Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File:                     1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier:          hgayJ5UAET7HIbwzWrNG7BT/IZRSGZ2meKmd0rKuloQ=
Subject key identifier:   85:F7:F0:FD:80:96:79:84:7B:DF:6C:9C:1B:71:CD:31:FB:E7:06:96
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer:       /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial:       019F9135EC04E15F886074B63A5E57C12798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number:          0FE5
Signing time:             Thu 23 Jul 2026 23:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:57 +0000
Files and hashes:         1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: iNpSe1cSUnX32DHDnW9zd2c4dULTpQuxCrwO3vBXuWw=)
                          2: j23BZZk_JCF_SfyfxVWcOAzB598.roa (hash: E3VUgy7wmstrKfM+/rHOKE3M1MtzxmFo74y/4C1q9hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:ec:04:e1:5f:88:60:74:b6:3a:5e:57:c1:27:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
        Validity
            Not Before: Jul 23 23:00:57 2026 GMT
            Not After : Jul 24 23:00:57 2026 GMT
        Subject: CN=85f7f0fd809679847bdf6c9c1b71cd31fbe70696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:0d:46:20:be:41:d8:8b:39:30:0f:ba:50:
                    2d:09:ae:82:47:99:1e:3a:9c:6f:69:ad:1a:69:49:
                    b0:9c:ca:56:32:9d:24:a0:95:ca:f0:27:b7:b5:df:
                    e6:5a:f9:59:df:82:42:a6:93:13:3d:97:56:d7:ca:
                    55:4d:01:22:60:c9:55:84:66:aa:81:d8:5e:4f:f5:
                    87:7b:67:f5:70:87:98:ff:7d:fb:17:6b:71:a9:09:
                    db:5c:d7:71:4b:0e:36:35:6d:a1:b9:83:8d:da:d1:
                    4e:40:01:e7:9b:ca:87:4c:b4:58:a3:6e:82:e5:94:
                    51:7a:ab:48:fc:1c:8c:b8:c8:4d:da:1a:3e:f2:f8:
                    98:c7:5e:0a:0d:13:48:0d:df:5c:bb:b4:9c:05:24:
                    fe:02:86:23:63:48:d2:77:41:d5:83:81:cf:b5:d6:
                    96:de:80:67:5d:9c:88:6b:cd:ad:f2:a0:80:80:f2:
                    07:93:4a:45:4b:97:00:ad:dc:d3:46:a4:f9:d6:56:
                    a8:cc:16:15:0c:c7:ed:50:ae:f6:fe:c6:e8:85:84:
                    a9:8e:88:3c:f7:57:03:0b:a9:d5:99:5a:1d:9a:9a:
                    d7:f4:a3:71:e4:af:db:a4:90:99:39:cd:48:2b:c2:
                    5d:d9:ab:07:d7:4c:0d:13:92:cb:89:95:40:29:c3:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F7:F0:FD:80:96:79:84:7B:DF:6C:9C:1B:71:CD:31:FB:E7:06:96
            X509v3 Authority Key Identifier:
                keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:29:21:11:17:e7:3b:8b:3a:b0:04:29:07:97:e9:ba:36:ab:
         d0:1f:02:b3:c2:15:70:f7:43:1b:d0:ec:47:93:49:b2:79:ce:
         99:5d:16:89:2f:a0:52:2c:38:ad:b2:6e:e7:ed:b9:1d:ef:e3:
         ec:ae:8e:50:c4:8a:1b:30:04:56:fa:ba:db:2a:32:89:18:b2:
         d0:08:f4:ed:cc:d0:0a:73:b7:2e:e4:db:fc:03:be:4c:0c:ff:
         c3:39:44:fd:79:c9:b1:41:d3:fb:f1:8a:73:1b:90:7a:c3:88:
         dd:ec:8a:ff:b8:2f:25:e5:3a:9f:e1:30:2e:00:ce:8f:fa:13:
         cc:b2:d8:23:ea:e4:c9:e7:ad:c8:ae:1c:2c:b1:99:44:a0:44:
         95:72:c8:e4:ab:ae:e9:3e:b2:92:df:0a:59:1e:63:90:ca:f0:
         9d:2b:f4:91:1e:8b:34:c7:08:59:f8:39:16:8a:82:ff:8b:a1:
         47:b0:ad:6f:b7:ed:3f:d1:3f:57:de:c5:49:cb:d0:e1:2e:3f:
         b0:f7:77:3f:0a:0e:8f:6f:00:0b:77:4a:77:46:fc:ab:a2:13:
         28:bd:e8:55:e3:3a:5e:a2:57:ca:82:65:5f:68:24:e4:8f:bd:
         77:00:19:ba:ab:26:41:10:c6:38:65:31:fb:99:53:78:6a:ac:
         62:bd:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:44 2026 by rpki-client