Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File:                     5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier:          Th+6w33ZQyOQZlTH2nq8BOeQKe8EYSAY1n/B9lpmTcE=
Subject key identifier:   EF:88:A6:82:B6:DE:D3:FB:7B:84:C1:6F:58:EE:1A:B6:96:8D:D9:97
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       019F8FEC1C185EE6B371D76AEAF3522BCDCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number:          19CF
Signing time:             Thu 23 Jul 2026 17:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:43 +0000
Files and hashes:         1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: 1JiRXzENGe7ql4uu/TmYV4rVVNjGbRFVqlBkji9ceSs=)
                          2: A34_GTeXqKfeFieH-K6SMhQYDeM.roa (hash: kMGUuf+bmu2QhGj0B3VWZCeUdZ8iNJFffakS/R7WXBo=)
                          3: VDxXv_w0W6U3fKxfLxftlx6HpMM.roa (hash: WUymDNSngxC5WSDx7MR3UAkCZaIl6Eq2DUk2ccwnU30=)
                          4: aZZsOIYuWQNX6KZ6wMS1a5w6xsQ.roa (hash: sOa0dIn7uqNOrAivXJIEeikXKxFSaK1g51TxfgbbJB8=)
                          5: gJS4W1OlZX4qhqCfciLkY8-A4Yo.roa (hash: t2Rys77KJN1dnN93Baik0czPJYwk4ZAeQlLRAbQNSRg=)
                          6: j_fEcmRawhfQ335R07nuk6I9mKM.roa (hash: sLXREARPQv68UDdJgDz8RPpaZ0LxhTnDeQMZPazHH7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:1c:18:5e:e6:b3:71:d7:6a:ea:f3:52:2b:cd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Jul 23 17:00:43 2026 GMT
            Not After : Jul 24 17:00:43 2026 GMT
        Subject: CN=ef88a682b6ded3fb7b84c16f58ee1ab6968dd997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4e:fb:08:ef:00:10:ff:c0:a1:74:ee:d0:3d:
                    c1:3d:d6:66:98:45:86:20:9e:81:52:8b:76:85:85:
                    1e:c8:99:5c:8c:c8:17:5d:0d:c4:6b:54:e2:a0:d3:
                    7c:70:c0:96:21:1c:f1:54:04:d5:51:a7:9c:9f:36:
                    ae:7c:29:3a:f2:d1:b4:97:83:1b:4d:96:a4:d6:e6:
                    89:dd:a9:78:26:13:18:6a:4e:06:0b:31:c5:79:cc:
                    28:01:f1:a1:ff:e7:27:0b:c9:c5:8c:0c:55:06:6d:
                    65:30:e8:76:78:54:22:92:f4:b2:35:0f:30:b7:42:
                    3e:13:d9:b0:d8:f3:18:20:88:8e:93:44:de:51:e7:
                    97:a4:6a:00:da:a8:b9:c8:86:be:f5:2d:0a:fe:14:
                    c3:99:32:a3:a6:60:24:0a:fc:e5:1f:72:e5:61:28:
                    15:83:bf:1c:c7:f9:bc:59:96:e8:e3:58:fd:ff:78:
                    9b:13:c4:75:5e:a4:88:57:4a:95:62:89:45:9c:94:
                    cd:49:20:41:5b:8d:23:54:5c:63:ac:18:19:07:33:
                    ec:36:55:4a:ec:f1:93:1f:5f:0f:44:12:12:bf:cd:
                    0e:ca:b2:d4:5c:48:5f:33:ae:ea:94:3a:0d:b7:66:
                    26:e6:5c:9e:78:c4:c1:b7:5f:e5:85:56:a9:3d:de:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:A6:82:B6:DE:D3:FB:7B:84:C1:6F:58:EE:1A:B6:96:8D:D9:97
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:85:52:22:d3:28:5a:96:a9:83:ba:4a:d9:25:41:e6:b3:cd:
         1b:4c:63:ca:39:f6:fa:0c:68:31:c5:64:e5:5d:39:10:bd:30:
         9c:42:b3:60:5b:44:9e:45:cc:f8:f2:9c:36:12:1a:01:91:20:
         9c:99:47:46:a4:18:06:8b:80:f7:24:70:5b:04:b6:12:93:2f:
         f4:4a:d4:09:ec:75:64:c5:b4:3a:95:f3:90:f7:53:81:60:88:
         55:fb:58:e9:5a:72:11:6a:e5:8c:f9:ec:9d:2d:75:49:8a:ad:
         01:03:6c:27:4d:14:79:6c:73:89:95:85:f9:43:d7:77:70:40:
         88:52:85:9a:88:3f:3e:01:44:e6:18:c8:d1:6c:c6:cd:13:67:
         82:4a:ce:41:de:5a:22:bf:a6:54:50:81:66:39:82:e6:e0:15:
         56:a5:3c:f2:7e:ed:1d:23:dc:47:d9:b6:03:7b:1b:ed:d6:78:
         16:30:7d:24:53:91:19:67:8f:42:b7:87:26:e9:d0:0f:1d:d1:
         77:dc:00:b0:7e:ee:af:8b:0f:bc:8d:76:6e:1a:43:f4:ff:1b:
         c0:e2:74:62:1a:37:95:14:72:c4:03:4c:f0:2f:8a:08:c9:af:
         f1:84:c4:e4:dc:b2:a8:5a:17:53:f3:26:51:fb:02:f3:5c:c2:
         1d:3c:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:26 2026 by rpki-client