Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File:                     5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier:          atrzlvQ4fA+AOcTAEToeFE5W3aRpP/IAdtwWDIKinQc=
Subject key identifier:   38:7B:95:0F:5E:E7:A7:B7:D2:CA:CE:AB:44:A6:6F:D7:14:29:B1:E4
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer:       /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial:       019F90FEBD388E0B7F31EE6266C0BEF92B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 22:00:41 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:41 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:41 +0000
Files and hashes:         1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: W0C9FenXxiPf2U3n1PbR6KIOOL2PI9MvpunGfSAu7TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:bd:38:8e:0b:7f:31:ee:62:66:c0:be:f9:2b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
        Validity
            Not Before: Jul 23 22:00:41 2026 GMT
            Not After : Jul 24 22:00:41 2026 GMT
        Subject: CN=387b950f5ee7a7b7d2caceab44a66fd71429b1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:b6:3d:fc:da:00:c0:aa:aa:c5:26:18:09:
                    8b:b3:ef:b4:9a:62:31:b1:cf:3b:99:b7:43:ab:e5:
                    eb:b0:09:67:ab:ad:01:27:8a:c1:0c:bc:dd:60:79:
                    70:d2:d6:39:d1:07:c2:81:ef:7b:bc:32:b7:8b:9b:
                    37:69:62:f5:34:5c:27:c8:29:e2:dc:bd:02:50:6e:
                    36:dd:5a:57:72:0c:01:b5:bd:68:87:30:92:b7:23:
                    7f:cc:9d:53:ec:bc:c4:8c:d0:46:31:37:ae:05:23:
                    84:1b:7f:fa:70:68:53:e7:7f:4f:b7:60:a8:95:85:
                    0a:f3:d3:b8:79:9a:30:5b:57:12:d2:b8:8e:2d:41:
                    9a:1e:de:72:07:45:b2:e9:fc:3a:cd:a6:d7:5f:27:
                    b1:a4:3b:cb:f9:72:03:b4:0a:fa:0c:02:c3:06:18:
                    00:0b:91:6e:5a:c4:ad:2a:e2:41:31:a9:a6:0f:67:
                    fe:d6:8b:66:91:c0:3e:b9:aa:66:43:e8:0e:e8:b6:
                    7a:e0:ab:11:fc:09:4e:07:19:8c:01:65:85:6b:67:
                    ed:d3:ce:f7:83:92:70:42:01:c8:63:e6:13:ab:b5:
                    31:2f:ee:a7:f4:59:81:d5:c4:05:dc:96:f3:be:5f:
                    9d:4d:c3:42:62:23:a4:6c:c4:bf:0b:50:d6:ff:ee:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7B:95:0F:5E:E7:A7:B7:D2:CA:CE:AB:44:A6:6F:D7:14:29:B1:E4
            X509v3 Authority Key Identifier:
                keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6b:7c:06:7b:9f:ba:30:f9:12:d5:6c:8f:d9:6c:2c:4d:70:
         52:e8:5a:ee:b5:7f:96:c3:23:c7:17:f9:f3:8a:91:5e:49:1b:
         79:44:88:29:8d:8e:4d:a8:81:c0:36:e8:21:55:7d:da:35:24:
         c8:30:79:85:c9:99:23:e2:dd:ca:9f:d2:46:a2:1b:49:36:01:
         1c:11:a2:9d:db:0d:74:07:5d:85:bd:3b:7a:84:28:5c:c3:c5:
         d7:1c:86:eb:6d:5b:c0:ba:21:37:4f:04:46:90:c6:4b:6f:5e:
         28:b9:c0:34:0f:a7:ef:96:97:2b:3c:94:dd:49:48:20:4a:00:
         8d:73:af:65:36:97:61:a4:5a:d6:7a:cd:33:f0:91:63:89:0f:
         3c:ee:7d:88:62:36:03:49:eb:d4:4e:26:72:ff:d7:cc:b4:64:
         d8:c8:77:df:65:b7:4b:83:15:44:c3:13:40:c3:ed:2f:26:3d:
         26:8f:dc:b2:14:ea:de:60:78:21:a7:89:f7:58:d0:d5:db:ee:
         2e:f6:8e:d6:e4:77:44:d3:7a:44:34:e9:ab:46:24:06:33:36:
         4d:75:7c:89:f0:ea:0e:59:01:f3:48:1f:c1:a7:0a:a2:91:35:
         97:08:0b:0b:98:61:79:56:b7:15:46:c7:eb:9d:01:df:7e:00:
         41:96:1b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/r04jgt/Me5iZsC++StOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0
YmM0NGIwHhcNMjYwNzIzMjIwMDQxWhcNMjYwNzI0MjIwMDQxWjAzMTEwLwYDVQQD
EygzODdiOTUwZjVlZTdhN2I3ZDJjYWNlYWI0NGE2NmZkNzE0MjliMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDW2PfzaAMCqqsUmGAmLs++0mmIx
sc87mbdDq+XrsAlnq60BJ4rBDLzdYHlw0tY50QfCge97vDK3i5s3aWL1NFwnyCni
3L0CUG423VpXcgwBtb1ohzCStyN/zJ1T7LzEjNBGMTeuBSOEG3/6cGhT539Pt2Co
lYUK89O4eZowW1cS0riOLUGaHt5yB0Wy6fw6zabXXyexpDvL+XIDtAr6DALDBhgA
C5FuWsStKuJBMammD2f+1otmkcA+uapmQ+gO6LZ64KsR/AlOBxmMAWWFa2ft0873
g5JwQgHIY+YTq7UxL+6n9FmB1cQF3Jbzvl+dTcNCYiOkbMS/C1DW/+5VWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh7lQ9e56e30srOq0Smb9cUKbHkMB8GA1UdIwQY
MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt
ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh
LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmt8Bnuf
ujD5EtVsj9lsLE1wUuha7rV/lsMjxxf584qRXkkbeUSIKY2OTaiBwDboIVV92jUk
yDB5hcmZI+Ldyp/SRqIbSTYBHBGindsNdAddhb07eoQoXMPF1xyG621bwLohN08E
RpDGS29eKLnANA+n75aXKzyU3UlIIEoAjXOvZTaXYaRa1nrNM/CRY4kPPO59iGI2
A0nr1E4mcv/XzLRk2Mh332W3S4MVRMMTQMPtLyY9Jo/cshTq3mB4IaeJ91jQ1dvu
LvaO1uR3RNN6RDTpq0YkBjM2TXV8ifDqDlkB80gfwacKopE1lwgLC5hheVa3FUbH
650B334AQZYbdw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:10 2026 by rpki-client