Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File:                     5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier:          ZA2QWq9dhqxpEkVHHVY3MqvLP0LnzDnAuxCi+UkER9c=
Subject key identifier:   EC:37:5E:5E:3C:FD:57:10:FE:5C:12:A5:E6:A0:53:45:B7:1C:FA:36
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer:       /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial:       019F17558AE3C1DE4C6BE617720C67335149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number:          0A34
Signing time:             Tue 30 Jun 2026 07:01:49 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:49 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:49 +0000
Files and hashes:         1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: vhAGQKAgVKBSZYwHrchQLyQnJ1+c5x6E79t6RzgI684=)
                          2: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (hash: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc=)
                          3: EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (hash: 48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:55:8a:e3:c1:de:4c:6b:e6:17:72:0c:67:33:51:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5164534979e60a564701232b2e5200889542606
        Validity
            Not Before: Jun 30 07:01:49 2026 GMT
            Not After : Jul  1 07:01:49 2026 GMT
        Subject: CN=ec375e5e3cfd5710fe5c12a5e6a05345b71cfa36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:34:46:8d:00:b4:a6:19:74:1e:f3:04:f7:
                    33:79:39:3a:d5:e7:81:49:1d:ec:32:12:3f:2d:bc:
                    1f:1a:c6:00:45:d9:13:99:e6:dc:eb:ec:06:d8:92:
                    a4:45:3c:98:1c:e5:9a:74:c2:e9:2a:8c:df:a7:c3:
                    b1:da:30:1d:2a:db:26:5e:69:71:56:6c:94:1f:c9:
                    b3:35:7c:3e:8d:76:f3:0a:26:91:4b:4d:1f:01:4b:
                    21:3e:88:d2:46:6e:10:fe:7b:e8:4e:a5:3a:74:34:
                    ce:c7:0d:4b:3a:a7:fb:79:14:e8:bb:58:39:ee:41:
                    73:fe:ab:ff:c7:e3:f1:c3:34:d0:0c:7a:49:e2:b9:
                    a4:f3:83:1c:eb:4e:5c:18:d1:34:97:cc:a6:df:e9:
                    38:4c:0c:c5:0f:f5:52:18:22:80:f4:13:e8:48:0f:
                    06:5d:d5:85:be:94:da:5c:4c:9e:03:45:ca:97:4e:
                    7e:71:63:73:b2:22:a0:7a:82:e3:b7:ff:12:1f:2e:
                    93:69:ad:f1:13:34:80:42:e3:c9:a3:16:85:e0:06:
                    4b:5d:b4:99:3f:63:32:16:7c:cd:c5:55:dc:1d:b9:
                    bc:7f:6f:ff:c2:df:cb:d7:fb:74:fb:33:03:de:af:
                    e9:eb:45:ca:02:cc:7d:93:ed:f1:82:ec:1a:60:9b:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:37:5E:5E:3C:FD:57:10:FE:5C:12:A5:E6:A0:53:45:B7:1C:FA:36
            X509v3 Authority Key Identifier:
                keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:03:65:f0:40:b4:aa:a3:40:ac:8c:13:4a:77:4a:85:6f:8b:
         21:03:e4:25:58:83:62:9b:a3:0b:c3:16:43:53:4d:70:70:75:
         cb:35:23:02:d5:83:c1:5c:3e:db:16:3b:ed:e2:73:8e:46:ff:
         5c:89:b1:8f:6f:37:a6:d0:28:92:b6:cf:42:00:cf:19:f9:5a:
         09:0b:9c:99:0a:ad:3e:12:d7:f4:51:b3:49:f9:95:1f:b2:16:
         ca:1f:63:8b:84:cd:e2:ab:19:27:14:b3:7a:2d:a1:c2:fd:23:
         ea:d2:6d:51:d0:46:36:0b:69:f8:ec:c8:cc:ca:86:af:1c:8b:
         0d:30:84:2e:50:96:c5:b2:26:82:ae:11:9f:dd:77:6b:f8:06:
         40:b9:63:33:dc:d6:d9:53:d5:7a:22:b9:93:52:26:08:9e:29:
         31:14:2a:1e:98:4b:aa:ea:1d:30:eb:53:da:1f:c6:de:92:40:
         dd:c1:39:52:a4:6d:e3:aa:10:db:6f:cd:6b:40:80:6d:85:d3:
         72:ae:4d:4a:af:a6:8f:ac:84:3d:f7:7e:7b:32:a5:48:7f:e1:
         16:a8:ea:c2:b5:b7:f1:e4:87:8b:43:15:98:09:1a:ba:4f:64:
         a9:7e:e5:a8:b4:03:2f:55:3a:35:9a:a7:1f:ed:e9:44:11:95:
         2a:82:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:11 2026 by rpki-client