Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
File:                     5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft (raw, json)
Hash identifier:          a5cbdqbRu1NZFo+p27MSwkgwK/3Sgq0ZZ2nIiyAZtrY=
Subject key identifier:   72:11:89:65:42:AA:F0:B6:39:09:87:90:90:0A:3F:30:4B:51:56:A9
Authority key identifier: E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25
Certificate issuer:       /CN=e50504d3ee94dc68c3207edd71df884279574125
Certificate serial:       01A0035D7572C2BB2D221E2A8A11B2D9C68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:00:51 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:51 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:51 +0000
Files and hashes:         1: 5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl (hash: Zc0ZCyaBKGt7UQRqoXY2doRQ6zj6Czilz7Cd/lfif5Q=)
                          2: uieVQKIrYQnOS10ZPQidTSptqvk.roa (hash: MivO7hC4cgF74++kcIqr2G3F0NA+YWEQTrP/kODx1y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:75:72:c2:bb:2d:22:1e:2a:8a:11:b2:d9:c6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50504d3ee94dc68c3207edd71df884279574125
        Validity
            Not Before: Aug 15 03:00:51 2026 GMT
            Not After : Aug 16 03:00:51 2026 GMT
        Subject: CN=7211896542aaf0b639098790900a3f304b5156a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:33:01:b9:38:48:f1:06:a4:6d:e7:01:b4:
                    a3:c8:c4:e7:81:49:1d:19:8c:f7:04:41:97:df:52:
                    c6:06:26:2f:3f:d9:e6:bd:c3:2d:d0:23:eb:93:cc:
                    8d:08:47:41:28:3b:b1:31:4a:2b:a5:ca:f1:f3:c4:
                    cb:e4:ae:e5:55:2d:f6:43:93:86:6e:d4:38:05:56:
                    31:06:00:63:8c:09:b7:84:48:6c:68:e6:b7:fa:ad:
                    96:f8:7e:50:f8:40:23:00:c2:c1:98:bc:60:f9:0e:
                    67:c3:30:3f:14:99:df:26:d3:77:1b:c7:6d:01:3d:
                    d5:eb:24:14:d4:b0:55:6d:b4:93:96:6a:29:ff:de:
                    61:57:12:0c:a3:28:b8:9d:05:54:c6:08:cf:99:f5:
                    5c:f6:10:53:60:ab:d5:8e:32:07:6e:b0:52:98:4c:
                    70:93:1e:b9:24:fe:7a:43:d6:b4:72:04:a5:20:ec:
                    37:f7:45:45:08:78:e9:fb:f6:3b:7a:37:49:b0:77:
                    8b:64:a7:b8:61:3a:ce:5c:b8:3b:c8:a2:60:5e:f9:
                    52:f5:6a:8b:69:30:d0:80:9e:89:43:c8:ab:15:e5:
                    ac:c7:f2:77:b0:e8:b0:c9:d1:0b:36:e6:48:67:53:
                    f8:27:d0:a9:6c:e1:31:72:25:40:33:59:44:50:4b:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:11:89:65:42:AA:F0:B6:39:09:87:90:90:0A:3F:30:4B:51:56:A9
            X509v3 Authority Key Identifier:
                keyid:E5:05:04:D3:EE:94:DC:68:C3:20:7E:DD:71:DF:88:42:79:57:41:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QUE0-6U3GjDIH7dcd-IQnlXQSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/290221-8f36-48ed-9b79-1d29c14b3800/1/5QUE0-6U3GjDIH7dcd-IQnlXQSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:81:3a:3b:5c:02:29:84:6a:06:91:55:b5:45:33:1a:c6:e2:
         77:8d:0c:54:f8:fb:39:56:c8:6b:90:d8:54:2a:6f:33:65:57:
         73:e5:6d:df:fb:38:a1:b1:97:8d:8b:25:3b:87:57:d8:8b:d1:
         2e:42:51:53:e6:f9:1c:f5:84:ae:a4:13:40:67:95:a5:24:07:
         3c:bf:d5:23:75:01:06:79:d8:e1:d5:15:41:42:11:47:60:47:
         4b:d0:69:9f:0c:c8:56:e1:9f:16:72:1a:03:be:66:29:25:b6:
         9a:73:2c:9e:5d:f4:6b:a5:91:21:cc:9c:76:de:c0:af:28:20:
         3c:fc:c1:93:c4:e2:8d:2c:a5:99:45:36:7a:0f:7a:27:4f:12:
         44:ac:18:63:85:ac:cf:06:21:18:f4:ad:4f:7e:a0:0b:93:12:
         e1:38:ad:a1:d5:92:13:d1:c3:70:f8:64:31:0b:ac:d6:4f:ee:
         cf:0f:8e:ca:84:25:05:52:21:89:79:e2:98:8d:b6:4a:54:5e:
         5d:d9:04:83:51:70:59:96:14:1e:cd:a8:f3:ee:b7:bc:85:a7:
         13:cd:12:cd:87:6a:15:3e:a9:31:a7:07:8b:c0:73:90:fa:ed:
         68:c7:ef:01:a4:88:54:65:69:25:3b:14:55:8b:c5:c0:08:cb:
         05:b3:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:02:04 2026 by rpki-client