Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File:                     5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier:          Rfuj+G2sZTzmaOJ1wqMSIO5RELr1/7H+w/e7JWvfKkM=
Subject key identifier:   17:CC:23:76:D6:0C:88:0B:B0:42:E6:98:27:F8:A8:46:93:F4:A0:27
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer:       /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial:       019F197A93703A7C1AF709BFF9CFFFF62B18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number:          192A
Signing time:             Tue 30 Jun 2026 17:01:31 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:31 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:31 +0000
Files and hashes:         1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: A/ODhYtLBsNhWzczrmtmzcM3tD/0Ukh0SD3DK9mgN/s=)
                          2: zL-LWx-Rz7OMaI1EPMJkxLg31_M.roa (hash: cgNfkZmen0X8xi6X3N5ufjIJZAx+Um78IAgsseJM+y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:93:70:3a:7c:1a:f7:09:bf:f9:cf:ff:f6:2b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
        Validity
            Not Before: Jun 30 17:01:31 2026 GMT
            Not After : Jul  1 17:01:31 2026 GMT
        Subject: CN=17cc2376d60c880bb042e69827f8a84693f4a027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:2f:b6:ba:8c:ec:21:ae:46:7f:55:25:e5:
                    86:60:a8:5a:57:e3:8c:ba:18:04:c4:ca:01:58:70:
                    a5:af:76:09:64:1c:3c:28:8a:c5:38:8d:30:6d:98:
                    50:bb:4a:49:55:6f:48:f1:d0:8a:b0:20:e8:52:ce:
                    dc:d5:d0:84:c5:9a:a2:42:c5:69:f3:d2:0b:6e:4a:
                    be:df:78:da:27:d1:6d:91:5e:8d:4b:87:2f:21:45:
                    bc:a4:12:a7:d9:41:89:34:ff:f6:5a:9c:e3:ae:a5:
                    0d:fc:56:45:a5:26:41:c8:c7:df:4b:e4:96:3c:c3:
                    60:85:b2:3d:9a:ca:d7:93:69:ae:a2:0f:36:f7:f6:
                    8d:f4:06:45:e8:de:e5:d3:61:cc:ed:88:85:9c:c8:
                    1c:63:b3:c4:98:fd:9b:e3:94:50:18:ba:a4:14:66:
                    68:61:3c:07:12:0c:85:b6:86:50:9a:0d:9e:ad:1b:
                    8f:40:40:22:70:37:fe:02:ee:50:30:04:15:20:63:
                    3c:cf:9c:2d:9e:f0:10:1f:c5:f8:9a:b8:2b:c2:f6:
                    a6:8b:5d:5c:3c:16:ab:58:2c:09:59:c0:40:26:fd:
                    ae:b8:9c:24:b3:63:bc:93:73:19:d4:7a:18:54:dd:
                    05:ef:a1:54:f4:86:59:63:2c:16:c8:93:39:bf:03:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CC:23:76:D6:0C:88:0B:B0:42:E6:98:27:F8:A8:46:93:F4:A0:27
            X509v3 Authority Key Identifier:
                keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ec:77:48:d5:1e:3e:16:b7:58:f9:cf:89:e1:25:41:bc:08:
         25:e2:50:a9:a4:48:06:71:49:a9:86:b5:7f:04:cf:3d:3a:45:
         01:67:0c:f6:5a:b3:c5:c8:ab:b2:d8:cd:81:2f:42:19:f2:1b:
         de:06:cb:03:62:3d:7c:a5:1b:19:7a:55:da:42:d7:e5:e1:0d:
         fe:3a:77:73:9f:2a:bc:9b:96:4f:d2:3d:26:46:27:2f:9b:cb:
         07:8e:56:09:1b:f1:46:e5:d7:0a:c2:ec:7d:53:8c:22:37:94:
         60:05:3a:da:3b:3e:66:7a:d7:a3:f0:d7:cf:16:e8:d8:f1:f2:
         4e:38:6c:34:29:5d:29:13:5b:be:f8:46:6e:0e:bb:0f:53:b6:
         d4:96:9f:a2:5d:e5:9a:e1:f3:af:fb:cb:b8:9c:e9:f1:cf:84:
         92:d0:cf:52:8e:0f:d2:2e:34:95:05:4f:10:61:d5:d2:31:23:
         3b:b0:5c:7e:c9:a9:00:87:3d:cc:6d:e4:54:4f:d6:42:35:e9:
         ea:21:07:0a:4f:9b:a2:df:23:44:28:ac:57:f3:c3:c4:f4:10:
         40:4c:f7:00:7a:ed:de:b3:e6:57:08:33:b2:76:df:36:ab:2a:
         95:2c:c5:f6:a3:cb:9c:ac:02:e4:c7:e4:1f:e6:f0:43:76:ea:
         07:21:bc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:21 2026 by rpki-client