Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          R5Xa2Us6w9drShhS8WaUJ6droCZ0AMUg/2h828dzKmo=
Subject key identifier:   A2:8E:C4:CC:66:1F:C5:15:29:0A:49:04:A6:96:3F:A3:80:1E:D9:21
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       019F90C7947DF0A942B8F323E1EDD63AE12B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          1960
Signing time:             Thu 23 Jul 2026 21:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:26 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: 9jboHikWpnspPQeiBGGIuug28m7zox7nbTZJDbB0lbQ=)
                          2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:94:7d:f0:a9:42:b8:f3:23:e1:ed:d6:3a:e1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: Jul 23 21:00:26 2026 GMT
            Not After : Jul 24 21:00:26 2026 GMT
        Subject: CN=a28ec4cc661fc515290a4904a6963fa3801ed921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:20:11:a0:18:a9:2f:84:77:55:9d:3b:44:
                    3d:48:ee:4b:72:94:ef:17:5c:20:2c:c6:33:0f:e2:
                    72:4e:10:63:91:d5:86:9e:d7:8a:17:01:b1:0c:40:
                    de:b2:33:11:bd:ce:be:bb:a3:3b:f7:7a:dd:fb:e4:
                    61:aa:17:86:c1:de:84:06:6a:3b:0a:4f:fd:64:d0:
                    74:ec:98:53:41:fc:0d:8f:a3:cc:12:e4:dd:fe:3f:
                    be:d0:47:22:fc:1e:89:c0:b6:66:04:d1:b3:66:0f:
                    38:ad:3a:b1:3d:35:75:3e:0a:fe:7c:59:72:17:38:
                    fc:0c:65:1c:34:82:6b:5f:4d:59:c3:0d:d9:8f:c7:
                    32:02:73:0c:c5:1a:a0:10:7a:95:fb:fb:14:81:ee:
                    32:d1:45:65:69:47:bf:39:30:96:be:78:72:92:1d:
                    07:98:df:4a:89:da:c7:5a:41:87:81:d1:bb:97:43:
                    36:6a:0f:44:e4:ca:2f:9b:be:16:01:4f:f0:c3:51:
                    aa:81:5a:8d:d3:dd:8d:94:a6:be:a5:8c:50:cb:50:
                    30:af:99:e2:be:e3:69:60:ce:4a:77:b2:dc:40:b3:
                    f9:59:0d:56:58:3c:d6:0c:af:21:ec:78:ca:4c:fb:
                    e3:db:61:d4:ae:1a:80:12:1a:56:61:36:e3:52:7b:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8E:C4:CC:66:1F:C5:15:29:0A:49:04:A6:96:3F:A3:80:1E:D9:21
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:3c:13:f6:34:d8:4a:2f:23:46:6e:46:62:ef:ea:61:0c:
         f7:36:f2:9f:e5:66:45:ff:09:3c:d6:a2:b0:65:0d:29:5b:11:
         ec:b5:f8:82:eb:f3:8f:bd:07:e5:5b:d0:3d:52:26:35:52:b6:
         15:e8:0d:21:1a:52:e2:60:be:cb:c4:3c:6d:10:6b:39:84:9c:
         cb:1f:5a:d5:e7:2b:19:be:15:36:fd:2a:68:3e:7f:b4:67:de:
         a3:25:24:4d:68:08:8a:e2:f4:60:1e:95:74:97:3e:2e:50:d8:
         a9:d9:33:d9:40:2c:7e:94:6b:bc:2b:d1:3f:fa:b0:c9:89:59:
         5d:33:cb:38:5a:8b:bc:f4:2a:8a:1d:8e:50:63:69:8a:a0:87:
         08:d2:7b:e5:11:82:79:e5:81:bc:90:67:11:81:34:dc:14:8f:
         5a:3f:5f:0b:75:0f:eb:14:da:71:ad:e6:90:f1:b9:98:4b:ef:
         ae:d2:20:e2:b2:af:54:a6:58:96:9b:0e:75:29:79:74:36:80:
         a1:d4:0e:e1:4d:f4:a8:37:8f:22:29:6b:e2:3f:14:da:e2:d7:
         e3:5b:00:9f:58:39:dd:fb:3b:96:f5:76:44:c5:5c:b6:25:dc:
         83:84:46:77:fe:0c:88:eb:1e:a6:65:1d:0c:a3:93:da:55:17:
         4f:43:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:53 2026 by rpki-client