Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          sAZZuTfogHvgDUWh2ACNJaz3Zrfp70t9VCIkyYV1dwA=
Subject key identifier:   C5:49:EE:C1:FD:B7:2F:26:3A:5D:27:81:8B:94:45:41:83:0F:18:D4
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       01A001DD061199EEB7549EEF3D303A225936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          0616
Signing time:             Fri 14 Aug 2026 20:00:57 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:57 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:57 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: oRVN3Xz8WOuG9QShvBT8MdrvTYp+8ljRfVGtYOq7LSU=)
                          2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:06:11:99:ee:b7:54:9e:ef:3d:30:3a:22:59:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Aug 14 20:00:57 2026 GMT
            Not After : Aug 15 20:00:57 2026 GMT
        Subject: CN=c549eec1fdb72f263a5d27818b944541830f18d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:b0:ed:6b:9c:cd:83:bc:11:69:53:9e:b2:
                    b2:7f:b4:88:58:c9:e7:05:47:07:bd:e2:a5:6c:38:
                    50:54:c6:39:c0:5b:5a:51:db:04:dd:03:ca:63:ca:
                    3d:6f:f1:73:65:2c:e2:93:f5:60:69:fe:5a:23:1e:
                    6f:fe:f8:2f:a8:4e:93:6a:31:dc:93:39:15:a0:cc:
                    a3:29:4b:c3:24:64:13:1d:9d:9d:3d:63:ae:ff:19:
                    d5:b2:fc:fc:72:b6:2f:66:92:f9:b5:2d:a9:09:8b:
                    62:15:19:e5:0f:67:67:8c:d6:0e:32:60:3d:9d:41:
                    8f:fa:c5:d1:ef:fc:9f:c8:d6:fe:df:78:13:e1:0e:
                    8a:ff:82:1b:79:e1:00:17:0e:94:41:70:71:0a:4a:
                    64:ab:3a:ee:f8:7a:df:fe:9e:27:1f:12:ca:74:74:
                    ac:46:f4:d7:3e:ca:cf:fc:06:07:03:e6:2f:66:44:
                    66:08:6c:f9:1b:9a:a1:92:48:a2:45:cf:2d:25:53:
                    4c:37:94:1f:11:23:ac:b4:e1:15:98:33:59:84:fc:
                    2f:d3:85:d5:bc:8f:8b:00:1f:fd:0a:9c:ff:6c:2c:
                    f1:91:d8:28:59:20:d6:56:03:d5:9a:5b:e8:f6:95:
                    8a:91:73:46:70:3a:25:2a:cc:94:11:f1:76:b6:af:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:49:EE:C1:FD:B7:2F:26:3A:5D:27:81:8B:94:45:41:83:0F:18:D4
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:79:7d:b9:f6:23:b7:5d:8e:90:9e:46:c7:bc:dc:01:33:ca:
         d5:11:01:90:5f:c2:76:e6:8a:de:54:ba:61:a4:b2:6a:91:42:
         eb:8c:39:a4:a1:9a:09:6b:ef:3b:ac:26:bd:ad:01:13:e4:17:
         ad:42:e8:d1:99:72:97:16:f3:4c:b2:ba:2b:3b:42:c5:74:a0:
         be:69:52:a1:39:51:a1:60:73:b3:8c:67:f6:24:db:00:a5:20:
         0f:68:62:fc:9a:4c:d8:d7:26:b3:a0:03:64:e7:7e:07:43:d9:
         b2:b6:2f:41:e7:30:fb:98:70:47:03:06:09:e3:c8:54:52:27:
         49:36:81:52:6f:f0:ef:cb:78:7b:5f:da:eb:a8:6d:51:ac:53:
         5a:9a:5e:ca:1f:ef:97:b3:a7:fc:88:21:59:0b:d0:c6:de:a4:
         d9:c0:48:4f:45:6e:3e:15:93:7e:8b:cd:e4:55:e0:12:8b:2b:
         81:65:45:a2:1d:03:e0:45:00:8e:b6:86:a4:83:35:3d:16:6c:
         c6:79:54:98:bd:9d:96:69:2d:9a:74:31:40:8f:fa:65:4a:f7:
         b1:d0:3e:b2:19:17:20:94:88:b1:9c:58:05:2b:d4:cf:da:de:
         82:b4:04:3b:1f:e1:f1:8f:89:14:ea:35:98:78:f3:58:fb:bf:
         b5:6f:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:42 2026 by rpki-client