Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File:                     5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier:          BBJ/nTwKJkdAPZE85+H84FCoSTOQkvpev54Lqj431go=
Subject key identifier:   60:1A:1C:76:29:6A:E0:9D:FC:34:22:53:A6:1D:E4:03:46:27:08:4F
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer:       /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial:       01A0005D2446AADC3781B53DD60B9A5FEE21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number:          0A13
Signing time:             Fri 14 Aug 2026 13:01:39 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:39 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:39 +0000
Files and hashes:         1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: f+sBjHCKEtDyhcTLjjEamyvtY1CTgiHWl6ZLg9pm048=)
                          2: 7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa (hash: NOJagwW5QOv6tMhfF2OqRIEJAaU7K3GfJCIh+Pm2aDU=)
                          3: 8AM52ao9n7ZIIGEzs-8YgbfhwPQ.roa (hash: lYKzKODJEnnDJ+KgMuq1pi/8YZEFtPtdvl7coiYrhQE=)
                          4: ABvW-1VqbSDcf540tHClkzOyb9g.roa (hash: tCUTk3vplCMwsVpz24IlWs8R7PpmKQHPhX6E3iUJitU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:24:46:aa:dc:37:81:b5:3d:d6:0b:9a:5f:ee:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
        Validity
            Not Before: Aug 14 13:01:39 2026 GMT
            Not After : Aug 15 13:01:39 2026 GMT
        Subject: CN=601a1c76296ae09dfc342253a61de4034627084f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:09:87:f8:42:4b:7a:1a:33:b6:f0:45:25:5c:
                    da:32:6a:f6:11:19:3f:06:3e:6b:05:a9:f8:41:f1:
                    0c:de:27:9d:3f:a9:eb:8b:5c:af:78:92:b6:30:29:
                    46:a1:5c:10:8b:aa:75:d7:0f:d5:36:34:9c:ef:e4:
                    18:cd:04:42:20:aa:e0:39:bb:51:60:96:86:eb:fa:
                    ef:cf:e0:5a:89:ad:ee:77:e8:37:4c:db:ef:6d:f1:
                    61:3b:46:72:d7:70:46:46:91:76:76:75:72:31:28:
                    61:eb:68:ac:e5:d4:a4:83:e5:47:07:d2:7f:91:a0:
                    b4:b6:6a:30:4b:40:15:ae:34:6b:b5:4a:48:27:bd:
                    95:7b:86:b1:4c:bc:f4:c6:56:96:b2:45:29:97:f7:
                    c8:00:a1:5a:fe:3b:53:10:ac:5c:2e:85:fd:9e:38:
                    68:34:2c:e9:0f:62:b1:ea:9f:7c:f1:f9:b0:d8:2d:
                    a1:73:f8:6f:d0:38:28:64:81:cb:f4:ff:2a:78:70:
                    a9:90:2f:44:54:6f:20:63:75:a9:08:ff:e7:c7:d7:
                    a4:d0:11:ec:31:15:c6:32:99:83:a6:96:03:03:d8:
                    15:6a:4f:5d:06:92:68:35:1c:ee:7f:ac:fd:eb:7c:
                    4b:94:d2:e0:12:a4:ba:bf:24:f6:da:98:74:c4:21:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1A:1C:76:29:6A:E0:9D:FC:34:22:53:A6:1D:E4:03:46:27:08:4F
            X509v3 Authority Key Identifier:
                keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:d7:64:e7:58:ed:6f:8f:9b:22:92:56:af:01:61:8f:ba:
         9a:dc:49:56:70:09:f7:d8:a8:c7:30:67:b9:6b:ed:32:cd:ff:
         8c:2a:0f:52:44:76:e4:d7:e5:80:87:4e:71:f0:61:c4:06:87:
         68:8d:79:c1:92:1c:22:37:c6:80:03:d9:66:b6:fd:90:68:75:
         c2:1e:61:8b:84:be:69:ba:83:61:ec:4c:03:42:ef:6f:0d:e8:
         4b:1c:18:54:69:46:65:3c:2f:5c:79:0c:98:34:32:94:23:38:
         c7:9e:97:0d:85:1f:bd:f7:35:bd:fb:d8:ef:46:9e:60:62:4f:
         cb:0d:6f:46:f7:bd:6d:f3:e9:b4:fa:cf:04:33:23:1a:ae:4a:
         20:c9:bd:79:fe:77:c9:79:87:0c:f9:bd:f7:5b:14:48:4d:e9:
         65:0c:e9:66:3c:38:d7:d8:c0:a6:7d:37:f5:eb:51:94:c6:67:
         08:7a:92:d1:91:6e:1d:40:b1:fc:cb:d5:f3:54:50:69:fb:ba:
         93:a5:74:b0:98:05:75:d9:65:57:72:df:1f:bc:9e:9d:f5:fb:
         9e:8e:8a:c0:1e:63:5b:24:30:e4:5f:d5:0b:2f:d3:a2:b9:55:
         be:ef:ae:e4:51:d4:58:92:0d:5d:bc:20:5d:cc:e6:6c:a2:42:
         10:ad:af:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXSRGqtw3gbU91guaX+4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTgzYjQwYjNmNGQ3ZDMxZmIzMzY4ZGFmYWNhMTE5OWE0
NDk4OTIwHhcNMjYwODE0MTMwMTM5WhcNMjYwODE1MTMwMTM5WjAzMTEwLwYDVQQD
Eyg2MDFhMWM3NjI5NmFlMDlkZmMzNDIyNTNhNjFkZTQwMzQ2MjcwODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QmH+EJLehoztvBFJVzaMmr2ERk/
Bj5rBan4QfEM3iedP6nri1yveJK2MClGoVwQi6p11w/VNjSc7+QYzQRCIKrgObtR
YJaG6/rvz+Baia3ud+g3TNvvbfFhO0Zy13BGRpF2dnVyMShh62is5dSkg+VHB9J/
kaC0tmowS0AVrjRrtUpIJ72Ve4axTLz0xlaWskUpl/fIAKFa/jtTEKxcLoX9njho
NCzpD2Kx6p988fmw2C2hc/hv0DgoZIHL9P8qeHCpkC9EVG8gY3WpCP/nx9ek0BHs
MRXGMpmDppYDA9gVak9dBpJoNRzuf6z963xLlNLgEqS6vyT22ph0xCH8yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAaHHYpauCd/DQiU6Yd5ANGJwhPMB8GA1UdIwQY
MBaAFOWoO0Cz9NfTH7M2ja+soRmaRJiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEt
M2QzODg2MDZkYTEyLzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEtM2QzODg2MDZkYTEy
LzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6jXZOdY
7W+PmyKSVq8BYY+6mtxJVnAJ99ioxzBnuWvtMs3/jCoPUkR25NflgIdOcfBhxAaH
aI15wZIcIjfGgAPZZrb9kGh1wh5hi4S+abqDYexMA0Lvbw3oSxwYVGlGZTwvXHkM
mDQylCM4x56XDYUfvfc1vfvY70aeYGJPyw1vRve9bfPptPrPBDMjGq5KIMm9ef53
yXmHDPm991sUSE3pZQzpZjw419jApn039etRlMZnCHqS0ZFuHUCx/MvV81RQafu6
k6V0sJgFddllV3LfH7yenfX7no6KwB5jWyQw5F/VCy/TorlVvu+u5FHUWJINXbwg
XczmbKJCEK2vyQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:55 2026 by rpki-client