Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File:                     5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier:          3AUr6OCPCABw/GvMJbI5T4S0ezuW2RKyY3FPYE66hAs=
Subject key identifier:   27:EC:31:DB:04:EF:3E:1A:B8:F5:93:44:B7:32:56:5B:68:76:07:18
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer:       /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial:       01A0005C5DC1B3C4E38C1CF4E770B9BECB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number:          10F8
Signing time:             Fri 14 Aug 2026 13:00:48 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:48 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:48 +0000
Files and hashes:         1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: jWRSaTyqxtsSKVneixtLP2fQDZ0r7LKtOCuYkxjGx4o=)
                          2: hNYIQ5HHhINGm0B4xE-M57SIxF0.roa (hash: FqszJttjAhJJ6gXeV7wcVvhxNzpQaBx6Ggtmu08rd0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:5d:c1:b3:c4:e3:8c:1c:f4:e7:70:b9:be:cb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
        Validity
            Not Before: Aug 14 13:00:48 2026 GMT
            Not After : Aug 15 13:00:48 2026 GMT
        Subject: CN=27ec31db04ef3e1ab8f59344b732565b68760718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:9c:28:0a:26:7b:97:4e:0a:4a:d0:16:49:
                    88:f7:23:fd:ff:18:9c:62:9b:dd:e7:cb:07:9e:f6:
                    b0:e7:21:d8:51:18:e9:38:2f:86:10:c9:e9:ae:6f:
                    d8:1d:ab:0e:f0:46:85:e1:bc:c4:08:91:d6:d0:08:
                    0a:d5:42:62:99:0b:3e:ee:84:bc:78:56:f6:54:20:
                    26:5f:4f:88:84:cc:29:9f:1e:16:c4:fc:47:34:95:
                    b7:e1:49:73:e3:29:ea:1e:5c:30:6a:bf:5e:93:3f:
                    6a:83:2b:28:73:8e:19:b4:89:b1:2b:c4:15:29:4d:
                    48:81:7a:00:cb:a6:07:07:92:8b:85:be:ed:ac:0f:
                    32:01:12:d7:8a:13:cf:4b:c2:4c:fe:58:04:a3:de:
                    fa:8b:4a:25:af:2a:f8:8e:d1:3a:ba:4a:1b:7e:69:
                    a2:98:ca:38:81:14:50:cd:4d:ed:b1:10:8e:7c:41:
                    66:ee:b7:27:a4:7b:25:07:84:67:97:55:ed:71:89:
                    76:2f:d4:ce:a5:5e:d0:99:91:fe:05:98:4f:71:b2:
                    f5:86:b9:7e:4c:e5:92:44:33:ef:f5:54:c5:01:77:
                    2c:72:90:a8:62:35:3b:52:e6:3f:26:85:2c:34:1c:
                    d5:2a:c2:cf:e6:af:be:50:06:1f:0d:0b:bc:2c:a9:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:31:DB:04:EF:3E:1A:B8:F5:93:44:B7:32:56:5B:68:76:07:18
            X509v3 Authority Key Identifier:
                keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:34:d9:65:ab:04:6e:0f:fc:56:63:89:51:72:52:e4:2d:cc:
         ee:46:0e:a3:b4:8c:54:83:fa:77:09:28:d1:71:8f:a4:a1:49:
         f0:fe:79:c1:b8:0d:76:c1:e1:19:71:f2:53:bf:47:99:f4:ad:
         7d:3d:a2:cb:93:69:c5:43:c8:ed:2b:21:c7:a0:fb:ac:ef:65:
         60:3c:45:98:5b:61:05:d9:31:41:38:e5:e0:b9:f5:de:68:b9:
         a0:1f:0d:e0:f5:0c:ca:d5:14:97:87:39:cb:36:74:6a:c7:cf:
         5f:2f:8e:5b:59:bb:80:2b:cd:12:70:85:39:17:00:3e:0c:c8:
         66:db:a6:dc:a1:04:9f:ff:38:a0:1f:98:2a:5f:a9:7d:b1:24:
         a4:da:8f:ac:1d:3a:d3:20:a2:db:d7:66:92:d6:c0:77:3f:ab:
         a2:2a:fa:9e:84:2e:13:0a:12:3e:7b:d1:f4:e3:1f:ae:ff:d2:
         ea:03:38:a9:6c:94:f2:8b:0e:87:88:54:dc:75:5e:b5:49:8a:
         68:e3:cb:be:8e:f5:0a:c8:9d:87:d7:b9:7c:49:98:77:15:d0:
         d7:69:1d:57:ea:97:fd:0e:45:56:5a:0a:47:21:3b:1b:f3:92:
         bd:e5:2f:22:01:13:c1:4c:eb:87:1f:49:5d:2a:dd:77:8e:f4:
         73:98:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:23 2026 by rpki-client