Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
File:                     5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft (raw, json)
Hash identifier:          nn7v4wkCjk8hg2f3OVwKC8uiYT8GSFMr+jjP/vvn2QM=
Subject key identifier:   86:C6:0C:62:F6:B1:02:17:7A:86:F0:A6:CB:FA:EF:FD:C6:E8:FC:E7
Authority key identifier: E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C
Certificate issuer:       /CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
Certificate serial:       019F8FEC6270A02FE28630C51730BCF18559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
Manifest number:          1D
Signing time:             Thu 23 Jul 2026 17:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:01 +0000
Files and hashes:         1: 0DosBvc1nYTBnk-k7-9MkqoJuso.roa (hash: HpDjKyJ1RrZFlilOHlA6dkNWt1QM+OdtMilpqKGSWkQ=)
                          2: 5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl (hash: m30ez/a46XTgSHQoO51hGYjsAYrDOhof/Eu5uAF2PiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:62:70:a0:2f:e2:86:30:c5:17:30:bc:f1:85:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
        Validity
            Not Before: Jul 23 17:01:01 2026 GMT
            Not After : Jul 24 17:01:01 2026 GMT
        Subject: CN=86c60c62f6b102177a86f0a6cbfaeffdc6e8fce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:a4:c1:38:6f:c5:2a:83:02:63:ba:3d:ef:
                    c5:a1:88:04:b0:c5:60:6d:99:70:c2:b8:f7:f2:15:
                    c7:95:b0:b0:38:22:1c:e1:ab:3e:7f:49:93:3a:23:
                    1a:6b:6f:d5:cd:90:84:5a:fc:9e:48:2b:90:fb:61:
                    84:c8:65:0c:60:24:3c:90:59:ea:19:e8:51:4b:73:
                    05:90:ab:44:4e:79:15:90:e7:35:31:2b:6a:b2:90:
                    e2:72:a1:6e:a8:b1:4e:5b:d6:0f:fd:6c:b8:ce:9d:
                    10:a3:06:91:34:23:fc:6e:70:d0:9a:b1:e9:2e:23:
                    13:e0:ae:e5:ee:b8:d4:c5:01:b9:70:2d:bc:ad:5b:
                    c1:68:84:b9:d0:15:58:f1:fb:b5:a4:4b:94:06:b8:
                    8c:92:93:d8:1e:bd:fe:48:b8:3d:ec:9e:dd:db:42:
                    7c:cc:79:bc:2d:be:54:ac:33:5b:aa:bc:7b:d4:11:
                    f4:01:20:e6:85:a8:e9:10:fc:43:8a:d8:fe:fb:57:
                    83:0a:b0:12:77:47:62:e8:af:21:ac:a8:ad:9c:da:
                    ff:41:8e:3a:1a:14:7e:a5:65:02:94:16:69:a4:37:
                    96:19:4c:55:c3:b1:03:c6:2e:f0:af:28:0a:57:d3:
                    08:00:12:95:02:d1:1e:cc:ab:b7:55:41:21:41:67:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:0C:62:F6:B1:02:17:7A:86:F0:A6:CB:FA:EF:FD:C6:E8:FC:E7
            X509v3 Authority Key Identifier:
                keyid:E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fc:f8:e8:f1:98:44:de:06:b0:2e:b1:ca:da:a9:c2:63:a8:
         18:53:33:8d:2f:c9:68:1b:4a:a1:f8:5d:d0:0e:2a:6e:a9:08:
         35:d6:90:8a:68:b0:21:59:78:07:84:03:13:8c:be:56:70:61:
         0f:16:12:0f:15:60:a4:7d:05:2e:bd:25:c4:eb:df:a0:37:c7:
         a3:16:9f:7a:fd:72:08:2f:fd:f5:0f:b6:24:ae:d8:31:f5:25:
         f3:d4:85:1d:78:b6:b2:5c:0b:e3:4a:a8:40:8c:86:44:86:a8:
         e6:32:2c:b2:b3:13:e4:dc:56:2b:1f:6a:16:a3:b7:e5:dd:d2:
         13:95:ad:74:cf:b8:7b:44:97:a6:85:9b:ce:91:70:fa:8c:d7:
         07:d3:d8:77:8d:99:7d:6c:de:2c:7f:4e:5c:75:e0:f9:fd:6d:
         f2:ec:ef:e9:18:b0:e3:99:64:e1:78:54:a9:b0:af:25:67:40:
         84:c0:88:a9:86:31:6e:68:40:42:23:5b:10:c7:08:eb:15:81:
         fc:0c:57:46:80:42:e3:81:c6:37:c4:7f:74:30:02:bc:cc:b5:
         47:b5:1f:e9:51:43:f2:41:93:a5:79:8d:02:a4:6b:c6:70:f6:
         89:77:2b:ba:97:b9:9b:bb:a4:6c:6e:f1:e1:b5:96:59:54:fd:
         63:bd:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:51 2026 by rpki-client