Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File:                     An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier:          n2wRs+Bymxz1iZaPffuZ3Zaup/GX6fh6tonQrQ7n+W0=
Subject key identifier:   5D:CB:7C:21:EF:17:49:A5:26:65:81:97:3C:D5:B0:DE:CD:C8:60:21
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer:       /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial:       01A00101B70C0BD174E9EA90C3D7131311B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number:          07C6
Signing time:             Fri 14 Aug 2026 16:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:24 +0000
Files and hashes:         1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: +BrJE9evYtu42WGicFSiuVlCwwld28kosN7Np+0FkTU=)
                          2: H_KJlc5PRX4v3aUqKzxXvp_HdHM.asa (hash: FMt7DsAC51D2ry5a0qupkHfbkc+nWw+6uKLO9Ymp5pY=)
                          3: VVQuG1o4UHERlvd_jO5vWgtx_f4.roa (hash: FaG7/CVBmANPmAE+rEgbZykBAaRvciulbJlje0lg6yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:b7:0c:0b:d1:74:e9:ea:90:c3:d7:13:13:11:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
        Validity
            Not Before: Aug 14 16:01:24 2026 GMT
            Not After : Aug 15 16:01:24 2026 GMT
        Subject: CN=5dcb7c21ef1749a5266581973cd5b0decdc86021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:e5:29:bb:8f:81:e9:a5:b2:32:14:4e:7b:
                    57:57:6e:de:b0:08:5c:41:f8:fa:1c:05:3b:ec:d8:
                    51:97:53:7f:88:d9:c2:31:5e:f4:a9:c5:48:ec:76:
                    99:a1:87:4d:47:5a:a9:7d:aa:ce:60:6a:24:5e:21:
                    40:67:84:b0:18:0e:00:65:73:8f:1c:a9:88:ee:f1:
                    64:2c:53:37:3c:8e:ec:77:f9:91:b3:02:05:63:49:
                    c7:c4:f9:68:18:82:dc:ec:4e:6f:d2:3a:3d:4f:fb:
                    b4:6c:ca:25:06:a3:32:77:f7:51:06:61:de:6c:88:
                    99:be:3f:e6:5a:d0:ed:41:d0:84:4a:11:5e:91:c3:
                    58:51:dd:65:fb:65:39:67:56:28:36:7e:a4:87:81:
                    86:8b:42:a3:68:71:17:75:bc:ff:f2:eb:fd:12:04:
                    97:3c:65:30:a7:c2:14:13:65:02:b1:50:85:1b:95:
                    92:3e:ef:6f:88:b3:8a:4b:16:d7:2c:47:a0:c9:58:
                    4a:21:60:89:ae:62:8a:1e:a6:1f:03:3a:11:6b:b7:
                    15:f7:a8:3b:e1:31:6d:fb:90:3c:12:a0:77:d4:37:
                    d5:e8:75:7e:65:73:25:37:54:34:70:a0:dc:b4:48:
                    21:cb:ae:1d:2f:00:70:d8:8f:7a:87:2d:75:63:3d:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:7C:21:EF:17:49:A5:26:65:81:97:3C:D5:B0:DE:CD:C8:60:21
            X509v3 Authority Key Identifier:
                keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:cd:49:33:85:70:2f:6b:92:ad:e1:3c:ce:30:da:7b:6a:
         3b:31:91:ab:f1:87:77:7f:36:af:78:24:46:cb:a3:ba:09:89:
         a4:64:69:79:db:75:3b:05:3b:d5:98:37:4b:ac:50:9a:10:3b:
         d7:ed:5f:88:0f:9b:68:2a:10:e8:ee:4b:c2:aa:98:00:55:ed:
         f0:53:3c:b9:78:dd:85:14:8a:48:b3:37:59:b3:2d:2c:e2:c2:
         98:17:0f:c0:0a:6d:e0:61:aa:2e:c0:86:ae:0b:f2:0f:7e:ef:
         22:14:dd:b8:90:bb:dd:a2:87:96:f4:d2:17:fc:ff:11:08:fd:
         9a:a8:e3:14:f4:14:98:5e:23:5b:d7:b4:d7:2a:d6:1a:37:d1:
         f5:8b:fd:f9:55:f1:74:43:ca:c7:78:60:f7:d5:45:58:e2:27:
         49:2a:87:09:a7:83:de:ff:64:87:47:8b:42:67:83:10:43:c4:
         4a:51:ba:a0:8e:d6:5a:f2:62:06:fb:f6:98:48:ac:c2:0c:fb:
         a0:64:94:df:29:1e:58:b5:46:cc:14:97:63:ab:4d:39:44:3c:
         f5:ac:a1:49:b4:ca:67:f5:e9:2d:7b:20:a0:19:76:99:ab:57:
         4c:90:6d:b7:6a:f6:8f:7a:cf:3f:7e:9b:56:0c:4f:3c:0c:bb:
         59:7a:5f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:43 2026 by rpki-client