Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File:                     5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier:          Fu97EV3YAJJ045mcpq8aAKTDEn3lg61yJbHd/4jyTTM=
Subject key identifier:   A2:F8:23:2A:AC:85:6D:24:00:7A:2E:CD:12:9F:84:6D:77:05:EC:94
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer:       /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial:       019F17C26EF4D947525515752C252CE6917D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number:          056A
Signing time:             Tue 30 Jun 2026 09:00:46 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:46 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:46 +0000
Files and hashes:         1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: FYHrYSQY3xxJ/T7af4C2M6yTqgkmFoGKP1ZsJ+Pptls=)
                          2: J2Hlh4Qs9PapyJW1uAhReBAfRdc.roa (hash: LwBQGu0ai9IuiLQAu2KakRsbf1s3yL9g3pTkW1XPOkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:6e:f4:d9:47:52:55:15:75:2c:25:2c:e6:91:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
        Validity
            Not Before: Jun 30 09:00:46 2026 GMT
            Not After : Jul  1 09:00:46 2026 GMT
        Subject: CN=a2f8232aac856d24007a2ecd129f846d7705ec94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ec:91:0a:25:d6:cf:2a:12:86:8d:ee:e0:5b:
                    8c:f6:b2:82:c5:4b:d7:b3:72:3b:e2:fa:6f:ad:4d:
                    91:06:17:85:6c:96:b6:a9:37:a7:62:0c:41:98:78:
                    56:6f:f8:27:9f:8e:15:d3:0b:53:d8:ba:de:2f:d0:
                    36:5b:24:bd:0d:f1:b3:69:3b:14:99:8b:9b:7a:e2:
                    d3:7a:a8:fd:19:b0:3d:9a:2e:f4:6b:fd:6c:83:47:
                    5e:c0:30:91:0c:d6:29:75:ed:92:f3:77:f6:41:f8:
                    21:58:17:63:d1:6e:2d:63:43:c7:1b:52:2c:04:65:
                    79:83:57:66:8c:67:06:85:47:3d:be:08:29:da:6d:
                    2c:ea:f7:66:4b:7f:cf:e4:75:48:c1:0b:c3:6e:e1:
                    64:f5:1f:3b:ea:c6:ec:52:4c:83:63:b0:41:2b:42:
                    e8:2e:00:fb:8a:72:1b:ad:9d:76:3f:3e:9a:fe:4e:
                    47:68:d4:a8:a0:64:78:5c:0d:01:13:db:50:c3:6a:
                    80:e4:74:e1:6b:75:7a:7b:1b:36:ab:93:e2:4c:02:
                    fc:6e:fc:dc:0d:23:05:75:de:95:05:13:cf:9d:18:
                    d7:b7:00:64:fb:31:59:4e:05:1b:94:50:f3:99:5c:
                    7a:6e:4f:88:9c:e6:01:bb:4e:90:dc:99:10:b1:a7:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:23:2A:AC:85:6D:24:00:7A:2E:CD:12:9F:84:6D:77:05:EC:94
            X509v3 Authority Key Identifier:
                keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:22:ab:3e:83:94:e1:fe:5d:ec:64:e2:15:48:dd:55:9d:
         e7:d4:54:13:38:07:43:03:7a:87:ac:df:8b:fe:9b:f9:ea:3c:
         38:28:59:cc:d7:d1:17:ec:04:cd:da:95:da:13:57:e0:58:d6:
         2e:da:46:9b:e4:16:68:ba:07:7a:bf:0d:f7:e6:bb:44:d8:33:
         86:0b:2a:fe:4e:be:57:90:e0:40:83:96:19:d6:16:e5:79:d9:
         5e:0f:bd:46:d2:51:b7:5e:04:a6:93:4e:22:ab:40:7f:c3:19:
         ed:fe:77:07:72:6c:17:b9:07:5b:fd:c2:84:90:af:6a:73:99:
         5a:d5:9c:de:63:a2:2c:e6:4e:c1:8d:6e:37:ab:21:0c:16:57:
         64:55:de:fd:a0:64:6d:13:d1:25:6a:d4:95:0d:73:0b:7b:ab:
         51:81:60:7e:d2:5c:55:8b:5c:e9:32:8d:65:04:ad:33:48:1a:
         d3:24:9f:f6:5f:90:1b:ed:fb:bf:c4:50:05:d3:97:30:d1:01:
         41:69:0a:f2:fc:4e:9e:15:7c:03:8e:dc:39:39:a4:e9:47:3a:
         59:05:63:d3:0a:1e:ab:30:b3:10:52:d4:3d:13:bf:ba:0e:bc:
         62:66:f3:a3:67:a1:5f:3f:30:70:07:66:62:5e:b6:92:d2:bf:
         b0:54:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:56 2026 by rpki-client