Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
File:                     mlEGkoBNYAeMHQFcAHdPONvAfr0.mft (raw, json)
Hash identifier:          rrKn/SVOPYVHov9UHV5DX9ramAz1M6dKKZe7/IIfSkY=
Subject key identifier:   5A:0F:30:0B:38:19:D7:6D:6C:67:3A:80:41:37:8E:C1:98:F1:58:2A
Authority key identifier: 9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
Certificate issuer:       /CN=9a510692804d60078c1d015c00774f38dbc07ebd
Certificate serial:       019EFC839356DA325D16F9D38611F6643191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
Manifest number:          5E
Signing time:             Thu 25 Jun 2026 02:02:21 +0000
Manifest this update:     Thu 25 Jun 2026 02:02:21 +0000
Manifest next update:     Fri 26 Jun 2026 02:02:21 +0000
Files and hashes:         1: 3A8QZAqWsdxrPNNzp5C7TFk45SU.asa (hash: bhh2UJAu+X5vBhmW+P6+ozbP7AE7FWcC+x2YnaL5tFQ=)
                          2: mlEGkoBNYAeMHQFcAHdPONvAfr0.crl (hash: h9Clx6OEZrC9BhOAODXMJBpwOcU1pTu+syPDpqNjKkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:83:93:56:da:32:5d:16:f9:d3:86:11:f6:64:31:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a510692804d60078c1d015c00774f38dbc07ebd
        Validity
            Not Before: Jun 25 02:02:21 2026 GMT
            Not After : Jun 26 02:02:21 2026 GMT
        Subject: CN=5a0f300b3819d76d6c673a8041378ec198f1582a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:04:59:3f:36:88:58:57:46:ed:d7:d0:04:
                    2c:0e:be:60:87:96:18:ac:04:83:be:64:77:25:b1:
                    9e:59:83:1d:b2:89:86:39:4e:5b:62:f3:2e:a6:6f:
                    9a:4d:ef:c4:28:ae:1e:53:98:f9:28:76:a4:21:a4:
                    1b:bf:f8:b4:92:a9:53:00:f8:cc:0a:c5:81:33:97:
                    91:87:aa:97:09:92:c8:1a:ea:be:73:82:b4:d6:97:
                    90:16:8a:f9:9b:71:12:cc:5c:ce:1d:b6:15:62:79:
                    87:1a:d8:85:e7:6f:19:1f:35:69:5f:d9:c7:db:53:
                    95:96:04:28:c8:96:b2:03:3a:9e:5c:ef:8d:65:0d:
                    42:43:44:8a:f0:d8:a8:d4:26:c5:1f:44:91:e8:ad:
                    41:0e:d3:ee:86:2b:ed:3e:81:64:62:db:3d:b7:05:
                    93:ed:34:9a:9d:79:75:e9:8a:b3:d9:de:de:31:c3:
                    58:c1:e5:f1:5b:c6:6a:43:27:00:35:50:8e:e8:09:
                    35:3d:17:4d:0d:2d:51:17:01:bb:1e:7c:f9:a7:55:
                    b6:0c:a5:07:01:f9:c9:26:d3:97:0f:5a:80:40:be:
                    a6:c9:f1:c1:40:41:ca:44:94:37:03:d4:aa:cc:05:
                    3a:26:f8:f3:af:0e:87:5b:50:39:49:7c:47:ea:21:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0F:30:0B:38:19:D7:6D:6C:67:3A:80:41:37:8E:C1:98:F1:58:2A
            X509v3 Authority Key Identifier:
                keyid:9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:f1:66:55:f8:6d:fa:b0:de:33:59:f5:93:c5:b5:48:bd:
         c4:b0:24:67:db:e8:62:b3:f9:fe:d0:0e:41:c3:4d:83:c8:5b:
         5d:ad:91:27:61:53:56:f4:95:31:79:30:59:c7:f3:3d:75:1f:
         be:26:7e:ba:11:48:3c:a2:29:07:e0:a5:bc:d1:9b:b4:d1:03:
         88:e3:59:dd:2f:74:4a:09:fb:a3:64:23:68:ce:d6:5b:bc:17:
         50:82:12:e4:ab:7e:5e:77:c1:ea:94:c2:e7:83:62:f2:8a:14:
         28:27:29:91:d8:5e:75:44:8f:23:d7:45:a0:40:fe:d2:3f:bb:
         81:ad:7c:7f:55:91:f6:e8:60:44:41:2e:b7:a3:25:6b:d8:cc:
         f6:be:1b:46:27:e9:a9:b1:cf:0a:b4:1e:07:8b:8b:e4:c5:bb:
         1d:3e:75:98:53:d4:dc:f9:51:a5:73:6e:76:6c:47:73:d2:99:
         a5:b7:51:c6:f4:d5:46:ab:9f:03:80:ce:eb:3a:fc:7c:c2:c9:
         ed:4e:93:b8:0d:b3:d3:25:65:85:06:da:56:16:d0:e1:fd:cd:
         63:b7:bd:a3:3f:c1:07:12:ea:32:b7:bb:d8:a4:c1:94:ff:c7:
         0b:7d:5f:ca:7b:20:b8:b8:b8:5e:5d:f3:13:19:0f:40:c5:0e:
         aa:8c:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:25:39 2026 by rpki-client