Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File:                     5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier:          uz1jY3iRpBAKrFPsjarIGQr/2nudFXhYzJcn4ZOMZbY=
Subject key identifier:   56:23:E5:1D:20:26:D2:75:F5:3F:D8:2C:A6:EA:C8:C5:4C:22:E0:A2
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer:       /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial:       01A0016F51CBF4A1CB935961376A21BC8043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number:          16B2
Signing time:             Fri 14 Aug 2026 18:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:07 +0000
Files and hashes:         1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: 9P/TKBiu/Rf2ny+kLhfgA6PRrhD179HhnsaORoSM38I=)
                          2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:51:cb:f4:a1:cb:93:59:61:37:6a:21:bc:80:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
        Validity
            Not Before: Aug 14 18:01:07 2026 GMT
            Not After : Aug 15 18:01:07 2026 GMT
        Subject: CN=5623e51d2026d275f53fd82ca6eac8c54c22e0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:2e:af:1f:c4:f7:fb:bd:07:7f:6b:5b:53:
                    2d:47:56:29:a7:64:aa:f3:4f:f3:64:96:3b:28:4e:
                    68:79:ad:5d:8e:fa:fa:24:b6:b4:61:c0:48:13:5d:
                    d3:36:94:8b:09:77:ec:78:7e:6c:c5:36:88:a9:19:
                    57:bf:62:bb:9e:80:9a:ab:d0:bd:71:ca:57:45:e6:
                    07:ce:e8:70:b9:35:b0:04:ba:08:f4:95:60:88:aa:
                    49:cf:3a:01:d2:2e:e8:81:48:89:0e:ce:4a:12:2b:
                    d1:00:88:a1:45:2a:94:86:7f:c2:fd:f4:78:ba:5b:
                    fb:cb:77:5a:b9:cf:5c:62:fd:93:2f:02:e9:f0:3d:
                    8d:46:20:b0:68:f7:b6:df:71:87:35:08:71:af:48:
                    22:56:b5:6b:09:a2:cb:40:96:66:0f:19:93:f8:25:
                    90:52:bc:26:70:d0:05:99:68:f2:6c:80:9e:38:fc:
                    1b:f6:43:6c:43:0c:57:3f:d0:53:6f:c0:0d:ce:15:
                    86:e0:2b:35:3a:d6:0c:f0:e7:46:12:7e:97:75:b2:
                    c7:32:b5:80:9c:24:77:c8:db:54:c2:84:c4:7f:d5:
                    5c:04:9c:f9:b8:c8:0f:44:f2:c0:04:9f:08:12:ec:
                    e6:5a:8e:43:97:13:a6:8b:b5:66:46:1d:15:9b:f2:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:23:E5:1D:20:26:D2:75:F5:3F:D8:2C:A6:EA:C8:C5:4C:22:E0:A2
            X509v3 Authority Key Identifier:
                keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1e:db:ac:46:c8:58:9c:64:c9:0d:44:fe:c7:9d:b2:48:95:
         d0:80:84:1f:c0:04:3d:a0:4c:2a:37:34:d9:cd:d6:19:f4:82:
         6b:38:1f:2a:96:19:98:a4:fd:7c:61:db:58:40:d3:12:22:3f:
         32:e0:63:a0:10:85:73:da:fe:9e:73:70:de:be:cc:f3:75:0a:
         5c:0e:54:dd:59:68:35:11:89:2e:a9:9b:dc:91:02:bd:f1:d6:
         d6:bc:a6:1c:00:be:93:42:a2:85:bc:30:4b:7b:ed:05:e4:15:
         f9:8b:ed:74:bb:ec:d9:97:72:81:45:c4:c2:f4:de:1c:6e:f8:
         2e:93:3d:b1:47:2b:ba:e3:18:41:a8:8a:56:68:f0:5d:04:f0:
         2b:33:0c:86:f9:02:ba:2b:37:53:0d:bc:ec:20:60:f9:a8:f1:
         86:b4:30:9e:94:b1:61:72:7e:76:ac:29:a0:48:17:31:78:e4:
         8c:39:e5:f6:fc:6e:c5:17:12:e9:35:4c:15:00:43:8d:51:f8:
         dd:25:66:fe:1d:92:9d:7b:62:0d:bc:ca:9b:65:e2:1a:83:b8:
         ab:ed:34:b1:63:61:70:03:18:33:a3:b4:e0:59:e9:de:50:99:
         20:3e:e3:17:10:04:0c:f0:cb:08:56:1c:9e:fc:13:84:b7:01:
         52:19:2b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:24 2026 by rpki-client