Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File:                     5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier:          yEZlS1X/VQ9h1m60RBr3UZrgVoh0VdFXo1jg49Dk5LA=
Subject key identifier:   96:51:06:43:18:E8:F6:4D:2D:CE:D2:16:5F:31:D0:58:6A:4A:35:E0
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer:       /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial:       019F1867AB5B1FE542FA605A6FCE7C3A91A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number:          13F9
Signing time:             Tue 30 Jun 2026 12:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:14 +0000
Files and hashes:         1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: Mt0XGXFQGkOpt7Twu45uJ4f9VaDscCJFAKMY4ejppKo=)
                          2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:ab:5b:1f:e5:42:fa:60:5a:6f:ce:7c:3a:91:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
        Validity
            Not Before: Jun 30 12:01:14 2026 GMT
            Not After : Jul  1 12:01:14 2026 GMT
        Subject: CN=9651064318e8f64d2dced2165f31d0586a4a35e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:c9:76:d7:8f:4a:35:62:89:38:be:f8:09:
                    d8:39:1d:c5:d9:9d:b7:41:b8:ca:20:56:f3:dd:62:
                    da:72:89:17:40:de:8d:95:d3:1f:95:aa:1b:84:fd:
                    47:c4:16:f3:76:f2:00:75:a5:83:27:b8:23:0d:46:
                    dd:06:de:0c:d2:7f:9b:eb:ae:e8:98:16:1e:bd:e1:
                    e3:2e:94:9e:be:56:cf:bc:22:d5:f5:e7:d1:ab:9d:
                    5b:a9:6f:08:a6:92:bc:f4:c0:2a:cf:c2:0b:b3:ed:
                    46:45:54:12:25:9e:29:e4:1a:f8:44:0a:e4:5f:44:
                    d2:02:2c:79:f0:9a:9a:e3:5e:b5:77:8c:78:e8:cb:
                    9a:db:50:b2:cc:a7:6f:da:10:57:4c:ed:35:27:8b:
                    c8:a7:90:18:c9:fd:7a:2f:2d:02:03:0f:9c:72:8e:
                    58:37:68:02:ee:32:db:21:ce:ee:92:06:93:03:1a:
                    74:97:80:7f:2c:e8:45:d9:56:80:b7:02:ed:9e:91:
                    6a:83:23:a3:a4:4f:7d:30:7d:a0:34:2c:40:15:04:
                    31:5a:f7:78:14:a7:98:c1:b8:95:52:98:75:70:14:
                    3f:4d:81:d5:f9:e5:ea:6b:9c:55:d4:1e:13:71:e9:
                    c9:f5:11:3d:85:3d:ea:96:7b:9a:b9:a8:2b:13:59:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:51:06:43:18:E8:F6:4D:2D:CE:D2:16:5F:31:D0:58:6A:4A:35:E0
            X509v3 Authority Key Identifier:
                keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:46:c8:d3:88:a2:4a:7c:fc:d6:01:00:bb:1c:46:e3:20:82:
         5c:e8:0d:1b:6a:5c:a5:b1:88:8e:d3:b9:5b:95:92:e9:e7:bb:
         9d:79:ed:be:da:89:0c:7c:a5:ba:64:23:42:d4:5b:e0:1f:38:
         7f:52:16:c1:73:b9:02:76:eb:3c:ab:9f:37:86:f8:5a:33:f9:
         0e:9e:d0:7b:3d:d4:26:1a:fe:04:50:4c:8c:71:5b:39:46:46:
         5a:f7:40:8d:a6:2d:6e:7f:85:d2:eb:e5:de:f1:77:68:e3:4d:
         c9:96:90:1d:85:a1:3e:5a:b1:c4:de:af:cb:da:5d:89:7c:14:
         8b:86:dc:24:4d:ab:b2:6b:5b:0c:d2:03:f4:da:65:2c:41:c6:
         3c:98:0e:a6:95:e1:6f:3b:55:01:2d:a2:1b:27:a1:ac:44:84:
         e9:9b:6c:4d:84:89:5e:06:70:d3:b7:18:85:e8:fb:88:95:97:
         f1:1a:c7:d0:ab:39:53:90:9e:f1:60:ba:63:b4:29:62:89:eb:
         98:48:ac:9c:78:52:a8:6d:83:1d:3f:3d:ae:16:79:8c:2d:37:
         0c:c9:b1:4f:7c:4a:a6:68:a5:52:f7:27:ff:ff:9d:cd:2e:07:
         28:70:10:ce:72:58:4f:fd:ec:f2:6b:29:06:b4:20:75:87:0d:
         5e:e5:b0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:45 2026 by rpki-client