Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          aWYXewzxRdcE0/tUco5SVRntA2l191luYQABtjoToBs=
Subject key identifier:   1F:C1:F1:11:DC:F2:EE:67:33:DE:14:C5:A0:C9:41:A1:E6:7D:3F:B3
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019F9059DE5E768611F46271D20A7942C0B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          19E1
Signing time:             Thu 23 Jul 2026 19:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:36 +0000
Files and hashes:         1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
                          2: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: ShJo01HX6R2PP0NnvxYAIFo/gRUTZkWTul4tv2G5LyI=)
                          3: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
                          4: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
                          5: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
                          6: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
                          7: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
                          8: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
                          9: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
                          10: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
                          11: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
                          12: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
                          13: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
                          14: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
                          15: V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa (hash: jzw1vz6ZEXyxdGOPFQhYOp4v00XuXiS4bMqLV6Nev1o=)
                          16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
                          17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
                          18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
                          19: gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa (hash: zzxnJ8kipLM4KRusndIlOFpip8UeHfcdpJcHOaAuZ5c=)
                          20: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
                          21: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
                          22: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:de:5e:76:86:11:f4:62:71:d2:0a:79:42:c0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Jul 23 19:00:36 2026 GMT
            Not After : Jul 24 19:00:36 2026 GMT
        Subject: CN=1fc1f111dcf2ee6733de14c5a0c941a1e67d3fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:be:b6:e1:8b:f0:49:29:40:79:d2:31:ca:
                    1f:a4:18:0f:b8:3e:09:58:77:8e:0b:3c:59:c3:3d:
                    08:ad:6e:83:37:36:13:49:f7:03:c0:0c:0d:8c:2b:
                    16:38:2a:b8:a1:f3:35:22:a8:f4:a7:73:11:83:19:
                    7e:e0:85:dd:c4:da:d8:a7:fc:87:d8:36:b8:17:d1:
                    18:24:58:30:fb:f2:35:ae:d2:ba:77:37:92:f7:42:
                    02:93:4b:cf:be:12:d4:82:30:11:66:ff:76:73:e1:
                    69:e5:3e:0f:73:41:01:9d:4d:80:2e:a5:73:93:16:
                    8b:f7:e6:33:a0:e3:5f:67:d3:2e:49:14:6a:5a:30:
                    4c:7d:f9:05:40:39:ce:d9:13:42:b6:16:bf:c9:46:
                    23:e1:9c:03:a4:f6:16:e0:dc:d1:96:13:c0:d3:84:
                    46:fb:90:be:a6:1f:7f:c5:94:cb:b7:cf:ed:1a:07:
                    ef:15:25:0e:c3:b7:e1:0d:b1:dd:18:0f:fe:a6:b7:
                    16:80:a1:db:af:38:8b:d8:22:b7:3d:42:5f:91:6c:
                    0d:56:ab:53:bb:dd:9d:7b:8a:16:5a:8e:58:6c:54:
                    69:4e:dd:f4:da:78:fc:66:99:ed:0d:9d:b2:02:8a:
                    fb:8d:d0:d1:72:a8:0b:1c:db:6a:2a:98:76:9a:99:
                    91:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C1:F1:11:DC:F2:EE:67:33:DE:14:C5:A0:C9:41:A1:E6:7D:3F:B3
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:72:44:53:7e:e7:67:fc:dd:75:52:f1:d5:ea:6f:68:6f:
         6b:a1:26:f6:d1:99:08:42:9a:21:88:fa:08:0c:e6:45:2d:d7:
         cd:b4:e6:2b:ad:c4:c7:88:9f:85:8a:8b:bf:41:4c:e0:32:72:
         81:2f:e5:00:d6:56:d4:49:da:da:6b:64:a9:d5:76:d7:cf:47:
         44:da:eb:80:53:af:30:d4:88:d1:ff:f4:c9:b5:62:fb:62:f5:
         9b:ec:2a:0d:bc:11:e9:5b:f9:80:59:c4:ee:ea:38:3c:cb:82:
         8f:37:32:41:61:35:65:53:2d:4f:7f:8f:90:06:e1:48:56:28:
         39:64:d0:26:bf:f9:e2:e4:f5:05:34:73:60:a5:f0:02:46:c2:
         29:17:23:97:63:32:04:d7:5c:9a:e0:e6:e0:2a:9a:e7:bf:8b:
         e9:ec:c0:82:8f:1b:0a:75:83:66:f6:a7:e0:f4:04:74:4b:31:
         26:78:80:ba:9f:8d:35:79:99:cb:30:52:58:09:a7:85:25:e3:
         17:f7:46:c8:3f:48:8f:08:05:9d:6c:82:f1:91:c8:e5:93:ff:
         4b:b0:46:d6:68:ad:00:9f:ab:d5:04:72:41:33:62:37:65:f5:
         4c:78:4b:69:c1:da:a9:eb:5b:56:ce:a6:f6:ac:62:be:04:af:
         2a:cd:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:11 2026 by rpki-client