Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File:                     5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier:          GbxGPDOHkGeRN33lTcunjrtnmczwBjWZ/Qqld9ytWe0=
Subject key identifier:   C5:69:45:74:BD:92:95:8A:43:75:38:69:22:68:7D:2D:06:78:20:1E
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer:       /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial:       019F92ED62A3263CCE3179EE9FF415EE420A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number:          0511
Signing time:             Fri 24 Jul 2026 07:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:58 +0000
Files and hashes:         1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: oyIwZQRLnT1hAS8jnDScz315Xb52xdcKbNMkUWrnTkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:62:a3:26:3c:ce:31:79:ee:9f:f4:15:ee:42:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
        Validity
            Not Before: Jul 24 07:00:58 2026 GMT
            Not After : Jul 25 07:00:58 2026 GMT
        Subject: CN=c5694574bd92958a4375386922687d2d0678201e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:1d:fe:bd:83:e9:9f:47:94:c9:64:10:cf:
                    ff:ae:43:cf:e4:4c:56:c9:e0:e8:fa:c9:a6:09:8d:
                    e2:92:28:b9:5d:7e:28:ee:44:26:29:2b:35:5b:c7:
                    c4:54:ca:33:d1:e0:2e:5c:95:c8:92:eb:da:0c:ae:
                    9e:79:a6:01:37:31:28:b5:68:5e:64:0a:f3:5c:03:
                    60:86:90:3c:d7:8d:dd:ad:a0:06:13:a9:94:47:3d:
                    94:6d:8b:a7:e9:ce:d5:f2:0c:95:6b:35:9e:bf:28:
                    e2:48:98:80:56:c4:4d:39:86:ae:82:7a:56:b4:85:
                    2b:f2:aa:86:3e:76:63:88:a7:e2:7e:ad:d1:f1:5a:
                    46:cd:94:d1:1b:e1:0d:7e:3f:9d:2c:53:52:67:34:
                    bf:af:8b:6f:07:c7:36:50:69:ed:f3:35:9e:e1:5b:
                    74:cc:8f:7d:6e:cf:c9:80:1a:cb:b6:25:92:ea:a4:
                    7f:08:4e:89:95:ae:d4:7b:09:d5:88:5b:70:0f:21:
                    70:d5:ca:09:ee:18:cd:22:13:ca:94:e5:99:82:dc:
                    f7:ea:28:1a:e5:c8:f1:69:a5:e2:72:ad:31:e5:60:
                    75:7b:d9:ae:27:17:48:c5:ac:6a:db:ae:17:24:ad:
                    2e:57:19:f0:ac:6f:90:ef:1a:9b:f2:c7:d3:a2:1f:
                    6c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:69:45:74:BD:92:95:8A:43:75:38:69:22:68:7D:2D:06:78:20:1E
            X509v3 Authority Key Identifier:
                keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:15:18:3d:46:de:e3:41:d3:11:e8:d0:49:55:a7:ee:ce:95:
         70:35:74:16:a4:5f:2f:12:46:47:37:6d:13:b6:a2:8d:8f:a8:
         c3:94:45:bd:f6:59:cf:b5:90:d1:4c:53:5e:5c:4a:8e:e4:72:
         93:65:a8:2b:28:a9:27:e3:15:dc:6f:87:1e:9b:b5:39:1a:e2:
         07:cd:46:60:08:68:10:47:20:e8:7d:0e:ab:98:bb:a9:d3:d7:
         6d:94:5c:c4:c1:27:35:1a:97:18:5a:b8:d6:14:f2:ef:eb:51:
         5b:c1:08:8b:e4:91:13:d6:fd:0e:e8:a5:91:dd:ce:b8:43:4f:
         3d:1e:ea:6a:c9:0c:c9:41:c1:88:b5:30:8a:7b:76:1f:ac:75:
         46:fb:72:7a:3c:92:44:19:0e:69:2d:a2:a0:56:c3:5f:5e:05:
         72:1d:41:1c:dd:6d:70:50:99:d4:41:c6:9e:12:88:41:53:a1:
         4d:f3:61:72:62:e6:de:6e:ab:13:1d:e1:01:81:97:5e:61:15:
         21:05:e1:39:32:42:77:d0:d5:3b:2e:c5:4b:43:80:3f:ca:aa:
         ce:a7:46:c3:cd:27:4c:a3:84:8d:a5:c9:57:f2:0e:69:3f:a5:
         15:dc:02:e2:e0:82:48:18:62:e2:5c:c6:2f:5e:05:c3:a6:70:
         c4:f6:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:57 2026 by rpki-client