Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File:                     5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier:          gUIHMRzs2iOujBzcU5ob6SqbtakuWiHchYrSUIE1hsI=
Subject key identifier:   07:54:7C:71:DD:4F:4E:60:9D:61:5E:6D:57:7A:FE:32:77:1C:15:2A
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       019F8FB5487B2A2D172871B79EB10F11F718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 16:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:50 +0000
Files and hashes:         1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: 6eYVwbgqSfe9e4dwGvs/1V3zsel7F2Gscprh02+QeIo=)
                          2: ko2j8hnKnRa6XfeSySN88cJHiqc.roa (hash: MyMKVgwxSjCpWrh/r1qz4ah1FabN79izJ21lx/qGswk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:48:7b:2a:2d:17:28:71:b7:9e:b1:0f:11:f7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: Jul 23 16:00:50 2026 GMT
            Not After : Jul 24 16:00:50 2026 GMT
        Subject: CN=07547c71dd4f4e609d615e6d577afe32771c152a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:69:7c:d4:d5:19:ef:af:2f:39:5f:e9:ff:
                    61:63:b7:a4:df:46:a8:7b:65:91:91:0a:f4:33:32:
                    bb:fc:ca:df:71:70:a8:70:9c:3e:1d:d2:bf:ad:72:
                    4d:df:64:e1:8a:81:13:51:b9:f2:30:a4:d4:70:5e:
                    93:cd:9c:a9:b3:a2:a9:b7:cd:dc:6b:a0:93:79:ba:
                    6d:e4:f3:5c:db:01:cc:8b:17:15:81:f9:1a:76:31:
                    5e:f4:1c:aa:38:6c:c7:9a:79:0a:bc:32:29:4e:84:
                    f1:cd:26:84:12:d7:e4:e2:68:d6:1b:a9:44:f7:de:
                    59:26:f9:cf:0e:07:65:07:5c:e0:21:67:ac:dc:1c:
                    ba:82:d1:8f:c5:35:80:1e:e3:2f:95:a1:02:74:45:
                    2d:3c:ba:09:75:f5:c0:b4:de:62:0b:bd:fc:de:a0:
                    d6:48:13:72:5a:97:c7:44:bb:5b:72:bc:64:a3:8f:
                    4c:0c:70:a7:bc:de:82:43:48:9b:e6:bb:5c:7f:8e:
                    52:37:ff:53:64:15:ff:4e:0c:9a:c1:1b:35:5a:eb:
                    52:fc:ef:3c:aa:2c:79:43:d6:fe:37:7c:e6:27:cf:
                    c9:e8:ea:84:9d:94:01:cb:c2:d9:21:af:28:26:96:
                    a2:36:f9:a2:82:2d:ab:62:87:1b:66:cb:dd:13:a4:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:7C:71:DD:4F:4E:60:9D:61:5E:6D:57:7A:FE:32:77:1C:15:2A
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:12:43:17:e6:c0:bb:4c:a1:68:82:bf:d2:aa:fe:0d:76:49:
         9e:92:93:cb:a5:0e:ec:18:9b:fe:6f:2b:60:ed:c7:07:96:fd:
         ae:f4:30:b3:7a:36:98:53:9e:69:e3:40:b8:16:cf:81:5d:3b:
         28:cd:86:88:3b:29:0c:1c:76:33:7a:a3:05:37:b8:4b:d0:e0:
         6a:28:0c:02:b8:43:63:04:2a:b2:3e:e5:80:c2:99:8d:2e:c3:
         5f:bf:d7:d8:b2:68:91:cf:f6:32:88:e7:84:3a:dc:4b:43:89:
         7d:36:4b:27:a4:86:8d:a7:c4:5b:ac:76:c5:e3:7b:19:97:e3:
         46:26:bc:47:09:23:0a:7e:73:a1:b3:41:a7:da:1e:1d:c1:3a:
         c2:5c:ae:ea:60:d0:9c:2f:64:bd:fb:25:08:3e:e8:89:f8:89:
         90:62:c1:3f:85:0f:8d:c9:79:d6:e5:bd:3a:13:ca:85:99:9c:
         a2:59:bb:66:66:54:7a:52:ec:b4:50:a5:4e:ae:dd:4d:13:f4:
         ab:86:ed:6e:97:96:8e:b5:c0:96:bc:f8:1c:51:42:7e:09:5c:
         2f:52:c4:be:86:f0:5e:a9:7d:06:2e:36:79:4b:04:d3:2f:13:
         fb:f8:ea:02:1a:73:95:c7:04:34:41:d0:0e:63:f3:f5:ea:36:
         df:e7:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:46 2026 by rpki-client