Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
File:                     5LDTY6ChegaEUahRRc5PpGTX-hs.mft (raw, json)
Hash identifier:          cHcpu5TIlFC9pd2RAbGwNcjV9PdR/DoAl4Kxf3YXvIo=
Subject key identifier:   04:26:B3:3B:03:A2:72:FF:D7:0B:D8:9C:75:2A:F6:73:79:EC:AC:F8
Authority key identifier: E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
Certificate issuer:       /CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Certificate serial:       019F90FF2ECB85CDEFE819C9047A95655EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
Manifest number:          12F7
Signing time:             Thu 23 Jul 2026 22:01:10 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:10 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:10 +0000
Files and hashes:         1: 5LDTY6ChegaEUahRRc5PpGTX-hs.crl (hash: Q84VOcAnQfRXjVT2ZqmRFBvxMZ5vTvlpjrCB+mqnQ7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:2e:cb:85:cd:ef:e8:19:c9:04:7a:95:65:5e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
        Validity
            Not Before: Jul 23 22:01:10 2026 GMT
            Not After : Jul 24 22:01:10 2026 GMT
        Subject: CN=0426b33b03a272ffd70bd89c752af67379ecacf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:02:4e:75:a1:c4:e7:54:0c:5a:d9:02:49:
                    30:15:9c:26:95:96:f5:e6:3a:a4:ca:4b:ca:56:48:
                    50:2e:6a:92:ac:4e:24:bf:a5:b6:8d:3a:23:3f:4b:
                    1f:8c:de:9d:83:27:1d:af:7f:ae:5e:2a:3a:60:54:
                    e3:3b:45:fd:cf:ab:ee:ef:b6:88:5f:4d:54:44:47:
                    fd:84:66:b2:97:4e:d5:dc:59:6f:0c:2a:07:71:e1:
                    46:1b:44:63:bf:c8:73:30:cb:65:c1:21:4e:8d:9a:
                    f1:fe:64:91:b7:fb:fe:cf:a4:3d:14:e0:63:c6:26:
                    b2:1b:68:af:36:7c:b4:12:0e:cc:0c:ad:a9:13:fe:
                    e6:01:ba:78:0f:e4:92:27:e6:03:04:70:77:3b:a9:
                    6e:c5:0a:80:02:ad:ad:d9:76:41:70:dc:25:84:41:
                    ad:8f:75:75:e2:e6:22:91:4d:6b:51:f6:df:89:3f:
                    cf:11:79:08:7a:24:ea:e8:70:e8:62:f2:c8:5b:23:
                    a6:52:d3:4a:f4:f9:55:6d:a7:9f:c3:f9:fb:79:71:
                    ca:71:7e:b1:c4:a2:2e:6e:0c:df:70:cf:81:ad:93:
                    39:b1:67:f7:33:f8:55:f8:43:2b:f5:1a:88:57:66:
                    78:ab:ed:94:17:a5:78:ac:bc:68:b7:0d:5c:cb:be:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:26:B3:3B:03:A2:72:FF:D7:0B:D8:9C:75:2A:F6:73:79:EC:AC:F8
            X509v3 Authority Key Identifier:
                keyid:E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:fc:37:3f:5a:7a:2f:27:5d:0c:00:a7:d1:52:a2:b7:96:c7:
         d6:ab:b2:4f:56:05:a3:11:1f:d2:1b:5d:3f:77:b8:f5:c3:2a:
         8a:86:f9:b9:db:4b:95:2f:5f:82:a6:3d:df:c5:49:0e:c1:33:
         90:35:00:af:54:a0:15:93:fc:47:3c:85:ce:42:ad:1e:44:67:
         fe:df:ac:d2:f5:3d:37:01:29:5d:cd:f1:a0:63:30:17:49:6a:
         db:7a:d2:ef:dc:d0:0d:66:87:8a:1b:5e:57:fd:68:cb:54:41:
         07:7c:a2:09:5c:1f:5b:54:35:74:4b:a5:93:06:5b:d4:5c:59:
         c3:b8:3d:80:f2:5a:9f:ab:71:7a:69:8d:78:3e:73:39:45:dc:
         c9:1c:35:b9:f4:37:b4:2d:c0:b5:c3:98:91:80:e4:22:2e:66:
         7c:76:ae:dc:2f:03:ce:b8:39:4a:b0:49:af:82:00:99:52:33:
         72:0f:a1:3f:db:60:f7:6f:04:31:89:0f:c8:18:16:b1:17:38:
         2e:6d:08:46:f3:b9:80:11:03:54:78:8a:0b:3b:3a:2a:b3:b9:
         06:da:f3:f0:46:f7:0b:f3:48:21:91:d2:b7:96:0c:f3:8b:9d:
         c7:5b:25:89:b4:58:99:a2:95:6d:60:b8:6c:6b:cc:d1:b1:37:
         29:b1:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:03 2026 by rpki-client