Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
File:                     1s5ZxWscobYwJswpw-etzzQUZjw.mft (raw, json)
Hash identifier:          ll/bwdFM9DidW749t7T01IVfXY2diTcrFbFVoE7mAbI=
Subject key identifier:   69:41:0B:F0:46:3C:C0:21:A9:4F:3F:B7:ED:02:4A:66:68:A0:C9:E9
Authority key identifier: D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
Certificate issuer:       /CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Certificate serial:       019F92B6404169C7BF81F57E46723350466D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
Manifest number:          ED
Signing time:             Fri 24 Jul 2026 06:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:45 +0000
Files and hashes:         1: 1s5ZxWscobYwJswpw-etzzQUZjw.crl (hash: Tn3QCMU0vNY/v15JyV+omg+tX4AQiJQerjlzXmRRh9o=)
                          2: N9FFxQDjdWSsDqKRotEMiDNfWM0.roa (hash: JYJSVQnx65soskv06MhEawaexOLV3MdaQKd5cWOTtiM=)
                          3: qcXXlS_rHE9ouJsEbCmmlq5R8Ug.roa (hash: 1unAuaM5VTHoo8Otio/wEUldD3aBxQgm3lHyPoQMCYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:40:41:69:c7:bf:81:f5:7e:46:72:33:50:46:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
        Validity
            Not Before: Jul 24 06:00:45 2026 GMT
            Not After : Jul 25 06:00:45 2026 GMT
        Subject: CN=69410bf0463cc021a94f3fb7ed024a6668a0c9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:f3:c1:30:e6:4c:38:ce:b7:8c:48:20:84:
                    1c:54:c2:be:e9:0c:46:a0:b7:84:57:f4:25:45:f2:
                    58:f1:5a:85:1b:cc:c2:f7:d5:60:6a:e5:ab:42:c9:
                    fd:08:b5:7e:2c:de:60:9b:56:c4:8a:aa:e9:2d:45:
                    25:11:4c:ab:53:68:22:a3:ce:de:2f:f8:c6:c3:ed:
                    ce:f6:4a:c8:dd:6e:ae:cb:aa:23:7d:50:c9:52:44:
                    2c:41:fa:ec:da:1c:0d:21:f2:09:a6:0d:84:f3:50:
                    7c:0c:f9:a9:3c:ae:33:d7:ea:e7:49:09:28:f1:55:
                    2b:e2:80:03:9b:6f:bd:f0:3b:5f:aa:d3:9e:50:d7:
                    9e:71:a8:a9:bc:5b:3e:b3:c8:2f:97:f9:ef:3b:72:
                    7c:2e:e8:5b:a6:84:10:b6:b6:8a:c5:e8:d8:bd:ee:
                    18:4e:55:4c:7f:6c:b0:07:64:45:1e:b3:f1:08:95:
                    9e:ad:d1:1e:66:d6:12:2b:80:e2:02:e7:f4:c8:84:
                    c4:c8:fe:f6:a7:da:60:5a:e2:52:0d:a5:5e:b7:bf:
                    de:5c:21:09:e5:40:d3:13:24:cd:0c:21:67:1e:7f:
                    54:7f:7e:c0:29:22:96:90:61:43:4c:76:5a:21:6c:
                    6d:d1:5c:ef:7f:80:f3:8d:d9:1e:17:a2:c1:8a:31:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:41:0B:F0:46:3C:C0:21:A9:4F:3F:B7:ED:02:4A:66:68:A0:C9:E9
            X509v3 Authority Key Identifier:
                keyid:D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:50:51:e3:01:35:42:4a:88:af:4d:e0:a0:0f:b1:dd:1b:8f:
         b1:0b:f4:ce:8f:2f:5d:65:be:8d:7f:f8:07:09:0e:31:e9:3a:
         95:40:c2:1b:1f:22:1f:7a:2e:08:bb:7d:21:b0:b9:1b:8d:e5:
         7f:61:96:2e:ca:da:d5:1c:4d:e3:7e:f6:a6:3c:a3:95:a7:70:
         1f:61:60:92:3a:ec:e4:a3:d9:b1:0b:3f:f8:a3:37:8c:47:c6:
         a1:15:55:d4:a2:30:58:cf:5f:b3:70:f3:b2:56:4f:d7:bf:92:
         31:ee:95:8d:1c:55:ca:24:83:7d:cd:7e:e2:ec:5e:c0:86:87:
         2b:7a:56:23:e0:69:4f:51:28:9f:f9:62:d6:52:6a:c3:4e:c0:
         c8:da:ed:4d:4a:e8:1e:30:08:94:2c:f3:76:0b:8a:d0:4f:34:
         1b:b6:33:34:dc:da:de:c0:15:cd:f8:d9:03:8d:d9:13:ea:11:
         99:d6:af:11:e6:1f:e7:2a:4a:76:fc:68:91:23:80:a4:84:fd:
         41:4d:ec:24:af:4e:86:cc:67:d1:be:96:38:18:db:cc:93:65:
         7b:84:93:d5:9f:56:3e:79:39:71:a9:7b:03:5c:d3:6f:ae:d6:
         09:32:c0:52:dc:74:be:d7:48:ba:05:ee:4c:a8:c8:2f:bb:c6:
         b7:7e:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:54:50 2026 by rpki-client