Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File:                     5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier:          QXGDKzVeGXGKS905mQv3mpGa1mMeK+GHHAgzeyKtgJM=
Subject key identifier:   DC:F2:CE:5A:5F:FB:66:CD:EE:9D:70:1C:46:38:20:A9:85:BC:A5:E2
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer:       /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial:       01A0005C4FF066B03C675F3A1025AE1F5251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 13:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:44 +0000
Files and hashes:         1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: zoDDrz5leYlj1yrhmWkwM97AjJDStu3bDy7uknVapys=)
                          2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:4f:f0:66:b0:3c:67:5f:3a:10:25:ae:1f:52:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
        Validity
            Not Before: Aug 14 13:00:44 2026 GMT
            Not After : Aug 15 13:00:44 2026 GMT
        Subject: CN=dcf2ce5a5ffb66cdee9d701c463820a985bca5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5c:49:0d:59:e7:fb:61:98:ef:7c:64:77:dd:
                    75:58:55:80:36:ed:41:7c:fe:1c:91:7d:aa:90:a6:
                    78:11:e2:a1:96:3b:98:59:0a:8d:f9:67:42:61:00:
                    38:8c:0f:5d:ee:8b:be:8c:9c:da:6d:10:09:60:c0:
                    72:e6:9d:96:90:11:3f:ea:8d:c3:79:af:7e:d0:5f:
                    19:53:7d:8d:1a:2a:d8:e1:63:49:8c:b8:bf:27:38:
                    02:69:d1:a6:64:c5:6d:66:ca:59:85:53:e7:7d:2c:
                    b4:4a:9e:63:29:c8:69:a8:1e:ca:24:57:ac:96:5c:
                    89:da:61:4a:ac:e5:c3:8c:e8:ac:e0:8a:eb:f9:e8:
                    60:30:c5:0f:b3:7f:e9:22:25:e1:61:42:f0:76:b9:
                    e3:a0:97:01:7e:1b:58:30:2a:39:4c:68:da:83:19:
                    51:15:b8:33:88:5a:e0:52:fa:65:e2:d6:fe:21:89:
                    81:4e:fe:db:02:6c:9c:df:d1:f4:13:77:af:8c:3e:
                    5a:c7:91:fd:d8:7b:24:60:bf:d1:2e:17:3f:49:6b:
                    a9:f1:b4:74:a7:68:6b:f6:75:db:f3:14:72:8d:a7:
                    db:58:ff:d5:ff:be:ad:db:5a:2f:c5:8c:ce:ff:19:
                    f6:ac:ee:36:ea:75:ec:94:81:85:b2:db:61:f5:b1:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F2:CE:5A:5F:FB:66:CD:EE:9D:70:1C:46:38:20:A9:85:BC:A5:E2
            X509v3 Authority Key Identifier:
                keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f3:6f:6f:85:f6:77:6d:a4:55:30:27:75:3d:64:55:92:46:
         3b:98:72:b8:3a:a9:82:fc:87:10:c4:d6:38:20:5d:eb:f9:dc:
         29:02:6e:3d:8a:99:7e:0e:77:30:19:5a:e7:cc:7a:a4:ef:77:
         9a:0f:af:a0:c4:37:97:5b:44:26:2e:67:03:11:ef:c2:4a:15:
         78:20:90:a0:8f:96:81:79:43:b2:79:70:23:b0:94:9c:7f:df:
         ab:ad:11:0f:44:f2:45:67:85:26:a6:27:b8:60:d4:45:3b:ec:
         4c:49:0c:41:3c:8e:93:04:b1:70:45:84:3a:f2:33:4b:f3:32:
         5d:42:4d:68:8a:13:4d:75:ab:a1:42:56:10:ec:83:bb:ad:24:
         25:0d:e2:ab:63:d5:fd:5c:20:bb:0d:7a:8c:16:2b:88:4f:c1:
         07:45:53:8c:cb:f8:7e:a2:54:14:22:39:c2:15:3e:4d:6a:74:
         90:30:cf:44:54:03:9b:5d:60:4e:26:e1:c6:27:f1:d8:c6:2f:
         c1:21:3a:8b:95:a1:2f:47:82:60:79:50:a5:5e:64:bb:0e:6d:
         e2:01:c3:f1:31:d7:a9:24:a4:04:60:be:ab:9a:0c:c5:5b:5e:
         40:28:79:d9:6e:3d:d1:a6:ce:c5:38:d7:31:61:6b:53:e2:cb:
         77:b8:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:49 2026 by rpki-client