Identifier:
                keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:30:7f:8b:1e:29:6d:d1:40:d1:00:59:a2:17:f6:4b:03:1c:
         6f:f4:73:0d:f9:22:ed:ae:37:c5:eb:8d:5d:56:af:30:64:f4:
         1c:a8:5b:28:69:dc:ac:d5:9b:2c:e4:3f:54:41:f0:e4:fe:e9:
         d5:88:43:42:67:3e:16:46:50:69:61:3d:a6:18:eb:5d:de:f6:
         27:de:c8:36:1f:e9:a4:1c:38:cd:ec:da:4f:cc:77:6b:05:2c:
         ed:54:4e:5d:fd:6d:65:68:fe:ab:f9:87:11:bd:29:09:20:7b:
         79:2c:67:da:3d:8e:99:3c:4a:44:bf:71:56:03:93:51:f0:a0:
         10:52:76:50:0b:74:06:59:a3:09:eb:80:3c:2e:54:ee:1a:21:
         ce:f4:98:4b:c6:94:64:07:7c:37:c0:00:55:c0:55:2f:0f:14:
         da:ad:49:b8:eb:f5:93:9e:31:7f:12:b1:50:2d:7d:22:3e:ea:
         2f:1e:20:1f:d2:64:57:99:ec:e3:88:81:45:4f:14:65:2c:5d:
         8d:46:52:9e:ea:d8:c9:b6:73:76:97:d6:f8:19:23:62:76:57:
         a2:02:24:16:95:8e:79:42:29:06:53:85:b8:dc:4c:a4:83:cc:
         1f:73:b2:cf:bb:30:db:ca:ce:b4:19:fc:f0:ab:c7:4d:a6:a9:
         03:89:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:49 2026 by rpki-client