Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
File:                     5weSQnGbdzi4P0kUerH1gp93ahU.mft (raw, json)
Hash identifier:          j4xOAiJ4p2+BgB/xSSu1/YCRtFu5rIczDmACEXHf9E4=
Subject key identifier:   6A:5A:E1:19:B9:30:6E:BC:41:5C:4B:B7:99:5D:43:C7:93:2F:3C:97
Authority key identifier: E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15
Certificate issuer:       /CN=e7079242719b7738b83f49147ab1f5829f776a15
Certificate serial:       019F91DA811504701EAD5B8B7FC24C79CE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
Manifest number:          0391
Signing time:             Fri 24 Jul 2026 02:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:43 +0000
Files and hashes:         1: 5weSQnGbdzi4P0kUerH1gp93ahU.crl (hash: vrZ8BQFHnHZCcnheMfwmMrgqbnqgLtHhboGP8MIapRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:81:15:04:70:1e:ad:5b:8b:7f:c2:4c:79:ce:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7079242719b7738b83f49147ab1f5829f776a15
        Validity
            Not Before: Jul 24 02:00:43 2026 GMT
            Not After : Jul 25 02:00:43 2026 GMT
        Subject: CN=6a5ae119b9306ebc415c4bb7995d43c7932f3c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:fd:01:13:79:b5:02:5e:42:b5:fe:73:49:
                    7f:e5:6d:14:47:5f:aa:bc:0d:69:5f:7d:ba:14:36:
                    d5:a6:a1:d7:0c:c5:0f:b9:d8:a4:1c:93:63:df:80:
                    40:d3:17:ac:c5:95:fa:28:69:f5:8b:20:69:85:43:
                    0e:df:62:b1:d4:17:90:2b:37:cb:21:b5:a3:fb:a1:
                    30:f6:07:97:2f:ed:ed:b2:47:ff:f2:0c:c7:75:52:
                    ce:fb:58:88:94:27:6c:a0:34:c6:ec:be:10:b7:2c:
                    4b:9f:f3:e3:b6:19:7b:25:3d:bd:d5:1c:70:85:c0:
                    15:1d:6c:55:2a:6f:3e:e1:3e:6f:b9:79:1f:6f:c0:
                    a0:4c:f1:11:ca:12:b8:d5:99:02:c8:5c:27:4d:f7:
                    ea:47:35:ed:cb:dc:b7:af:35:fa:91:98:1d:82:c4:
                    f7:95:fb:3b:0a:fd:43:db:48:e1:0d:42:a3:76:d9:
                    18:d3:da:02:49:70:1e:5b:f2:6f:76:37:0c:e2:fc:
                    b9:e7:68:f2:04:4e:fa:24:ad:e8:6a:69:eb:0f:23:
                    a8:a3:17:4d:d2:4b:ed:99:9e:d8:da:12:69:7a:63:
                    ad:61:d3:34:4c:cf:50:42:88:ee:c2:9e:05:40:b1:
                    5d:5d:4f:42:e3:f5:98:23:72:99:15:3c:99:da:b0:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5A:E1:19:B9:30:6E:BC:41:5C:4B:B7:99:5D:43:C7:93:2F:3C:97
            X509v3 Authority Key Identifier:
                keyid:E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bf:04:f7:36:68:29:6c:c4:3b:3e:e2:08:f3:a4:3a:9a:68:
         34:ed:17:96:b5:90:0c:5d:aa:fb:73:6c:80:79:5d:eb:e4:90:
         c5:2b:f6:19:c5:cd:a2:b2:36:88:e3:20:41:87:9f:d0:49:d3:
         39:ef:df:49:b3:60:38:70:51:fa:a6:3f:c7:d2:7a:05:ff:4f:
         78:c3:46:f0:e9:9c:7b:26:84:1f:e2:59:47:4b:0e:58:93:51:
         29:bf:df:82:1f:82:58:0f:be:7a:19:3e:bc:13:34:8c:b4:4a:
         9f:a4:db:a3:d4:f1:dd:48:03:81:43:ef:3e:14:9f:5c:e9:fd:
         11:cf:07:5b:60:68:29:cc:93:b1:a5:66:f7:c3:36:66:65:6c:
         19:25:f2:29:f8:93:5f:2c:57:50:cc:c4:0c:28:a2:3b:b1:39:
         79:a1:33:c0:48:f4:e0:a5:a3:06:c2:3f:e5:9a:a7:99:3b:ea:
         e2:08:b6:a8:1a:e7:ff:19:1a:b4:e3:79:80:81:a4:32:9d:48:
         8a:ba:94:f0:bd:fc:68:8d:a4:b0:d4:7a:b5:89:fe:1b:e0:7d:
         68:fc:83:af:73:c3:65:f7:58:2c:cb:bb:90:9a:55:2d:5f:5a:
         b2:b1:38:72:f4:b7:bd:fe:19:33:06:d0:ba:dd:e0:91:18:48:
         3b:75:3d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:44 2026 by rpki-client