Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File:                     5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier:          C26MXikkaieoHvB0m2tDLIWB/8isyq6Z7DePwqUD2IQ=
Subject key identifier:   40:02:99:61:1F:01:04:B1:23:E7:6D:F6:83:50:B6:07:0C:1B:0F:CC
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer:       /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial:       019F84C459CC2188C567009EE04F5C75FD30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number:          0CE2
Signing time:             Tue 21 Jul 2026 13:01:28 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:28 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:28 +0000
Files and hashes:         1: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: XUoMZ/s2y0fiFOzOHGwmIP0NQLn9yFu2UhgX3R7Wn3s=)
                          2: BSGPWmtsgwbJGnKFG5brSPXj4hk.roa (hash: KGxIkg0MS8XaKz2jRrsvog2q0vQwaAcswUFzEf/VLTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:59:cc:21:88:c5:67:00:9e:e0:4f:5c:75:fd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
        Validity
            Not Before: Jul 21 13:01:28 2026 GMT
            Not After : Jul 22 13:01:28 2026 GMT
        Subject: CN=400299611f0104b123e76df68350b6070c1b0fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:f5:b9:54:a3:08:38:68:2e:d5:d5:85:40:
                    b1:dd:37:9b:2f:bd:fa:9e:be:1e:5b:0d:5b:96:6c:
                    46:5b:0a:84:6a:b3:19:38:db:d4:17:48:88:ef:1e:
                    d2:38:0b:ed:e6:92:f1:ca:b8:23:cc:3d:ae:e2:88:
                    69:ea:0a:7d:bf:2d:75:0b:2a:3e:3c:3f:fc:9a:78:
                    54:a6:d2:48:75:13:d4:d5:7b:b2:86:76:d3:0d:a0:
                    89:98:fa:9a:50:03:64:93:e1:f2:e6:b0:73:05:5b:
                    d2:ae:f2:3d:fe:d9:f3:17:f0:48:c7:78:b8:d7:1a:
                    9a:97:d5:13:2d:ce:73:0c:90:a9:10:bc:bd:66:d1:
                    6f:35:36:52:46:12:e2:b4:cd:88:fc:25:45:d2:55:
                    aa:88:87:ff:8e:1d:31:8f:1a:37:87:d2:91:05:c5:
                    17:41:db:8d:b5:b0:87:6e:7a:1f:81:a5:82:c0:93:
                    48:f6:e9:6c:4d:29:65:f6:4b:e0:ef:7c:0e:47:ae:
                    5b:df:28:f8:1f:fe:af:3c:c5:71:da:a2:99:2d:68:
                    d9:3f:61:86:14:89:e6:c8:fd:9d:0a:a9:25:81:50:
                    fb:1f:6a:19:02:5e:8c:63:3f:28:be:57:4d:74:9b:
                    c9:af:5d:7a:16:d5:8e:f6:61:9e:42:8f:70:b8:33:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:02:99:61:1F:01:04:B1:23:E7:6D:F6:83:50:B6:07:0C:1B:0F:CC
            X509v3 Authority Key Identifier:
                keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a9:6e:9e:72:d5:db:f8:20:db:73:36:7a:5a:81:e3:bc:c9:
         e3:fe:9b:87:5c:23:6a:0d:e4:74:e1:ac:2b:32:27:b5:5f:fd:
         0b:c6:fd:20:ef:b1:cb:ce:90:f2:71:1b:59:d9:e9:02:12:4c:
         f3:b2:65:20:86:9f:23:6e:a7:c2:2d:bc:0d:06:0c:6c:bf:60:
         60:dc:76:ae:8a:84:7c:9d:f8:92:2f:47:2e:ce:19:ef:73:f5:
         e7:01:5c:52:fe:b5:93:5d:33:3a:84:b4:50:b1:d7:e9:ab:47:
         7f:ef:a2:21:0a:af:b0:1e:8d:18:9c:24:12:f6:90:58:82:cd:
         c7:fc:04:5e:ca:f3:25:4d:59:4e:1d:32:35:3d:b5:41:b7:36:
         3f:5c:ad:8c:ef:79:fb:36:cb:90:cc:49:5b:67:69:f1:7b:a1:
         b4:ae:84:73:cc:a4:60:21:72:e1:b8:52:5a:6a:e1:0f:3a:f7:
         d5:ac:81:77:bb:bb:75:2b:e1:2e:df:46:f0:65:81:5d:ae:c7:
         72:43:af:ec:44:db:1b:ac:b8:1b:5d:44:5e:5c:4b:fe:f2:10:
         55:ae:2a:26:11:6d:eb:86:a9:59:d7:20:99:ed:50:07:1d:b6:
         bb:7a:7e:49:76:a6:c8:d3:5a:80:79:61:b1:a4:d1:5b:d0:cd:
         19:44:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:45:16 2026 by rpki-client