Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier:          PF0fyAvAFj+8XQNBkHHYAMHSoc80WHTK0dNJ9LfEmTc=
Subject key identifier:   32:35:59:9C:55:AA:A4:DF:08:34:D4:8E:C6:B4:CD:B5:A4:EE:F8:EF
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer:       /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial:       019F92EDBFEBD40FDD5A51E0BDD77A317E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number:          13E2
Signing time:             Fri 24 Jul 2026 07:01:22 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:22 +0000
Files and hashes:         1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: bxe+8pPO6rvw7YkEi2tWCBc+h6T7U35tZnndd8Y8rbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:bf:eb:d4:0f:dd:5a:51:e0:bd:d7:7a:31:7e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Validity
            Not Before: Jul 24 07:01:22 2026 GMT
            Not After : Jul 25 07:01:22 2026 GMT
        Subject: CN=3235599c55aaa4df0834d48ec6b4cdb5a4eef8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:7d:01:dd:be:44:49:a9:fc:06:d0:fc:4a:
                    e4:84:3d:ec:13:a4:3f:f3:c9:c9:4f:77:9b:65:7e:
                    4e:91:14:34:31:16:de:76:2b:29:eb:5a:0e:5c:c9:
                    8b:b7:b0:f6:d4:2b:f2:d2:20:13:f2:0d:3c:7f:19:
                    7a:72:d2:ae:bd:97:df:ca:92:6c:83:4f:02:71:5b:
                    04:70:88:f0:6a:7f:3e:9b:a3:36:8f:4e:9c:2c:64:
                    1f:0a:1f:f1:e0:66:91:d6:ab:93:32:32:54:ca:73:
                    89:10:64:ab:f1:85:cd:78:60:f1:19:bf:86:22:ca:
                    fb:a9:38:61:1b:40:af:ce:a0:de:ad:07:f3:f3:24:
                    3a:fa:0c:5a:fb:dc:e7:9a:a9:a0:c1:3e:5c:6c:81:
                    46:bb:14:d7:d5:7a:c2:a4:5a:a7:26:e9:96:aa:84:
                    76:bc:de:f4:5d:a1:95:e3:76:c4:18:b4:03:13:1b:
                    2b:05:1c:2d:f0:c1:8e:5f:1e:f9:2c:48:6e:ec:21:
                    77:82:1c:75:ec:34:c9:90:0e:9d:69:5c:7e:ca:f9:
                    60:8f:39:b4:6d:d8:be:55:b6:87:ba:47:dd:05:3f:
                    9c:2b:61:cc:19:53:ca:31:23:8a:8b:2e:4d:0e:dd:
                    e2:9b:42:a9:5a:ab:c3:8d:9b:cf:11:27:7f:30:0f:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:35:59:9C:55:AA:A4:DF:08:34:D4:8E:C6:B4:CD:B5:A4:EE:F8:EF
            X509v3 Authority Key Identifier:
                keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:e8:ff:62:af:62:e7:81:87:b2:7e:d7:ea:82:67:f5:89:
         24:58:c0:14:ff:08:33:fe:0c:4e:85:3e:89:14:7a:eb:77:e1:
         da:16:7c:80:70:3f:81:44:17:63:b3:ef:ee:4d:76:e0:02:6a:
         61:5b:0a:39:33:b8:7e:e5:af:61:25:ea:ca:91:c9:c6:35:d0:
         ec:37:96:30:58:d5:99:e9:b2:fe:98:6e:82:c2:ff:12:a7:09:
         4c:cf:7b:f7:2c:33:ee:6e:51:67:0c:ca:4f:79:2b:9a:a4:e1:
         6a:55:98:fe:d6:10:70:c8:52:8b:2d:f3:18:0e:a2:83:23:c1:
         a0:25:43:3f:0e:56:8c:60:0c:48:a4:f3:d4:96:5c:43:e8:eb:
         21:ac:94:57:a9:7a:4e:79:73:51:33:6f:b6:4e:13:f6:80:c0:
         7a:4d:56:1c:ad:4c:aa:bd:23:f8:f8:f0:7b:ca:ea:a9:1e:30:
         86:ab:9c:81:db:01:79:77:90:70:91:df:68:28:84:bc:ea:d2:
         f9:20:10:29:f1:c5:d7:91:b4:6c:31:30:86:05:a6:b4:95:7c:
         cf:42:28:65:07:f5:e1:50:77:5e:56:32:4f:d5:2a:20:25:06:
         5a:62:2a:f0:fc:20:de:d6:0c:75:ca:cd:e9:72:23:ec:a7:a7:
         d2:33:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:51 2026 by rpki-client