Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.mft
File:                     5yDwN_iWTLWjefXfgbr493OC8zo.mft (raw, json)
Hash identifier:          m5PKGUjuoOHXEl1jHGLvDErtkv6spvHxyCJbWZKFXYY=
Subject key identifier:   06:7F:AA:52:B8:EC:EF:41:F6:1E:7C:F0:25:8D:F2:AB:66:35:89:52
Authority key identifier: E7:20:F0:37:F8:96:4C:B5:A3:79:F5:DF:81:BA:F8:F7:73:82:F3:3A
Certificate issuer:       /CN=e720f037f8964cb5a379f5df81baf8f77382f33a
Certificate serial:       01A03F3BCEC6CAFAB77BE6516CECB14ED7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yDwN_iWTLWjefXfgbr493OC8zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.mft
Manifest number:          9A
Signing time:             Wed 26 Aug 2026 18:01:19 +0000
Manifest this update:     Wed 26 Aug 2026 18:01:19 +0000
Manifest next update:     Thu 27 Aug 2026 18:01:19 +0000
Files and hashes:         1: 5yDwN_iWTLWjefXfgbr493OC8zo.crl (hash: YyFfyR+deyXzh1DTuHkSRLXmvwNuxLq5Pqfyc0+KHCE=)
                          2: eXRIwecWvVcnFdwMz1QmBrjc6DY.roa (hash: v3I6uudSuDbk12Y8qzr+SjW1azpK3cnQafVSMOfvo60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yDwN_iWTLWjefXfgbr493OC8zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:3b:ce:c6:ca:fa:b7:7b:e6:51:6c:ec:b1:4e:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e720f037f8964cb5a379f5df81baf8f77382f33a
        Validity
            Not Before: Aug 26 18:01:19 2026 GMT
            Not After : Aug 27 18:01:19 2026 GMT
        Subject: CN=067faa52b8ecef41f61e7cf0258df2ab66358952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:6b:3b:e9:b2:69:bc:31:d5:10:69:ee:ad:
                    21:d8:e0:92:04:6d:40:b2:c7:41:b5:36:81:23:b5:
                    11:17:f1:ea:6a:0f:83:ff:84:fa:4e:3d:e4:fb:f0:
                    0a:3d:61:1e:2c:06:3d:f2:76:9d:2e:e1:ef:68:21:
                    10:50:36:70:0b:d2:e9:31:b7:4e:a1:00:19:1c:59:
                    38:88:1e:b8:45:48:29:46:bc:3f:2f:a4:06:0f:27:
                    e6:db:73:f8:d0:29:e9:89:09:d1:3e:33:6a:91:48:
                    e4:9a:49:01:6d:00:63:2e:0c:6d:f3:4c:45:86:58:
                    62:d0:b4:b9:b7:12:ff:c5:73:e4:e2:b0:25:09:3a:
                    f0:67:53:c6:ff:3c:3e:99:41:af:a7:65:2e:b4:02:
                    ea:30:cf:c3:51:84:e6:88:6e:cc:54:c2:e5:0b:1e:
                    e7:6e:6d:ef:cc:9a:4e:33:0b:f2:6a:f1:af:61:ac:
                    47:76:cc:54:44:dc:d2:74:91:c2:b0:78:b3:38:cd:
                    00:82:84:11:35:26:64:d2:74:95:fa:a4:0a:5f:85:
                    b1:28:1b:c6:9e:c6:a9:6b:3c:c3:18:74:cb:db:ab:
                    7e:8c:7f:56:54:2e:75:fa:12:46:bc:d4:57:5b:26:
                    b6:1a:87:13:69:76:ff:8a:5e:b9:6f:df:50:a1:fa:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:AA:52:B8:EC:EF:41:F6:1E:7C:F0:25:8D:F2:AB:66:35:89:52
            X509v3 Authority Key Identifier:
                keyid:E7:20:F0:37:F8:96:4C:B5:A3:79:F5:DF:81:BA:F8:F7:73:82:F3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yDwN_iWTLWjefXfgbr493OC8zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:22:0d:a6:9f:b3:c3:c3:a7:32:6e:ac:9a:71:3d:96:76:2a:
         0d:bb:94:9d:30:2b:43:5c:30:ed:49:28:9b:0c:0c:39:f4:ab:
         7a:5c:13:62:d3:4d:ef:61:ea:a7:b2:41:e6:d4:e2:11:9d:e3:
         88:6e:78:54:a6:05:4e:18:af:93:69:7a:93:bf:f5:a5:5b:c8:
         26:15:ad:f1:6f:10:c1:19:71:5c:0c:18:ef:27:dd:ee:3b:a7:
         d6:e7:47:61:dd:13:a7:e1:f5:0f:ad:07:63:11:6c:ce:d8:c8:
         ac:19:f7:a0:66:c7:5e:93:ba:7f:aa:84:ff:ec:d1:25:a0:c8:
         ee:ac:75:f3:f8:06:79:80:dc:39:02:4a:15:4d:3c:e2:09:aa:
         6d:9d:19:66:dd:58:b3:1a:04:45:6d:13:34:3a:0c:31:fc:5f:
         02:f2:db:dc:40:bd:2c:01:83:43:77:8c:54:02:f8:07:75:d4:
         b0:66:a2:62:b7:ca:5f:8b:97:ad:8f:90:02:85:e5:0e:b8:66:
         1f:74:23:0b:36:90:ae:42:fc:ef:0a:6d:a6:e6:45:57:f4:70:
         81:39:22:53:18:7c:b5:eb:5e:86:4d:46:a4:fd:68:80:ac:31:
         ee:21:5c:e1:39:85:ed:e6:7a:4d:53:f3:e6:c1:5b:f4:72:07:
         84:e8:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:36 2026 by rpki-client