Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
File:                     5Y8ma01YAFUs7adrgycbTI4V44o.mft (raw, json)
Hash identifier:          fL71L6gO3eLXHFh+ltOu/4bTBZaQv+hyvN0WJh58qJ8=
Subject key identifier:   FE:A0:FA:E0:B0:C4:BC:0E:31:19:98:D7:46:7A:9A:9E:A0:F6:61:43
Authority key identifier: E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
Certificate issuer:       /CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Certificate serial:       019F8F7F4B4957675FB4681AF4F88F5884E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:51 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:51 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:51 +0000
Files and hashes:         1: 5Y8ma01YAFUs7adrgycbTI4V44o.crl (hash: 3NO4HMWH68TO02TMylj2BqJ0RjWV6v0LYrJxdivh4UI=)
                          2: iFyfYWFsM0iMJ97H4foanc8WCXQ.roa (hash: epLKDTEWz43TfM9j0Qz4VkQ0x2j4c5io3SdVpC8PFXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:4b:49:57:67:5f:b4:68:1a:f4:f8:8f:58:84:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
        Validity
            Not Before: Jul 23 15:01:51 2026 GMT
            Not After : Jul 24 15:01:51 2026 GMT
        Subject: CN=fea0fae0b0c4bc0e311998d7467a9a9ea0f66143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:9b:5b:c5:a8:c2:49:3f:e7:8c:6e:37:87:
                    56:bc:65:c4:b0:bc:f6:8a:62:85:81:d8:1e:9e:c2:
                    c0:ca:88:66:9c:67:31:50:b2:65:16:1d:ba:71:4d:
                    fb:65:6d:c1:07:6a:1b:ca:a4:bb:88:8f:a3:2f:4c:
                    01:f6:56:82:66:e7:ca:45:ba:07:47:0f:24:ea:c8:
                    b9:e5:0d:86:31:7e:d7:cc:be:cd:86:68:2f:34:53:
                    1d:82:d0:ee:03:f4:5b:34:1e:4a:09:54:73:1e:9d:
                    70:f5:e7:35:3b:6a:74:67:db:70:90:32:85:8c:01:
                    e1:7b:18:e3:f3:92:39:a7:56:90:23:30:9b:a8:26:
                    bd:19:73:8e:41:48:36:ae:e4:4a:eb:de:da:e1:57:
                    cd:db:7f:6f:01:73:06:5a:f1:c9:9c:14:c3:ef:6b:
                    6d:41:06:18:9f:c0:1b:83:ef:9b:46:e0:df:c3:9a:
                    60:7f:2c:25:7d:54:fb:f9:3a:29:49:3a:5a:36:d9:
                    b6:26:2e:ad:d2:78:2b:61:71:92:08:c6:b0:c6:6e:
                    41:7d:d2:61:98:05:2d:b6:a3:8e:c6:1d:26:19:19:
                    5e:93:00:e3:df:43:ce:cf:0c:2a:73:4b:47:1c:9c:
                    35:52:1b:1d:b2:a9:64:71:8c:e3:67:ca:29:37:13:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A0:FA:E0:B0:C4:BC:0E:31:19:98:D7:46:7A:9A:9E:A0:F6:61:43
            X509v3 Authority Key Identifier:
                keyid:E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8f:6b:3a:e6:65:9b:ce:c5:6c:dc:a4:b1:09:d6:3c:c8:de:
         5a:f0:2f:59:0e:f1:c6:90:ef:16:5d:d0:c8:a8:46:69:95:df:
         58:7b:cc:c5:2c:41:4d:a1:cd:06:00:5f:5a:6b:00:d6:eb:6d:
         e5:df:9b:1b:cd:13:cf:91:11:bb:d8:46:b2:2e:24:05:78:00:
         ae:17:4a:14:ca:d0:19:f3:d2:05:9b:e9:94:9c:94:27:ac:78:
         6f:25:8f:77:18:4b:d2:92:f8:2b:ed:aa:e7:76:35:31:f5:90:
         5f:08:92:60:c5:2e:de:cc:be:06:77:b1:38:bb:21:b5:00:be:
         9e:47:b4:9b:c8:2e:a2:88:5f:09:38:95:42:f3:74:5d:46:10:
         c5:43:11:ce:90:2a:8e:ea:4b:c3:ad:40:f2:65:68:38:18:b4:
         cc:03:cb:ef:f3:5f:30:f0:57:28:52:98:08:7f:74:b9:81:00:
         9a:ed:40:d6:98:06:b5:11:d7:06:50:14:df:17:85:d9:50:d1:
         15:58:14:f9:00:18:c7:a6:1b:12:2f:11:69:a7:b1:1c:74:ec:
         59:dd:18:69:73:ab:d2:4f:54:c6:c8:90:05:17:9f:3e:6b:40:
         15:a2:e3:63:05:08:36:f6:50:05:9c:74:eb:39:d4:d5:4b:a7:
         5c:c3:81:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:01 2026 by rpki-client