Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File:                     5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier:          Fq4WL5MLih8pVjnEFn/wf5qT3wytznuN8cNPzt2/QrM=
Subject key identifier:   00:5E:76:B4:DF:BA:23:4A:21:24:D4:93:53:A4:6E:EB:46:68:7F:78
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer:       /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial:       019F91355A9286251664462F22CCBFAA909B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number:          0D06
Signing time:             Thu 23 Jul 2026 23:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:20 +0000
Files and hashes:         1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: PuJozTpPFcPVGP4+aCV0XOiiHsrXnd5p7foSQcK6Jco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:5a:92:86:25:16:64:46:2f:22:cc:bf:aa:90:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
        Validity
            Not Before: Jul 23 23:00:20 2026 GMT
            Not After : Jul 24 23:00:20 2026 GMT
        Subject: CN=005e76b4dfba234a2124d49353a46eeb46687f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:48:4b:2f:c2:84:8b:38:a4:1e:73:96:58:
                    57:ea:2b:1e:4a:c6:91:be:40:8c:3f:e5:45:25:ee:
                    62:34:ce:c3:53:0c:84:69:f0:51:dd:c5:e4:28:b8:
                    59:e1:48:6d:7c:1c:52:19:90:be:de:0a:b9:5f:7c:
                    81:af:43:1f:5b:99:3b:93:48:25:53:15:0a:d6:fd:
                    78:fa:4e:73:3d:7d:01:83:f0:42:dc:18:9c:b8:fd:
                    a9:f0:6c:d8:4d:d9:e3:ce:4b:c9:9c:7f:50:15:d1:
                    4d:07:29:58:a7:59:2a:25:68:a6:b0:f8:31:c7:51:
                    f3:5f:fd:33:af:ac:24:cb:d2:65:2e:c1:c0:6c:7f:
                    0b:d5:bf:2f:21:90:c1:62:1a:05:69:49:90:cc:bf:
                    c4:d9:82:d4:22:61:c6:ec:79:a4:b3:c9:27:c3:51:
                    53:92:40:1c:78:b5:99:39:43:e0:ab:69:5e:3d:d7:
                    92:5f:d0:6a:65:c2:78:b9:ed:e9:e0:96:43:d2:56:
                    d1:7f:05:73:c2:e7:2f:89:aa:46:05:88:c1:2f:f1:
                    db:2e:57:c8:90:eb:ba:50:6c:48:51:43:ef:79:f3:
                    d3:1d:62:5d:85:25:6f:8c:ab:fe:dc:e9:cf:5d:8a:
                    c7:6c:24:5c:27:d8:9c:2d:b3:79:a7:4a:d2:93:be:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5E:76:B4:DF:BA:23:4A:21:24:D4:93:53:A4:6E:EB:46:68:7F:78
            X509v3 Authority Key Identifier:
                keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:46:b1:76:eb:6e:8a:87:bb:ff:3d:66:05:3d:46:fb:52:b6:
         10:14:40:9e:d4:b8:1d:5b:e7:69:f3:34:73:2a:5c:db:ed:39:
         f7:2d:e2:31:07:5d:9b:8d:f3:86:8d:49:57:38:84:c7:46:8c:
         a8:88:20:eb:c6:1e:24:33:e8:84:33:78:97:a1:12:88:a7:69:
         10:df:4a:1e:c8:ef:cf:44:9c:19:d1:04:f0:af:3b:68:eb:83:
         59:bb:21:e0:b6:e9:ce:88:48:5b:99:8d:bd:e5:5a:7e:13:c3:
         9e:98:20:2b:81:6d:34:fb:1a:a7:f2:f4:ab:50:68:a5:6b:8e:
         a0:73:3f:01:72:14:18:f8:ec:aa:5a:65:f5:39:f5:b6:c0:f3:
         4f:c6:f2:19:fd:c0:5d:c2:87:f1:e0:74:51:53:7e:59:20:d6:
         e5:20:93:e7:f3:43:04:be:9a:3b:57:a6:b6:39:15:fc:69:96:
         2c:ec:46:f2:70:38:8f:1a:f1:ca:04:1f:d7:68:56:70:f6:17:
         77:20:30:58:e1:41:96:89:63:70:e6:0e:29:9c:a6:4a:6f:d8:
         b6:eb:04:8c:ba:4d:4c:6b:de:f6:37:fe:11:e9:d2:69:44:9a:
         07:cf:8a:f3:38:3a:60:50:70:22:5b:4d:77:45:40:d2:0d:c7:
         83:32:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:56 2026 by rpki-client