Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File:                     5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier:          KcJsIy+YUV3/60pA/Lth0uGgfRyG95H5kP/9oBF3d3I=
Subject key identifier:   34:D8:C5:BA:F5:65:08:91:50:AD:31:94:05:2B:07:15:B4:45:FC:4F
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       01A0024B43866CA4899E5118404683C98BA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number:          1544
Signing time:             Fri 14 Aug 2026 22:01:21 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:21 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:21 +0000
Files and hashes:         1: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: 8NOU6TH+JL+JGE68P0hv1S9YtO+kFbfN/OUuZV0Lg4M=)
                          2: A1D00v3A4CQZLEI4nsAImmP-iFw.roa (hash: E/3ao48NIzK+YhB3GFzpFI3pAlwXP3xA9O+zTwVZIJ0=)
                          3: GJZc_gLiiRe7OqjNr9x1ky7xXpg.roa (hash: 8nJXVrKq22+Fo+U1/ucjOBB+qvYDFNRUhH11zvrhaPE=)
                          4: kqPwo-tGhdHXOEYZAA2rZ5T34g4.roa (hash: 4MUqRPaEDTzgXrU6Y0k0IEZ7T2M+taIszXucXEvAMGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:43:86:6c:a4:89:9e:51:18:40:46:83:c9:8b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Aug 14 22:01:21 2026 GMT
            Not After : Aug 15 22:01:21 2026 GMT
        Subject: CN=34d8c5baf565089150ad3194052b0715b445fc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:8f:a7:41:cb:2b:75:ea:c2:a0:31:fe:d5:
                    10:ae:33:43:1b:27:ca:e3:87:d2:68:b2:c6:3f:64:
                    60:07:d7:20:e9:ad:3c:a8:94:a7:78:a7:6e:27:14:
                    1b:b4:7f:63:ec:d8:b4:ea:35:8e:fa:1a:07:01:0c:
                    bd:52:81:77:d4:77:e0:5c:d0:4f:f2:29:97:ac:81:
                    41:e3:f3:bd:5d:81:5d:c0:9b:db:e5:d5:0e:11:f0:
                    e9:43:18:60:95:0b:24:35:d5:0e:0c:b5:38:c4:28:
                    19:3b:bd:c3:58:2f:ba:27:d6:4b:d0:25:32:56:41:
                    25:f3:53:41:23:3a:5a:7f:e4:cb:e6:67:ec:0e:42:
                    04:11:0c:d7:93:99:95:87:59:bb:55:03:fd:a0:12:
                    08:ab:f6:9f:80:c3:47:1a:8a:7c:00:dd:74:cd:06:
                    2e:ef:4e:83:27:3e:36:38:72:c4:e4:c3:d5:f4:da:
                    87:29:2d:8d:d0:83:6a:ee:69:8f:ad:d5:b4:e6:6e:
                    2c:4a:43:7f:ae:0a:fc:60:7b:de:51:f7:60:fd:7f:
                    41:11:a1:21:7f:c7:11:a8:cf:d1:a4:13:e7:58:4c:
                    ee:bd:4b:be:65:db:84:61:5d:41:40:c2:14:02:7a:
                    b4:2b:a0:bd:c2:5d:e9:27:58:b0:8f:ab:8d:b0:ab:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D8:C5:BA:F5:65:08:91:50:AD:31:94:05:2B:07:15:B4:45:FC:4F
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:56:4c:10:01:bb:1c:36:14:94:91:51:f5:ea:49:ac:73:
         ab:2f:9c:a4:57:25:4d:14:57:fb:fb:ac:77:45:e9:66:c2:c0:
         38:18:31:9b:73:0e:ca:02:be:14:a1:23:6a:97:c2:5a:19:8f:
         a6:07:45:de:cc:5e:62:54:97:78:69:ce:90:d4:e5:ee:a6:fe:
         da:33:49:da:8c:7e:4f:6a:8f:7e:ab:ab:6f:94:1c:89:9f:b6:
         5a:98:b5:14:94:99:7e:9f:e5:53:ff:7d:c4:20:0f:a1:a8:3e:
         43:a2:7f:33:17:f4:f0:18:e1:2a:80:fa:41:04:e5:d8:37:28:
         45:e5:7a:8a:60:57:9d:d0:47:08:3c:e8:13:bf:3d:60:f5:1a:
         37:d5:b6:c3:27:b0:35:b4:15:3f:3e:fe:3f:f1:8d:ab:4a:4a:
         da:69:9f:97:27:5d:d3:36:e0:8c:6c:d4:54:d7:a3:54:81:cd:
         d8:b4:12:22:48:a3:69:50:c3:41:0b:69:26:b1:80:51:a6:70:
         a7:09:ef:ca:0b:a7:42:e0:38:d6:a7:e8:69:9c:f2:2c:34:a5:
         d6:fa:ec:57:38:a8:7d:94:f9:9e:aa:1e:de:bb:1b:ad:88:65:
         f8:ca:5a:cc:e6:03:45:34:42:ef:e7:f5:d5:02:0b:27:0e:d8:
         86:b7:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:04 2026 by rpki-client