Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File:                     5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier:          m3/1y13B5iCpkAnw2FBFumK5Jkc1TI2erqtzn0DwGNU=
Subject key identifier:   3A:C2:84:8C:CC:C8:5A:97:4A:B6:7D:2D:59:BF:20:F8:3F:79:41:F5
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer:       /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial:       01A001A5CEA69F26DA71C4652D9D9DF85979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number:          1552
Signing time:             Fri 14 Aug 2026 19:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:38 +0000
Files and hashes:         1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: Y3g6nu+YNAZLeORR7rx9rBxXSRzAWW9WwecUzK7T5TI=)
                          2: xyBwWE1V7pzMi_BB3s_8J8GEyes.roa (hash: taqunFOi7PSx5Yj4Rqnf0/xGpAdLHU4niJLVDbS+7yI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:ce:a6:9f:26:da:71:c4:65:2d:9d:9d:f8:59:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
        Validity
            Not Before: Aug 14 19:00:38 2026 GMT
            Not After : Aug 15 19:00:38 2026 GMT
        Subject: CN=3ac2848cccc85a974ab67d2d59bf20f83f7941f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:c1:4f:97:bd:ae:ab:cf:e3:fb:79:7d:89:
                    34:52:29:8d:15:53:27:59:fd:6c:76:20:82:ab:d7:
                    11:87:3b:fc:98:f3:7f:96:d9:46:a5:4b:3b:9f:ff:
                    36:3b:4d:3c:e5:ad:36:5c:92:93:b0:da:41:57:ca:
                    f3:bc:69:74:9e:d0:39:a1:6c:b4:30:51:ca:5e:0a:
                    ce:87:78:24:ee:24:51:1b:d4:7c:c7:10:37:3d:fa:
                    bb:68:6f:64:3d:30:63:73:09:91:28:10:4e:00:68:
                    8d:3b:38:3b:f3:46:57:ac:7a:0b:68:10:fc:04:5a:
                    2e:54:92:a7:18:96:63:ca:ab:9e:ab:ff:95:73:34:
                    54:ae:3c:7c:f5:d3:88:4d:40:44:e0:6d:21:dd:e6:
                    79:0f:52:d3:16:66:79:97:41:1c:b0:ae:fc:9d:63:
                    c2:fd:76:85:31:4c:dd:b6:c6:2b:23:f1:39:7f:e1:
                    f2:23:a5:9f:17:1e:79:de:65:b5:2a:fd:40:92:aa:
                    02:80:cc:81:78:99:d3:ed:ab:02:7f:20:3c:71:e8:
                    d7:84:c4:fc:08:9e:bf:8b:3a:a5:be:c0:64:9a:04:
                    86:65:32:a1:1f:d5:86:42:70:48:a2:1e:c6:dd:91:
                    54:9a:9b:ca:2c:ab:4b:a8:f6:3f:97:04:cf:64:1f:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C2:84:8C:CC:C8:5A:97:4A:B6:7D:2D:59:BF:20:F8:3F:79:41:F5
            X509v3 Authority Key Identifier:
                keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:97:5b:9f:62:2d:44:a9:5e:df:e5:df:cd:e2:d8:00:5b:01:
         b8:a2:22:6c:f3:fb:7a:19:39:42:09:33:18:f4:c4:62:3a:82:
         35:ab:60:b7:ac:cb:d9:65:14:e1:8a:59:61:dc:ab:1f:66:34:
         02:3a:1d:22:28:04:77:99:7a:34:4e:1b:d1:88:9c:18:63:8c:
         bb:3c:31:c5:82:a7:de:46:51:1f:9b:84:d5:32:26:42:23:b3:
         ee:e4:24:48:5f:ec:5d:b3:13:03:87:dd:72:b3:56:c3:ee:ee:
         9b:aa:9d:34:05:80:e6:27:ef:4a:1b:b3:7b:12:2f:90:3c:1c:
         66:1b:1b:3a:a4:ca:a7:ac:7d:ea:57:b3:bd:cb:2f:f6:e3:18:
         49:6f:e9:7d:df:71:9d:68:b7:dd:47:c1:62:68:0b:76:38:9e:
         b1:00:4c:ca:f5:17:76:f2:fc:90:78:0e:6b:a3:3e:c6:60:c5:
         95:70:3a:d8:38:e5:ad:22:51:2c:86:51:73:04:99:3f:2b:05:
         f6:ae:39:2f:39:ec:1f:b7:cd:d7:ad:f0:21:46:c8:65:4d:5d:
         11:d4:84:94:c3:78:3b:27:b8:b0:37:2c:78:20:6c:eb:28:9c:
         73:95:64:e0:a5:8e:ae:a2:85:e0:88:0b:4f:fc:66:60:0a:42:
         8c:99:bd:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpc6mnybaccRlLZ2d+Fl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MjJmNjUzOTc4MWM1MGJjNDk3YzdhMGI2ZjVkNTA1ZWY4
OGI5ZDYwHhcNMjYwODE0MTkwMDM4WhcNMjYwODE1MTkwMDM4WjAzMTEwLwYDVQQD
EygzYWMyODQ4Y2NjYzg1YTk3NGFiNjdkMmQ1OWJmMjBmODNmNzk0MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eDBT5e9rqvP4/t5fYk0UimNFVMn
Wf1sdiCCq9cRhzv8mPN/ltlGpUs7n/82O0085a02XJKTsNpBV8rzvGl0ntA5oWy0
MFHKXgrOh3gk7iRRG9R8xxA3Pfq7aG9kPTBjcwmRKBBOAGiNOzg780ZXrHoLaBD8
BFouVJKnGJZjyqueq/+VczRUrjx89dOITUBE4G0h3eZ5D1LTFmZ5l0EcsK78nWPC
/XaFMUzdtsYrI/E5f+HyI6WfFx553mW1Kv1AkqoCgMyBeJnT7asCfyA8cejXhMT8
CJ6/izqlvsBkmgSGZTKhH9WGQnBIoh7G3ZFUmpvKLKtLqPY/lwTPZB/y9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrChIzMyFqXSrZ9LVm/IPg/eUH1MB8GA1UdIwQY
MBaAFOYi9lOXgcULxJfHoLb11QXviLnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xMWFhOGMtOTU5MS00Y2M4LWE3NmEt
Njk4ZTZhOGU2NzA4LzEvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xMWFhOGMtOTU5MS00Y2M4LWE3NmEtNjk4ZTZhOGU2NzA4
LzEvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Jdbn2It
RKle3+XfzeLYAFsBuKIibPP7ehk5QgkzGPTEYjqCNatgt6zL2WUU4YpZYdyrH2Y0
AjodIigEd5l6NE4b0YicGGOMuzwxxYKn3kZRH5uE1TImQiOz7uQkSF/sXbMTA4fd
crNWw+7um6qdNAWA5ifvShuzexIvkDwcZhsbOqTKp6x96lezvcsv9uMYSW/pfd9x
nWi33UfBYmgLdjiesQBMyvUXdvL8kHgOa6M+xmDFlXA62DjlrSJRLIZRcwSZPysF
9q45LznsH7fN163wIUbIZU1dEdSElMN4Oye4sDcseCBs6yicc5Vk4KWOrqKF4IgL
T/xmYApCjJm9qw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:19 2026 by rpki-client