Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File:                     5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier:          jxfA7PHgkmwMz+y00JbDs9y7g6waXmXCpFZvtVD2n5I=
Subject key identifier:   6A:95:42:8F:29:72:3F:DB:10:BA:69:65:39:B0:8C:CE:33:DE:B1:F4
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer:       /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial:       01A0024B764096AA2E374A286839804EBF1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 22:01:34 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:34 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:34 +0000
Files and hashes:         1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: TXF+EQus0usXf1/w/NcckEfJr+NjFE2ep6/fT4hI2v8=)
                          2: IcEfPnhAjewSEEO3LOP7u-TcVC4.roa (hash: BRMvl9t5zukkJheawmCAi6lNUM26ZBTh/KTKt1g+rZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:76:40:96:aa:2e:37:4a:28:68:39:80:4e:bf:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
        Validity
            Not Before: Aug 14 22:01:34 2026 GMT
            Not After : Aug 15 22:01:34 2026 GMT
        Subject: CN=6a95428f29723fdb10ba696539b08cce33deb1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:c4:ac:fe:48:d7:07:9b:e9:b7:19:95:84:
                    2d:c7:5f:4e:bd:8c:d6:d0:88:27:a3:07:8d:69:8b:
                    d2:77:c3:27:fa:c7:bf:c6:8e:be:98:40:fe:b5:8d:
                    1c:ea:9e:77:c8:21:8b:11:08:67:f6:cc:0d:d2:69:
                    0e:94:d2:eb:b7:d4:bf:9b:83:12:d6:e1:df:81:a9:
                    ba:2e:d3:9c:e3:49:12:57:83:dc:0c:8c:af:f4:ec:
                    31:ed:d0:6f:f0:99:8a:d9:2c:87:15:c3:2e:85:79:
                    c2:9c:fa:f0:5a:e3:d7:af:d0:d2:53:73:4d:05:87:
                    7d:06:16:36:04:da:da:15:f9:12:52:44:96:e1:a3:
                    59:f0:37:1e:ad:ce:78:1e:36:3d:d7:e7:bd:b2:38:
                    79:56:75:c1:f2:db:e2:10:ac:a7:15:83:a9:85:33:
                    c1:2e:a0:99:d3:c3:c8:0f:2f:b7:17:ee:b3:63:f2:
                    8d:ff:e7:d0:35:9a:d7:71:7c:cf:75:33:d6:64:4c:
                    79:4e:7d:38:8a:ae:5a:37:ba:84:e6:ca:4f:92:8e:
                    a0:2b:c6:85:c6:f8:66:77:94:a1:f0:7a:04:52:af:
                    47:b8:b5:07:34:b6:36:e2:72:9f:b0:7b:ac:79:87:
                    a8:d6:8b:5b:21:4f:74:54:bd:14:36:4b:49:0a:c0:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:95:42:8F:29:72:3F:DB:10:BA:69:65:39:B0:8C:CE:33:DE:B1:F4
            X509v3 Authority Key Identifier:
                keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ad:50:17:e7:9d:a4:68:b2:f1:3b:15:bc:70:fe:81:5d:e0:
         d0:4a:54:1e:f0:8f:02:be:38:9f:7e:4b:5a:9e:c8:00:8e:9a:
         23:08:7e:37:90:7d:88:c3:54:4a:70:4f:c9:e1:a0:6d:9e:dc:
         9f:25:f6:40:c2:e1:04:81:8b:70:6c:73:5c:0d:4e:3b:5b:5e:
         77:6c:41:16:25:c9:c9:4b:53:0f:43:8a:9b:c8:42:5d:c0:a4:
         42:3e:cc:46:8e:7c:6f:76:a7:ff:5d:c7:bc:78:4d:85:9c:9f:
         66:4b:e0:28:31:1f:77:28:07:c9:dc:11:dc:51:ae:51:c8:e7:
         0e:65:41:ae:ef:39:0d:63:eb:3d:f1:54:d9:de:34:fe:80:fc:
         8d:95:37:10:39:88:2f:f1:37:91:49:ce:54:70:84:ca:a7:b4:
         75:a5:74:c2:22:d3:dc:1e:c3:a7:1b:b4:41:c1:1e:1a:d7:e2:
         04:22:09:3f:e8:25:a3:cb:c3:33:c7:0a:da:9e:7e:90:9f:1c:
         a1:c0:ff:12:0a:24:bb:0a:fb:9f:51:ea:1f:67:f3:cb:06:b6:
         1c:09:ac:44:07:58:48:7c:79:e3:47:c7:b6:e2:8d:7c:be:70:
         f0:16:2a:29:c1:bc:d7:1c:0d:01:72:b4:aa:99:38:73:77:0f:
         e0:6c:a5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:55 2026 by rpki-client