Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
File:                     D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft (raw, json)
Hash identifier:          HaZ7zsX6Cr+diDZZemq0YmPwXNan5i6QTI7+WjA1L9w=
Subject key identifier:   49:C4:AD:33:BD:F0:A7:83:F8:AA:0B:0C:6B:36:4E:41:88:CC:DE:3E
Authority key identifier: 0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0
Certificate issuer:       /CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
Certificate serial:       019F8FEC50C88DCDCF78DC083121C51D9ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
Manifest number:          01FB
Signing time:             Thu 23 Jul 2026 17:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:56 +0000
Files and hashes:         1: D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl (hash: KxbmBeFYKvHljc5zRA3/2Rd/o4irUAV0B59hRr3an2U=)
                          2: H-D51HjMjjsYfo5DLvOZXJ5NZgQ.asa (hash: gpkxWbtRBEgASTgFzDt/pFMdPMHMMXFwys4WlumWGfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:50:c8:8d:cd:cf:78:dc:08:31:21:c5:1d:9a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ff99f22733565562695bb1a4f2e2b18deffb0
        Validity
            Not Before: Jul 23 17:00:56 2026 GMT
            Not After : Jul 24 17:00:56 2026 GMT
        Subject: CN=49c4ad33bdf0a783f8aa0b0c6b364e4188ccde3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:43:84:4a:09:f6:5a:cb:1c:34:00:b5:f7:
                    f3:4b:d1:e5:d4:92:03:4f:ed:7e:12:5d:56:f5:b2:
                    19:c9:88:9e:8c:0c:29:e5:69:b1:98:7f:18:94:fc:
                    8b:82:1b:35:84:a0:32:88:64:38:30:bd:27:08:46:
                    5b:01:9e:91:31:3c:91:9d:ba:d5:4f:f8:3b:77:0d:
                    b3:41:e3:17:12:28:87:cc:f5:71:32:18:58:cc:d4:
                    81:99:4e:66:53:cf:89:96:91:ff:bd:f4:76:37:1c:
                    0c:12:a1:4e:26:5c:3b:49:c1:48:d9:4f:50:6c:01:
                    21:43:42:eb:3a:02:ce:ac:28:28:ba:19:6f:5c:be:
                    5b:ca:b9:53:0c:c4:3e:f8:cd:39:ae:6a:3d:e6:fe:
                    71:f7:cf:f6:5f:40:96:9f:d8:37:23:90:b9:fb:01:
                    37:79:ec:30:80:b3:fc:ea:9a:f8:6e:01:ea:a4:90:
                    0f:c5:35:81:89:f0:9c:3f:ca:95:1d:53:0a:7b:ff:
                    40:39:e3:ed:36:13:4a:d5:87:22:88:02:e6:80:51:
                    ad:f8:f0:a5:b9:d0:4e:7a:68:13:17:a2:51:7e:07:
                    5d:0b:bc:91:a9:05:0c:b2:d4:ca:cb:c3:0c:9a:5f:
                    80:ac:a2:0a:c9:1b:9a:71:c1:e8:3e:a0:a8:7b:ca:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C4:AD:33:BD:F0:A7:83:F8:AA:0B:0C:6B:36:4E:41:88:CC:DE:3E
            X509v3 Authority Key Identifier:
                keyid:0F:9F:F9:9F:22:73:35:65:56:26:95:BB:1A:4F:2E:2B:18:DE:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_5nyJzNWVWJpW7Gk8uKxje_7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e75f08-5dc6-46f9-af18-347ebb3975cf/1/D5_5nyJzNWVWJpW7Gk8uKxje_7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:de:b7:1a:ec:4e:74:6c:dd:00:38:87:ae:e8:eb:37:6c:5c:
         30:ee:24:74:62:bd:9c:b7:4b:0a:84:c2:ff:0e:d8:c3:65:f1:
         a7:c4:02:4e:7f:36:9b:87:3c:69:72:86:47:4b:fe:cd:da:8b:
         9a:01:40:6e:f4:50:04:2f:fc:59:cd:41:c0:41:ea:9b:28:2a:
         48:41:6b:26:3a:c6:2c:02:64:64:8a:b3:2f:1a:aa:d7:b5:3d:
         0e:ad:bd:bc:ab:e8:94:5a:41:7e:19:14:5a:03:c4:60:aa:54:
         ee:21:ab:76:de:f6:bb:cd:b2:33:05:ca:ee:04:cd:4a:da:a7:
         81:76:fa:b4:73:77:ee:05:29:87:7c:2d:dc:ed:90:b3:6a:0c:
         ef:1d:de:34:cc:d5:9f:82:2e:55:17:f2:b0:ec:9e:91:4a:e1:
         7c:95:b3:ff:a4:22:56:55:39:f5:5a:97:aa:43:0e:c9:fa:de:
         df:ce:ee:a6:01:a6:e4:09:92:b6:ab:3d:d2:9a:d7:19:f3:6b:
         a3:80:87:a7:73:e9:5d:e1:14:31:0b:e6:9c:29:18:69:04:81:
         bf:1c:d5:43:b4:12:74:13:88:bb:b2:0a:33:6f:8a:a9:53:2b:
         a8:9c:1f:43:be:6e:5b:45:36:bf:8d:bb:d1:1b:e6:e3:8e:12:
         cc:5f:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:38 2026 by rpki-client