Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File:                     5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier:          TWjMlhq7P04CLyCR0sDH5aSn4MdJdnP5YTXZieb4ROU=
Subject key identifier:   C5:58:30:0D:1C:93:20:98:C6:80:B6:13:E6:C5:6B:7D:D8:3B:54:34
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer:       /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial:       01A04085860D269DE92B33892FCC6F980AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number:          04D7
Signing time:             Thu 27 Aug 2026 00:01:27 +0000
Manifest this update:     Thu 27 Aug 2026 00:01:27 +0000
Manifest next update:     Fri 28 Aug 2026 00:01:27 +0000
Files and hashes:         1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: z3UWMKsVxhEmhQ3gsVdBRY3zgEnUFLKcipEXcMB03o0=)
                          2: jXP7E3ZhCPS-nhI96RhyBYQFCsE.roa (hash: TPYf0iiW2OcHHUnh4b/qsDWeDvydotieDoi8cPyorB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:86:0d:26:9d:e9:2b:33:89:2f:cc:6f:98:0a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
        Validity
            Not Before: Aug 27 00:01:27 2026 GMT
            Not After : Aug 28 00:01:27 2026 GMT
        Subject: CN=c558300d1c932098c680b613e6c56b7dd83b5434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:8c:12:ec:85:85:fc:ec:b3:ce:ec:6c:be:
                    2b:7f:81:9e:a1:ce:67:30:3e:f0:c2:c2:a5:4e:a1:
                    ac:9a:e2:24:72:27:0f:7e:5b:ec:26:54:37:11:be:
                    71:75:df:78:f3:ab:23:16:ec:47:cc:f8:41:57:c7:
                    53:e4:f3:22:94:07:8b:cd:69:b6:8e:69:70:79:e1:
                    af:57:fa:79:bd:68:7f:5b:be:c2:04:64:7a:98:cd:
                    4d:86:ae:24:8b:d1:59:30:55:21:bc:e7:18:69:1e:
                    f5:30:31:7b:d4:4e:fc:0a:0f:93:26:3a:4f:da:ce:
                    ed:15:b0:39:74:97:0a:45:85:f3:a6:69:0e:5a:b0:
                    52:87:51:84:af:a7:56:fd:83:ed:8e:44:f0:81:21:
                    e9:3b:d2:25:d0:73:e1:8c:a1:32:7c:cf:b6:a7:72:
                    d9:9e:72:22:1a:c0:72:bc:ac:c0:54:2f:c3:a0:34:
                    f6:ff:20:c8:fb:0b:de:91:19:10:4a:00:bd:9e:f1:
                    fb:d1:7d:42:d7:25:41:4a:ec:6f:b0:34:43:b3:80:
                    2e:b7:04:53:eb:12:18:16:89:5d:ef:24:e8:0e:46:
                    85:35:93:52:61:1e:bd:6f:d8:97:45:45:95:1a:1d:
                    c4:ac:72:03:a5:56:7d:8b:c2:fc:0d:92:ca:9f:4c:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:58:30:0D:1C:93:20:98:C6:80:B6:13:E6:C5:6B:7D:D8:3B:54:34
            X509v3 Authority Key Identifier:
                keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5d:09:36:52:16:d9:f0:94:36:e7:92:d5:58:79:86:e8:9b:
         0a:65:dc:fe:cb:9c:a9:8d:8b:78:5f:87:98:20:1c:10:37:fa:
         97:2b:56:22:cc:60:b4:25:65:97:f9:dc:fb:e0:82:77:c4:21:
         88:f9:72:a4:02:24:9a:bf:c3:87:38:6d:d4:e6:11:2d:b6:ca:
         17:6a:09:7f:6b:85:de:af:91:a0:fe:46:9c:7c:5e:cc:0b:f6:
         0c:72:66:75:c3:8c:7b:cb:b6:05:fd:2a:09:f7:12:93:c3:e3:
         8e:9e:56:34:1c:de:6d:03:d1:9b:d4:30:b1:65:05:50:e6:a9:
         e7:56:97:15:be:5f:0f:39:b2:31:ac:e3:82:66:31:b6:92:4d:
         2a:57:42:0c:23:fa:10:df:89:bd:25:9d:31:3d:45:37:b7:9f:
         7a:8a:0b:43:08:82:9e:95:cf:77:ac:43:49:49:bd:4e:7b:8b:
         bc:33:06:59:4e:84:f4:67:44:1d:1c:7b:d9:65:d4:fb:43:cd:
         ee:c0:d5:83:55:18:06:91:4f:74:90:c9:d3:0f:ee:e8:dc:59:
         06:c4:43:d9:c4:04:dd:72:b2:4b:e2:7c:39:63:d2:40:76:07:
         d0:9e:b3:59:cd:5b:78:eb:d2:e6:44:1e:60:a4:da:2b:ef:58:
         e2:4b:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:31 2026 by rpki-client