Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File:                     5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier:          7XRnXYfMA2epEOuvhJ3Nsg23tMhd1zrE8XotSFMD8F0=
Subject key identifier:   71:07:CA:C6:23:CC:79:CD:4D:A2:AE:E2:A4:56:C1:0D:83:A1:3C:88
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer:       /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial:       019FD15F119F92157E1FDB56EACD6F85F42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number:          0609
Signing time:             Wed 05 Aug 2026 10:01:36 +0000
Manifest this update:     Wed 05 Aug 2026 10:01:36 +0000
Manifest next update:     Thu 06 Aug 2026 10:01:36 +0000
Files and hashes:         1: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: c8v7wLHDvAZaoXrtXwiard49IBwCIE8KucDtmMJ5X8Q=)
                          2: TlB35RpoAYh9JfFwZIdprGXzgU8.roa (hash: XzBThBrqkP0celJU8AjVVtRAPROC88dRjyzplXxnsx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 10:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d1:5f:11:9f:92:15:7e:1f:db:56:ea:cd:6f:85:f4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
        Validity
            Not Before: Aug  5 10:01:36 2026 GMT
            Not After : Aug  6 10:01:36 2026 GMT
        Subject: CN=7107cac623cc79cd4da2aee2a456c10d83a13c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:54:03:29:91:42:06:35:dd:2c:76:eb:ca:
                    9c:d6:e7:56:f2:82:af:14:24:62:5b:8b:12:61:24:
                    85:eb:f5:0d:dc:76:fa:4d:a8:2d:43:e2:4a:10:e5:
                    ab:8a:ec:e9:c1:f9:7f:fa:75:16:1d:84:14:8a:91:
                    f3:5a:91:73:46:aa:85:e3:8c:65:f3:7d:27:31:89:
                    4e:9b:c1:81:e5:bd:98:58:6f:f4:ba:78:a1:76:3f:
                    3a:e2:18:3f:9d:a8:bb:29:da:47:b4:e2:17:88:cd:
                    6b:39:a9:42:7f:0c:84:b3:04:82:5d:08:6d:46:c2:
                    1e:59:56:19:8e:02:7f:9f:73:f7:7e:e6:8a:d2:bf:
                    ee:a7:ef:ae:21:b8:13:26:7b:63:f6:5d:7b:b0:dd:
                    83:8d:64:1f:4b:a2:84:6a:e0:6f:5d:e9:d5:77:68:
                    27:aa:e0:d6:e2:d5:c3:48:31:4e:17:6d:5c:ab:16:
                    be:06:5a:45:b7:c9:31:0f:5d:df:67:49:0c:53:c0:
                    d8:1e:a8:4e:e3:9e:54:8a:ef:d4:14:33:71:1e:fb:
                    7d:78:7b:4b:de:da:fc:15:85:ee:72:a4:eb:d1:7b:
                    ea:1d:d8:c0:0a:09:4d:fb:14:3f:ad:9e:ed:db:c3:
                    6d:0a:ac:5a:5d:6d:2d:b8:4c:cb:49:52:1f:44:08:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:07:CA:C6:23:CC:79:CD:4D:A2:AE:E2:A4:56:C1:0D:83:A1:3C:88
            X509v3 Authority Key Identifier:
                keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:1d:84:03:9d:fd:d3:0c:f6:79:12:8a:e1:a5:94:07:0a:01:
         db:38:c3:bd:57:24:25:e9:8a:e2:5f:a9:d3:e9:d0:74:f8:87:
         d7:01:f7:d2:45:99:4c:2b:36:09:40:d0:d7:0d:fa:a2:17:67:
         c5:08:ec:73:de:fc:e2:79:db:9c:aa:22:d7:c3:26:30:e6:8b:
         3f:84:2b:c5:6f:3d:f5:8f:1c:3a:88:10:c4:30:15:cb:81:5e:
         e4:b1:44:1a:8a:1b:00:ff:3c:6d:0e:2b:60:07:05:e5:3c:d5:
         79:f6:40:99:72:a8:a2:6d:4c:92:83:1b:8c:3d:b9:63:8f:26:
         f0:b9:9b:64:29:5c:1a:ef:e0:a3:fa:03:25:47:bf:35:1a:1a:
         a9:19:38:96:f0:1d:3e:65:e3:35:ae:04:5a:07:7b:3a:41:74:
         34:17:4c:7a:fd:9d:67:5e:12:91:c1:02:6f:e8:2e:19:d8:09:
         d2:ab:1f:a2:ac:45:88:aa:c1:29:70:27:61:b6:75:0d:30:b2:
         42:99:4b:be:d1:e5:24:af:b6:77:4b:df:cf:69:56:6e:65:5a:
         cd:39:98:21:ae:35:11:b8:26:cf:b6:8e:2d:96:7d:49:71:aa:
         97:c5:10:60:ff:da:7d:33:32:a0:c1:76:6d:2d:d0:cd:2f:b9:
         20:b2:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 14:38:27 2026 by rpki-client