Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File:                     5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier:          3eSu+dAuGLfeXNjEHRmjVGYM3qM5MXaZd6uD/xQdzFo=
Subject key identifier:   E5:E7:E6:F3:4F:D8:8A:7E:03:A8:8D:17:88:6D:2B:27:FA:28:A1:A6
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer:       /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial:       019F17C2D8FFE5BE1DD5F9DA24B0204AEB00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number:          0A48
Signing time:             Tue 30 Jun 2026 09:01:13 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:13 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:13 +0000
Files and hashes:         1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: GprcsKjYJn2pWCb/CS75rbhFHd/hCKyVxP8R6LWJrpI=)
                          2: Kk4LDgdB-B800f9u3tWCJ7yc42M.roa (hash: NS3W/PHz2/PR1iY3gv8q+ys5JQiUE/3iGtRiW45w9jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:d8:ff:e5:be:1d:d5:f9:da:24:b0:20:4a:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
        Validity
            Not Before: Jun 30 09:01:13 2026 GMT
            Not After : Jul  1 09:01:13 2026 GMT
        Subject: CN=e5e7e6f34fd88a7e03a88d17886d2b27fa28a1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:73:b7:83:39:8a:ab:c1:79:da:10:73:57:
                    d5:94:cd:57:f2:9a:27:c5:0f:38:5c:6e:93:22:64:
                    38:b9:27:c9:f3:ea:73:62:75:d9:9b:9f:5c:d7:2a:
                    d3:60:42:16:96:a4:21:2d:87:b4:2c:8d:5a:a1:ab:
                    6e:d4:a6:44:0e:70:f9:8c:53:15:46:84:96:90:c7:
                    0a:93:e6:e5:d0:fc:0c:25:7f:fd:1f:89:ca:ad:0f:
                    c9:ec:d2:63:69:ef:f3:c0:ee:88:02:7f:ff:f9:d0:
                    31:9c:9c:b1:17:8b:a8:73:15:16:c0:04:e0:27:d1:
                    8a:be:0f:5a:30:62:40:2e:63:07:5e:e9:7e:86:3b:
                    35:fd:fe:b9:51:07:f6:bf:22:b5:ba:e0:aa:75:bd:
                    6d:a4:6c:be:b7:e8:29:7f:b2:e6:65:be:a8:e9:2e:
                    1a:25:ca:b8:c6:66:c1:8f:d2:67:40:1e:cd:ef:c8:
                    16:49:86:a7:5d:2c:7e:0a:c5:4d:f1:da:4a:f1:8c:
                    aa:b5:ee:72:35:ac:ad:b0:c7:e3:89:47:1e:f3:c9:
                    59:ae:64:0d:ec:cf:66:c7:86:93:19:ec:2b:fe:19:
                    4a:e1:66:22:bc:cd:73:92:0f:f5:ef:75:3f:cf:68:
                    96:96:6b:d2:f3:1f:0f:dc:53:2c:d8:f4:a1:04:52:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E7:E6:F3:4F:D8:8A:7E:03:A8:8D:17:88:6D:2B:27:FA:28:A1:A6
            X509v3 Authority Key Identifier:
                keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:06:d8:b7:cc:4c:0f:55:84:e7:27:8b:bf:4e:5d:12:0a:36:
         79:ee:4c:52:c4:6f:6c:14:06:1a:dd:3d:be:79:5b:24:80:d0:
         8d:07:41:06:b4:94:cb:02:19:49:b2:29:16:d5:16:af:68:ba:
         9d:1b:84:7e:36:6b:67:4d:10:a9:6f:9e:21:94:3f:68:eb:4e:
         76:91:53:cd:a7:1c:ec:42:ae:48:44:10:85:b7:37:67:5e:c6:
         9e:6f:62:99:4a:df:7f:9d:65:4c:30:33:ef:63:b0:7a:5e:4a:
         70:7e:0e:66:69:fa:93:dd:09:40:5a:90:c9:31:7a:3e:04:0d:
         51:1c:29:65:ed:28:d5:fa:5b:e5:f4:78:cd:63:cb:18:bf:f5:
         15:80:97:9a:c2:ee:e8:b3:33:ed:c3:e5:e1:3b:cb:1c:3c:e2:
         c5:8f:e6:e6:fa:c9:76:02:26:8f:03:39:10:a8:28:d3:be:ba:
         cb:a2:8a:ad:ff:13:3e:81:30:08:c2:7a:d0:6e:88:72:ad:ce:
         9a:6a:6b:5b:d7:a9:51:3e:28:eb:09:dc:4a:bf:46:f9:97:80:
         de:79:b3:d9:16:de:0f:d6:84:a7:34:fb:3f:bf:0d:5a:9c:e7:
         1f:d1:df:4c:b0:5b:e5:63:d1:0c:f2:71:76:d7:0a:10:ce:20:
         69:fa:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:57 2026 by rpki-client