Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          ZhThMcwqeaQm/S2yKzJU566Fl0EQ6a3+vJgRERGrjyE=
Subject key identifier:   68:2C:02:A0:EF:D5:EF:50:B7:EF:91:9F:57:39:DC:58:FD:25:02:8D
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       019FA0DFA013413B1F165947394540F9E64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          14B4
Signing time:             Mon 27 Jul 2026 00:00:37 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:37 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:37 +0000
Files and hashes:         1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: AteN2UVzcUSbnMTooKSIvtO7zYdHoAMpXtPvOI3tyrE=)
                          2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=)
                          3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=)
                          4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=)
                          5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:a0:13:41:3b:1f:16:59:47:39:45:40:f9:e6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: Jul 27 00:00:37 2026 GMT
            Not After : Jul 28 00:00:37 2026 GMT
        Subject: CN=682c02a0efd5ef50b7ef919f5739dc58fd25028d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:1d:fa:e0:73:d7:f1:54:7f:73:0f:1c:04:
                    e2:21:d3:fd:7e:92:0a:68:b0:06:4e:de:f7:ba:d5:
                    e3:83:df:1d:54:ef:31:d9:3c:df:b5:5c:15:c0:39:
                    56:9b:62:7f:d6:6c:21:ee:03:dc:7f:22:3a:83:08:
                    ff:a0:52:7d:a9:c6:36:d9:7c:68:06:08:2a:ef:c9:
                    31:e7:58:a5:7a:aa:c4:69:ed:88:03:bd:b8:36:7a:
                    b8:30:21:23:88:a0:57:5b:3c:4f:ff:38:db:a5:16:
                    e4:03:68:b6:6e:ec:36:ac:53:76:d8:0f:dc:10:95:
                    a6:46:3a:8d:89:ed:f5:e3:fb:99:14:ca:1d:68:6a:
                    b3:76:6a:37:06:56:c8:00:bb:8e:81:2b:60:fb:10:
                    6c:2f:e5:12:4a:22:3f:e5:7b:a9:ca:89:99:11:c4:
                    5f:af:a0:20:b5:26:18:a5:95:2b:e8:a6:d5:09:9d:
                    19:6b:83:fa:af:4c:07:a7:9b:7b:0c:e0:92:e4:c4:
                    48:d5:f4:94:11:be:5a:7a:51:90:bd:dd:1d:b2:10:
                    0a:0c:f7:c1:49:47:a9:41:c9:1d:03:9f:13:52:50:
                    4e:02:1d:86:f1:7c:0d:c4:a6:ed:a4:cd:76:24:30:
                    81:50:f4:15:05:b2:5d:df:1e:e8:b1:97:dd:a6:ee:
                    e0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2C:02:A0:EF:D5:EF:50:B7:EF:91:9F:57:39:DC:58:FD:25:02:8D
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:93:88:47:5d:1b:ee:fe:78:18:dc:dd:03:66:fc:ce:1e:
         c2:b0:a8:17:18:32:1c:62:8b:2c:f5:0d:6c:89:d5:5c:f1:0a:
         d2:34:f7:15:f6:76:82:8a:79:6d:4f:4e:68:f4:b0:7f:43:d4:
         06:03:74:f8:81:e8:ed:1e:a7:ba:9c:63:f8:44:53:bf:85:0f:
         73:58:b6:a7:09:7e:3d:e3:d5:da:94:ed:25:54:1f:0a:61:f2:
         b2:83:33:d2:b4:21:c7:85:dd:9e:d6:38:07:d2:19:4f:74:44:
         0b:a4:cd:c0:e2:f1:9e:06:3f:e3:18:f5:01:3d:29:ec:78:63:
         e7:68:b6:dd:e2:72:56:51:62:4e:a7:8c:e9:f1:e1:7d:7b:0d:
         08:1e:74:6f:10:1f:90:44:63:90:9e:89:e5:82:66:94:81:4b:
         37:b8:21:ea:5b:16:fb:29:cb:1a:b1:1a:3a:f0:76:59:a3:fd:
         0f:45:0a:93:67:9f:64:1b:2b:6e:e0:f8:bc:ea:25:a7:65:12:
         30:54:f0:16:ae:fa:e8:75:f7:ae:67:67:5e:9f:19:cc:fe:fd:
         dd:c8:c2:91:23:55:2a:98:ff:aa:8b:98:24:16:f7:99:cf:fd:
         3e:ea:1c:51:b0:c9:8b:9a:98:03:0f:3f:79:ba:54:3e:19:cb:
         39:ca:c5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:03 2026 by rpki-client