Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          f3321ySmAp+BIC4FVGL2nC9+UURWLgcnrwr2O2Wa4Nw=
Subject key identifier:   3F:03:D0:4E:49:69:FB:20:0E:25:71:CA:7B:12:59:F1:50:4D:C7:2E
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       019F916D7312B0646FB53AE243C48FFF66FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          1784
Signing time:             Fri 24 Jul 2026 00:01:36 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:36 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:36 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: dreSepA9X+1XVmVrNBsiAaveDh3VIr9Y+N6FfesSq68=)
                          2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:73:12:b0:64:6f:b5:3a:e2:43:c4:8f:ff:66:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Jul 24 00:01:36 2026 GMT
            Not After : Jul 25 00:01:36 2026 GMT
        Subject: CN=3f03d04e4969fb200e2571ca7b1259f1504dc72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:e9:67:6d:ca:a5:48:af:90:dc:2b:9d:69:
                    82:b6:eb:fd:a9:91:8f:33:3f:b2:a3:a3:d9:bc:c5:
                    5b:48:2a:f6:d3:eb:a7:40:db:7c:fe:5e:0b:1d:ba:
                    eb:b9:e0:28:0b:d2:4b:b0:06:59:7d:7d:37:7c:8a:
                    89:24:e3:2a:f0:84:f5:4d:27:71:7a:ba:72:da:0a:
                    0f:3a:89:ef:71:df:ca:c9:11:c8:05:5a:48:81:8b:
                    e7:33:ef:00:10:e6:6d:04:66:70:8d:d6:21:7e:ba:
                    d4:f4:a3:7f:1e:1c:d0:2d:d9:d6:82:eb:0f:88:db:
                    d1:9e:41:dd:4f:45:98:17:d2:12:97:05:4b:95:cc:
                    3f:50:bb:5d:f5:f0:4d:fd:48:16:56:5d:41:77:4d:
                    55:e1:17:fa:55:2b:6d:c4:5b:4d:25:51:6b:f8:17:
                    67:93:80:f6:ec:fa:30:7d:49:d1:59:6d:c7:ff:88:
                    f5:03:45:87:89:55:75:cd:b1:96:ed:8a:68:f5:36:
                    0a:2c:ce:d2:36:6c:1e:6e:b0:d0:75:5d:ff:c3:e9:
                    dc:6c:14:8f:51:42:c9:8d:4d:e5:03:46:bd:5e:00:
                    c0:e6:8c:ad:9c:69:73:db:01:a5:e4:3a:58:1c:dd:
                    95:6a:20:6b:c2:75:48:9a:d7:c9:45:48:06:59:89:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:03:D0:4E:49:69:FB:20:0E:25:71:CA:7B:12:59:F1:50:4D:C7:2E
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:f3:cc:d7:8d:3c:1b:eb:92:c8:6a:30:0b:25:4e:b5:18:
         19:8c:fb:3a:61:22:e0:8b:c2:8d:a6:df:55:d2:e8:db:1e:b1:
         15:fa:03:f4:8d:a3:ea:f9:af:23:ea:03:68:2e:75:11:05:82:
         cd:6a:8e:e2:f8:7f:96:33:ec:6f:c3:8a:fc:5a:ba:21:6c:a1:
         e3:d4:d0:65:5e:ff:16:48:24:90:01:d9:8b:35:0a:c5:c8:10:
         2e:d9:65:ef:ba:7d:a9:d9:11:ce:f5:dc:d8:38:99:27:50:04:
         81:c7:c2:44:2f:c0:34:51:77:b3:e8:7e:22:9a:13:7c:bc:22:
         6b:64:51:12:3c:71:97:9a:2b:dd:d9:a8:0d:fd:07:ad:c3:42:
         4b:32:ec:e5:d3:c8:67:0a:a0:ad:21:03:86:1e:b5:13:87:75:
         3f:ed:e2:87:5e:99:6a:f0:4b:0d:44:c5:dd:78:8d:04:f7:20:
         e1:a9:7d:f8:57:7a:30:0d:02:ac:4f:a7:80:a0:47:b6:88:60:
         41:c9:bc:26:bf:d8:94:45:57:2b:05:39:0c:55:78:cd:25:f8:
         63:22:48:9c:c9:2e:14:bb:09:e9:74:a7:23:e3:2b:67:fa:39:
         45:8b:b2:e0:41:38:ae:b7:99:a2:9f:9c:12:42:f3:77:93:ec:
         ca:b3:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:58 2026 by rpki-client