Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File:                     5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier:          v6su0FqwRWXsoIThIdYxvn6iVLPubq3Zh1NGgUIhJxQ=
Subject key identifier:   00:21:E4:53:8D:B4:04:5D:EF:0C:01:FC:20:03:B8:8C:FB:A8:DD:D1
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer:       /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial:       019FA0E0BE1152D83C284600152F4C217B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number:          01E7
Signing time:             Mon 27 Jul 2026 00:01:51 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:51 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:51 +0000
Files and hashes:         1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: vtyZ4C4kVFyypPoz0+9GgPlgHMuNGbkIyUwiF4Z+JH8=)
                          2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:be:11:52:d8:3c:28:46:00:15:2f:4c:21:7b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
        Validity
            Not Before: Jul 27 00:01:51 2026 GMT
            Not After : Jul 28 00:01:51 2026 GMT
        Subject: CN=0021e4538db4045def0c01fc2003b88cfba8ddd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:17:f0:9e:42:30:fe:5c:df:23:b5:7f:23:
                    3f:f5:5d:bd:ec:d5:1b:ab:07:4f:75:fe:48:73:86:
                    14:a7:78:7b:4b:24:8b:2b:5f:6c:1b:e1:37:08:e6:
                    e9:25:cb:f7:c5:da:04:84:ea:7e:fb:29:76:70:89:
                    57:19:14:2f:ce:2a:37:7c:91:9c:f8:09:b4:cb:56:
                    ae:7d:a7:16:cc:4b:78:da:b1:94:a6:6f:99:fd:c4:
                    7a:f2:5a:08:af:87:67:b7:03:27:33:df:71:1f:d3:
                    ef:2c:9b:b8:ca:98:4c:9f:02:8a:a1:8b:85:48:98:
                    4c:b6:1c:73:a7:b9:86:e9:0f:b5:93:66:03:41:41:
                    3f:63:18:35:b7:c3:1a:3f:4a:68:24:07:8f:36:39:
                    81:0b:62:15:ab:4f:8d:ce:df:49:c7:bd:5c:69:e2:
                    ab:c8:1b:ca:ec:38:64:ac:c9:06:90:82:7f:f7:3c:
                    a6:41:f2:2a:85:e5:7c:2d:82:6b:2d:32:8a:a1:9a:
                    7f:cc:c0:c3:fd:c2:56:57:c5:f9:c7:45:d7:57:da:
                    d3:1a:29:7d:b8:38:f6:c9:cf:43:68:9f:4f:cb:74:
                    ba:89:b5:d1:8e:59:22:02:d7:76:8f:2f:73:a4:ca:
                    38:cb:80:b5:15:92:1f:61:f3:7e:ad:0f:3f:83:8d:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:21:E4:53:8D:B4:04:5D:EF:0C:01:FC:20:03:B8:8C:FB:A8:DD:D1
            X509v3 Authority Key Identifier:
                keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:de:f4:ea:06:9a:ec:82:b6:88:85:8f:ae:63:12:3b:1b:
         8a:8a:9c:25:d0:b3:e7:db:f2:19:60:40:b8:0f:cf:98:c3:9e:
         da:e1:1d:6b:e9:de:62:cb:8c:7c:14:0c:4f:d2:e5:54:79:8f:
         d3:9e:39:b7:c7:92:fa:ef:1d:1a:57:70:58:b4:e1:ef:0e:18:
         87:b4:9e:2f:e2:b5:84:18:c4:9a:18:4c:3d:5e:01:5b:0c:ed:
         af:09:2e:8d:57:ac:c4:c2:62:93:43:67:3a:1a:4e:28:1d:04:
         c6:0c:47:48:e4:64:80:c3:b3:c3:04:df:96:17:b3:40:17:5a:
         b3:04:b9:69:e6:84:ef:17:ea:aa:3e:f4:f3:26:b7:2f:47:06:
         34:c5:60:56:f7:04:a1:a1:34:5b:18:39:22:b6:d7:a0:a4:53:
         3c:48:2a:3a:0b:bb:fc:01:94:71:15:37:da:1c:70:28:9f:a7:
         e5:51:e6:dc:40:fd:53:71:6b:25:c6:b6:54:15:e3:4a:ee:82:
         4b:2f:60:5b:34:0a:30:35:9a:a9:1f:54:23:c7:3e:7b:c3:29:
         f1:fe:f5:2a:3b:e9:1d:25:5d:67:4d:2e:8d:f4:0b:48:5d:d3:
         86:e2:26:2a:db:93:39:d6:c1:e0:87:a8:f7:1e:77:62:43:78:
         d3:23:0d:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4L4RUtg8KEYAFS9MIXtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YWE1MzNmNDc1ZjA3OWY3MzVmZWIxOTQ2ODRjMThkNWFl
YTYzMmYwHhcNMjYwNzI3MDAwMTUxWhcNMjYwNzI4MDAwMTUxWjAzMTEwLwYDVQQD
EygwMDIxZTQ1MzhkYjQwNDVkZWYwYzAxZmMyMDAzYjg4Y2ZiYThkZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkgX8J5CMP5c3yO1fyM/9V297NUb
qwdPdf5Ic4YUp3h7SySLK19sG+E3CObpJcv3xdoEhOp++yl2cIlXGRQvzio3fJGc
+Am0y1aufacWzEt42rGUpm+Z/cR68loIr4dntwMnM99xH9PvLJu4yphMnwKKoYuF
SJhMthxzp7mG6Q+1k2YDQUE/Yxg1t8MaP0poJAePNjmBC2IVq0+Nzt9Jx71caeKr
yBvK7DhkrMkGkIJ/9zymQfIqheV8LYJrLTKKoZp/zMDD/cJWV8X5x0XXV9rTGil9
uDj2yc9DaJ9Py3S6ibXRjlkiAtd2jy9zpMo4y4C1FZIfYfN+rQ8/g4022wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAh5FONtARd7wwB/CADuIz7qN3RMB8GA1UdIwQY
MBaAFOSqUz9HXwefc1/rGUaEwY1a6mMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lN2I3MGQtNjAwMS00MjhiLWFkZDAt
MzdjMjEwYmFiN2EwLzEvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lN2I3MGQtNjAwMS00MjhiLWFkZDAtMzdjMjEwYmFiN2Ew
LzEvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDre9OoG
muyCtoiFj65jEjsbioqcJdCz59vyGWBAuA/PmMOe2uEda+neYsuMfBQMT9LlVHmP
0545t8eS+u8dGldwWLTh7w4Yh7SeL+K1hBjEmhhMPV4BWwztrwkujVesxMJik0Nn
OhpOKB0ExgxHSORkgMOzwwTflhezQBdaswS5aeaE7xfqqj708ya3L0cGNMVgVvcE
oaE0Wxg5IrbXoKRTPEgqOgu7/AGUcRU32hxwKJ+n5VHm3ED9U3FrJca2VBXjSu6C
Sy9gWzQKMDWaqR9UI8c+e8Mp8f71KjvpHSVdZ00ujfQLSF3ThuImKtuTOdbB4Ieo
9x53YkN40yMN/A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:00 2026 by rpki-client