Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.mft
File:                     5dDFlo7wJhiT6HC3XF7NLwpLbvU.mft (raw, json)
Hash identifier:          spEV5uNAXk38dLQqPBAMzS9Jma/42FI7tSoFNkW5BFI=
Subject key identifier:   7C:DB:5A:0D:FA:5E:A5:E1:B9:A2:74:4A:78:39:82:FE:FD:83:B6:1D
Authority key identifier: E5:D0:C5:96:8E:F0:26:18:93:E8:70:B7:5C:5E:CD:2F:0A:4B:6E:F5
Certificate issuer:       /CN=e5d0c5968ef0261893e870b75c5ecd2f0a4b6ef5
Certificate serial:       019F90FFB6AC8546B6748ACB7C73099C8F0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.mft
Manifest number:          8E
Signing time:             Thu 23 Jul 2026 22:01:45 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:45 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:45 +0000
Files and hashes:         1: 4qwZpRbf6LDkIRhhwBn6qMN1ewY.roa (hash: EpiNl673gOx0ck9MIwb+kEF2Rhtz/BBi635AQJBBydo=)
                          2: 5dDFlo7wJhiT6HC3XF7NLwpLbvU.crl (hash: Y06aqzgRJ1elWLteje7lyPq3T4TI7ZLwiX19dmjfibY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:b6:ac:85:46:b6:74:8a:cb:7c:73:09:9c:8f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d0c5968ef0261893e870b75c5ecd2f0a4b6ef5
        Validity
            Not Before: Jul 23 22:01:45 2026 GMT
            Not After : Jul 24 22:01:45 2026 GMT
        Subject: CN=7cdb5a0dfa5ea5e1b9a2744a783982fefd83b61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:2f:e0:d4:e8:ee:25:39:33:ad:cc:b6:88:
                    2e:ea:72:65:b3:57:4f:be:ab:4c:87:d7:6c:48:10:
                    c0:e1:82:61:99:46:af:90:b9:c8:37:d7:67:3a:e1:
                    c6:83:b0:a0:e4:33:d5:e6:7d:6c:5f:35:3c:7c:ea:
                    00:7b:f1:da:75:f4:a2:6d:a1:58:63:a3:0f:e4:73:
                    3f:1e:42:08:66:3e:75:6f:89:a3:da:3d:6c:86:4b:
                    50:c5:5e:09:48:11:ac:38:e7:51:55:07:75:99:60:
                    e3:af:b2:01:cf:11:f2:a1:2c:2e:30:a7:22:08:f6:
                    61:a9:12:88:f3:01:64:5d:05:06:61:c9:bf:58:99:
                    d4:fc:46:32:b1:f3:5e:8a:fb:86:f8:aa:7c:53:0a:
                    b4:bc:7e:8d:13:46:1b:96:33:d1:e5:a6:4d:ac:59:
                    1a:7d:0a:fa:fd:87:68:a7:7c:5f:65:55:0a:d6:28:
                    75:2c:92:2e:fe:f6:73:6a:60:1a:d2:c8:6f:f1:13:
                    d1:e6:98:43:3e:0f:91:dc:d8:65:81:44:84:0d:47:
                    47:2e:81:9b:ea:e1:26:cb:cc:18:0f:1b:cf:61:d4:
                    35:5d:35:4c:eb:61:d7:2e:96:ff:4e:54:94:83:14:
                    d1:4e:32:ae:0b:26:ee:e3:01:27:3e:42:e1:64:c0:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:5A:0D:FA:5E:A5:E1:B9:A2:74:4A:78:39:82:FE:FD:83:B6:1D
            X509v3 Authority Key Identifier:
                keyid:E5:D0:C5:96:8E:F0:26:18:93:E8:70:B7:5C:5E:CD:2F:0A:4B:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:78:b5:2f:b4:2f:7e:9e:cf:ef:1c:4a:9d:b0:28:71:8d:
         80:ae:82:80:9d:24:b2:d2:d4:3d:cd:ac:a0:8d:f1:68:f8:96:
         1a:8e:99:b1:b0:16:b1:1e:8f:42:07:42:06:19:8f:0b:2a:ea:
         b2:a6:69:50:a4:06:c1:0e:c2:ab:88:cb:ed:e7:c9:8a:9f:57:
         e3:1a:0a:14:2b:b1:41:2f:a8:41:fc:b6:a2:c8:bf:47:42:11:
         1f:f6:e0:90:1a:d4:90:4e:56:07:c3:d7:f5:8e:ff:09:5c:fa:
         5e:25:8c:ff:f2:5c:a6:c9:5e:b1:91:e5:85:f0:54:aa:4f:ed:
         09:8b:3f:d4:4b:f1:0a:a4:45:bf:23:8c:38:08:2c:d2:68:c0:
         5b:d7:10:40:68:cd:d9:55:51:a7:8a:29:4c:b5:e9:d7:a4:c3:
         2e:d4:9a:ef:88:88:bd:2b:8e:2c:d6:e7:98:0f:4c:10:23:3a:
         92:37:69:51:63:34:cb:57:89:87:9f:de:07:fe:33:83:99:66:
         c4:32:d6:4e:ad:c4:60:64:7a:ee:e6:13:80:64:e3:b7:49:71:
         9e:24:12:84:58:2a:a1:97:be:bd:8d:6c:a8:7c:d1:bb:c1:27:
         9c:84:48:ee:a7:2c:58:e4:63:53:2c:8a:e4:1a:a8:2e:f5:54:
         05:08:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:01 2026 by rpki-client