Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
File:                     5XFody33TCeZnVM4leGr7c6XJjw.mft (raw, json)
Hash identifier:          lXz7Z9YjtpqKODvxkQczBg20zZAieI3nrBR1njZRt+c=
Subject key identifier:   15:A5:2C:AD:FD:B7:A1:3C:FE:0D:41:72:6B:F9:72:CE:29:4C:DB:91
Authority key identifier: E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C
Certificate issuer:       /CN=e57168772df74c27999d533895e1abedce97263c
Certificate serial:       019F91DA9F38E152E87BE902F17ABB3A09D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
Manifest number:          051F
Signing time:             Fri 24 Jul 2026 02:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:51 +0000
Files and hashes:         1: 5XFody33TCeZnVM4leGr7c6XJjw.crl (hash: hurfE7Wotm2iD0UO7oAkcvCcs3AdDiAFFm8Sr9WlCfk=)
                          2: ERzn62B5dYEPxu7KHY3hiO-jSSA.roa (hash: bxWjkThkkMI0LG+sL2lWtHw/SuStONE33GoZCV4Bk74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:9f:38:e1:52:e8:7b:e9:02:f1:7a:bb:3a:09:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57168772df74c27999d533895e1abedce97263c
        Validity
            Not Before: Jul 24 02:00:51 2026 GMT
            Not After : Jul 25 02:00:51 2026 GMT
        Subject: CN=15a52cadfdb7a13cfe0d41726bf972ce294cdb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:55:07:71:c5:ed:14:a2:7b:a1:a2:3f:f1:
                    14:33:7b:68:c6:84:62:63:27:fb:d0:6d:4b:c6:50:
                    81:81:e0:9c:84:51:ce:7e:e0:14:42:5a:3c:d3:fb:
                    18:29:14:90:9b:05:ff:95:29:18:52:d8:3d:a5:03:
                    a5:5d:12:30:4f:70:9d:1a:80:7c:08:2a:e4:5d:bf:
                    30:c7:61:c8:58:45:ba:08:1d:e5:dc:b1:69:e4:5c:
                    03:48:42:5d:40:99:9b:80:dc:9c:e6:43:c2:47:18:
                    61:93:3c:96:7d:21:7d:6f:ee:cf:bc:e4:47:55:78:
                    a5:17:ab:cf:c4:13:60:f4:f8:82:b4:e2:cf:8f:1d:
                    78:7c:31:c7:c1:a6:2c:82:4f:e2:c5:91:35:37:06:
                    4c:70:2e:66:33:99:78:82:f7:0a:47:f4:a6:83:be:
                    c9:ae:5c:e1:a9:3e:7a:fd:e8:b1:67:03:47:db:16:
                    2c:b5:53:02:af:e3:22:7e:f4:3e:aa:f1:e9:c3:5f:
                    92:0b:75:9d:20:6b:63:4b:2a:cf:ed:be:cd:f3:d9:
                    c4:fe:a9:e6:1b:e9:56:9b:97:3b:0a:e4:d5:02:18:
                    89:45:2a:d6:8d:9a:87:9e:eb:b1:3c:46:3d:ac:c6:
                    67:e7:88:32:57:98:17:ad:d8:6d:3b:e3:f0:65:3f:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A5:2C:AD:FD:B7:A1:3C:FE:0D:41:72:6B:F9:72:CE:29:4C:DB:91
            X509v3 Authority Key Identifier:
                keyid:E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:ee:79:d1:6a:dc:3b:42:51:f4:3b:ab:f2:1a:06:80:da:
         07:4a:d6:b3:1b:fa:f4:1d:d0:90:cb:6f:e6:50:6f:2c:2b:7c:
         07:41:21:47:08:52:bb:13:01:1f:8a:c3:56:27:f8:12:b0:09:
         03:9c:cd:03:83:d6:17:51:d3:1f:16:1b:be:62:7e:2b:7f:63:
         ea:5e:d5:d6:81:44:a4:05:23:c0:c9:35:3d:a5:78:29:1e:e1:
         fe:dd:65:4a:91:d9:35:18:9b:ef:f4:78:42:da:3a:33:fb:5e:
         45:b2:27:d0:3e:41:aa:2e:a3:ce:5b:9f:dd:37:c2:ce:b9:b1:
         b3:9d:18:be:b7:d7:e8:40:9f:c9:c3:eb:b2:61:a0:f3:fe:4b:
         9a:3f:aa:f0:05:87:6b:7a:6d:85:88:18:c5:c6:82:e6:39:8a:
         58:79:c2:4f:ac:c5:91:5e:5b:c9:73:01:08:6e:73:51:4a:76:
         55:56:77:99:99:26:f2:ed:06:e2:96:bd:52:87:63:46:f8:6f:
         ce:99:03:20:15:ae:50:d0:eb:95:c9:27:8d:e2:61:e7:be:17:
         1c:29:bb:57:7f:02:75:49:79:b3:5b:bb:de:7a:17:4b:ca:bc:
         22:53:3d:e8:cf:3e:6f:a0:d5:10:49:6e:9a:a8:0a:f9:03:e3:
         9c:c9:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:43 2026 by rpki-client