Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
File:                     5e61yh0hW8msLLQNHum-53UPn1c.mft (raw, json)
Hash identifier:          AdORCFXBrBYV6eZi3JAYUfINRri71uIV+xixecl+6+4=
Subject key identifier:   2E:5A:5A:3D:E4:59:49:CE:F0:DF:B6:BC:3C:9D:65:FC:8B:A5:07:57
Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
Certificate issuer:       /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Certificate serial:       019F8F7E35F3AB3E5A3513FF69BF4E891A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
Manifest number:          0921
Signing time:             Thu 23 Jul 2026 15:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:40 +0000
Files and hashes:         1: 5e61yh0hW8msLLQNHum-53UPn1c.crl (hash: tfK49OedJSGLLV11nauJXLd7RNJ9+dN2S03tyyihQqk=)
                          2: 8E3KQn28QEnX6E9rSlznvHJTpOk.roa (hash: 2FxfSHabUGnOaZPwXMI3ZNNQShrnuJ5A0V2bbWoD1Z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:35:f3:ab:3e:5a:35:13:ff:69:bf:4e:89:1a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
        Validity
            Not Before: Jul 23 15:00:40 2026 GMT
            Not After : Jul 24 15:00:40 2026 GMT
        Subject: CN=2e5a5a3de45949cef0dfb6bc3c9d65fc8ba50757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:1b:d5:6a:cb:2b:ca:14:d7:41:22:82:14:
                    f4:36:0e:eb:42:94:0b:2f:eb:ad:a5:a6:ac:a7:03:
                    d8:b7:44:3b:70:c4:39:b7:0a:72:19:81:00:84:80:
                    cc:56:c8:aa:0a:a3:95:9f:a6:19:e8:82:b2:ca:73:
                    e1:e0:a7:34:6a:68:c6:1c:f3:a8:c5:02:0a:69:fa:
                    df:da:c2:fd:4f:5f:e6:a2:fa:42:af:7f:54:e1:d0:
                    93:4f:05:ab:ed:c9:0f:e0:03:d9:8e:07:53:f0:77:
                    10:94:a4:80:6b:7d:52:6e:04:13:89:60:bb:17:86:
                    c4:85:bc:0c:de:f0:0c:b2:d2:5e:de:8b:ec:f8:01:
                    31:b8:00:2a:9b:95:e6:69:c6:be:31:92:0c:d8:50:
                    3b:2b:eb:ff:f2:60:8d:31:88:86:11:12:40:6d:23:
                    60:cd:12:f8:67:2a:5e:3b:5a:56:8d:d3:12:ee:57:
                    66:f3:e1:a2:80:b2:c0:63:d9:1a:a9:fd:0b:26:d5:
                    12:7b:4b:4d:07:ca:23:bc:2f:57:c6:23:08:88:a6:
                    09:21:0e:f7:f1:20:38:ae:9b:c3:56:3f:7c:cb:5a:
                    39:3e:bb:56:07:40:9e:af:ab:4d:98:1c:4a:8b:42:
                    9b:bb:35:22:0f:bd:60:4b:16:79:0f:6a:fd:97:02:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5A:5A:3D:E4:59:49:CE:F0:DF:B6:BC:3C:9D:65:FC:8B:A5:07:57
            X509v3 Authority Key Identifier:
                keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:30:85:b7:b5:89:7b:e8:98:2a:6c:f2:e1:6a:c3:b6:95:0d:
         0c:1d:58:8c:15:e0:55:45:fc:e9:64:3d:3d:d6:f8:22:c8:73:
         7d:b2:31:e6:ab:11:71:87:db:d3:c9:b3:6e:bb:c9:df:50:58:
         6e:5b:b5:ef:8f:f6:dd:90:7f:89:9f:36:8b:23:3a:74:98:ce:
         13:c9:4f:8f:66:cf:5a:77:7f:ef:10:ef:2e:8b:3d:c1:5d:06:
         7f:c6:00:a9:d5:35:8d:39:93:87:2e:32:7f:5f:eb:69:0f:1e:
         cf:0a:1a:8e:cb:88:dd:ac:61:55:9b:ae:54:ef:84:96:25:b7:
         45:1a:d1:26:51:4c:16:6b:9d:9e:d9:f8:d2:62:a0:9f:74:88:
         64:d9:44:57:83:55:fb:fc:6f:95:e4:47:e0:53:38:5a:17:87:
         ff:b6:12:41:e5:10:26:1f:25:31:90:71:e7:a8:06:c4:56:34:
         a8:be:62:e6:6f:83:ad:04:cd:c4:0f:77:be:ed:b1:08:99:68:
         8c:8e:07:bf:fd:6b:ec:60:2e:14:7b:db:d0:89:34:9a:0d:41:
         64:ad:24:d9:38:14:81:20:06:18:11:c1:83:bb:e3:2b:5c:ee:
         81:82:99:9d:eb:7f:a1:2f:52:50:54:4b:c9:d0:98:32:f9:78:
         37:0b:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:41 2026 by rpki-client