Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File:                     5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier:          8mvX2tOtkiCHgdYnq62BJ21OSxAKpZ+FTu7aHu6aSDo=
Subject key identifier:   40:3D:61:8C:45:C8:3B:1A:D7:78:13:71:1B:69:A5:57:CF:54:06:2A
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer:       /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial:       01A001381F8FFD7494AC594119DB5FEAD0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number:          19A2
Signing time:             Fri 14 Aug 2026 17:00:50 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:50 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:50 +0000
Files and hashes:         1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: a9o3aYaqZPNaOdhRQYz5bEt/MkpbhcgSw9HZqomNkqk=)
                          2: zL-LWx-Rz7OMaI1EPMJkxLg31_M.roa (hash: cgNfkZmen0X8xi6X3N5ufjIJZAx+Um78IAgsseJM+y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:1f:8f:fd:74:94:ac:59:41:19:db:5f:ea:d0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
        Validity
            Not Before: Aug 14 17:00:50 2026 GMT
            Not After : Aug 15 17:00:50 2026 GMT
        Subject: CN=403d618c45c83b1ad77813711b69a557cf54062a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:44:4a:94:48:fb:37:4f:63:b5:99:08:c0:
                    55:d5:1a:a2:68:2f:a4:c6:b8:fe:a4:f1:3a:fd:e8:
                    75:12:d3:a0:95:2c:e8:9d:89:dd:39:2b:80:80:7d:
                    93:08:76:84:d6:54:83:3d:18:98:63:2c:1f:e7:ed:
                    56:c4:12:26:19:8b:32:55:2d:02:af:ae:12:8f:9c:
                    11:7a:20:58:ab:4d:2b:70:76:9f:7d:80:32:b3:cd:
                    5e:bd:c0:c0:f8:69:83:70:2c:11:8e:93:56:14:de:
                    ad:a5:f0:46:e0:0c:31:e7:ed:ac:99:7b:f9:7a:da:
                    b7:db:72:f6:be:bc:34:43:a8:34:85:f1:07:ef:55:
                    3b:ff:e7:10:fa:e4:36:2c:02:4f:fd:4f:11:31:61:
                    bd:f7:5a:02:a5:73:26:36:2a:52:c5:dd:96:c7:7c:
                    98:3d:00:f8:89:e7:0c:f9:fa:63:72:fc:43:a0:13:
                    df:ae:39:cc:51:03:05:ff:1a:19:ab:3c:0c:cd:cf:
                    7a:86:33:de:79:83:86:9f:49:55:53:bd:a5:96:60:
                    74:81:3a:34:6c:04:bb:d1:87:59:03:7c:cd:37:ce:
                    63:ed:c2:ba:17:db:65:13:1b:a5:61:83:39:d7:cf:
                    85:6c:d6:9d:e6:97:23:9c:32:a0:d6:9b:1b:13:ee:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3D:61:8C:45:C8:3B:1A:D7:78:13:71:1B:69:A5:57:CF:54:06:2A
            X509v3 Authority Key Identifier:
                keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:09:e7:9f:be:52:81:66:fb:20:3c:c3:45:2d:aa:e3:f6:5c:
         b9:65:5d:63:27:47:bf:c9:21:85:3b:ee:fe:9d:da:59:ef:df:
         dc:d6:89:1b:aa:7b:5d:6d:67:6d:35:8c:45:ba:20:07:50:cb:
         c6:c9:54:23:08:2d:9d:67:15:b7:ab:7f:bf:e5:99:1e:50:b9:
         69:b0:af:9d:0b:5f:59:18:35:69:75:28:84:b4:18:cd:36:e8:
         85:3c:72:42:c0:77:e1:49:03:ab:9e:61:28:b0:90:44:e7:30:
         9e:e8:00:75:c4:d4:86:b6:5d:46:51:ae:fa:55:20:36:22:fe:
         e8:a1:e8:f0:68:09:68:99:77:4a:32:96:df:3f:5b:2b:e0:18:
         15:79:f7:fa:e7:bf:ab:22:e8:66:d9:7b:91:59:2a:26:81:da:
         a3:c8:58:ff:b1:45:9b:8f:4c:3a:91:85:c9:36:15:69:49:7c:
         58:74:7c:3c:4f:3d:0e:c8:fb:41:54:1b:39:8d:27:8a:9c:f4:
         c0:2e:33:f7:31:39:56:91:07:47:6f:4b:9d:b4:b5:b2:48:6a:
         1b:1e:f4:c6:60:af:ee:6f:23:34:24:1e:65:0e:15:03:ec:cd:
         03:68:70:78:6c:ae:69:44:1d:6a:40:82:71:9f:bd:5f:5f:fd:
         14:ce:2b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:02 2026 by rpki-client