Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          1Fw4gt2lIT/X9vxa5lzeWpXx30HCuh6tn+K3DWo+MbE=
Subject key identifier:   61:15:3C:D9:50:EF:76:37:D1:98:66:FC:38:75:A6:CD:5D:D0:04:9A
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       01A001A67F64392A36F26D3776EE0A902B34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0DB0
Signing time:             Fri 14 Aug 2026 19:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:23 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: xHMVQ3QASZydDFY3E0IrlC9j0vZK8bTu/iubmQgoevA=)
                          2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:7f:64:39:2a:36:f2:6d:37:76:ee:0a:90:2b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Aug 14 19:01:23 2026 GMT
            Not After : Aug 15 19:01:23 2026 GMT
        Subject: CN=61153cd950ef7637d19866fc3875a6cd5dd0049a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:84:2a:27:70:fe:c3:e4:c1:b9:81:d2:b9:
                    db:9b:67:76:c7:fc:f3:55:9a:33:57:be:33:df:b9:
                    b0:50:2b:e7:38:06:9b:df:b4:58:7b:68:5d:95:ec:
                    ac:cb:2b:7c:96:99:b5:40:ae:1d:da:84:61:71:67:
                    77:a6:e7:a9:ab:68:98:8c:bd:56:77:d2:54:62:85:
                    c8:51:04:94:3e:07:83:7c:c4:bb:90:07:93:ed:dd:
                    a2:45:d9:a7:32:1a:01:a8:0b:0b:70:80:2c:f2:3c:
                    bd:54:da:49:f4:71:2d:a9:31:26:a4:ca:44:4d:8f:
                    24:e1:15:ea:09:92:51:cc:d3:77:56:67:25:7e:0b:
                    fd:3b:ec:97:8d:dc:10:24:47:94:0f:52:9b:61:1d:
                    01:21:6e:93:bb:87:34:df:f1:b2:64:65:75:b7:8b:
                    16:2a:1d:54:46:58:48:b3:da:cf:db:b7:5a:f3:cc:
                    53:02:8d:c9:0d:1f:cf:9f:3c:aa:6e:19:fa:c9:20:
                    f6:c6:85:f9:49:2e:03:af:a4:f7:16:ea:d9:3e:9e:
                    d6:d1:4f:89:8d:e4:5a:18:68:38:bc:3c:25:6e:23:
                    28:d2:17:2d:50:a7:08:18:e3:98:31:74:c5:40:61:
                    47:1a:dd:5d:19:89:23:84:ee:db:0d:99:06:cb:8a:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:15:3C:D9:50:EF:76:37:D1:98:66:FC:38:75:A6:CD:5D:D0:04:9A
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:d3:bb:46:9f:6e:69:4f:ba:ff:8a:d5:0f:a6:c1:4c:e8:
         7f:64:9f:bf:88:58:d4:2a:f0:79:7e:16:37:25:ff:76:08:4e:
         ee:b6:56:2e:e3:82:18:ac:0c:48:8d:64:83:2d:34:c8:4d:70:
         16:fb:76:de:65:c4:73:e9:d7:c4:1c:b3:85:a2:0e:63:6d:b7:
         88:f1:29:bc:e5:1b:b8:c3:ac:48:7e:4f:f1:a8:d0:0f:dd:26:
         2d:9a:3d:ae:20:17:03:5f:2b:2b:83:45:49:32:7d:db:c6:51:
         0c:ba:ca:f9:3f:51:d5:1d:cd:e1:e2:b2:14:ac:f1:61:a7:83:
         2e:ad:b3:03:05:2d:d5:02:71:d6:6e:65:84:bf:e7:4d:81:fa:
         86:42:32:02:3d:9d:9b:85:8c:b5:54:7d:ea:27:fa:19:38:47:
         00:90:60:3f:a2:d7:4e:70:2b:26:51:d4:40:f6:0e:45:57:c9:
         87:46:51:d7:0b:db:37:73:81:d5:72:fa:9f:5b:fe:c6:01:e3:
         a1:95:b3:b8:64:5d:a3:7a:43:86:ca:d3:26:db:d3:a6:ec:87:
         67:ef:25:85:eb:b3:0d:a6:b2:dc:60:86:18:ad:fe:2d:b6:8c:
         ba:e1:bf:c4:6c:0c:a0:6c:7a:c0:16:9e:a6:30:b9:9d:a7:c8:
         2f:4e:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:23 2026 by rpki-client