Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File:                     5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier:          BN7z4qho+H+o+2z3deZVKfEfIO6UzCKcWOntQ5TZxYU=
Subject key identifier:   90:E3:1F:CE:6F:BB:98:DE:77:04:1E:7B:D2:26:22:17:38:A6:E3:9F
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer:       /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial:       019F916C8E43FA99BE814BE235F8E8813001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number:          01DF
Signing time:             Fri 24 Jul 2026 00:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:38 +0000
Files and hashes:         1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: 4Pb/hMpoS492kAmvpRrUtqwPc5U0jP9JuuVwDDbUtto=)
                          2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:8e:43:fa:99:be:81:4b:e2:35:f8:e8:81:30:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
        Validity
            Not Before: Jul 24 00:00:38 2026 GMT
            Not After : Jul 25 00:00:38 2026 GMT
        Subject: CN=90e31fce6fbb98de77041e7bd226221738a6e39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:40:20:25:84:f7:6d:be:2f:9b:01:43:a1:
                    89:02:2c:d5:40:44:88:57:0e:37:67:e2:fe:a9:34:
                    a4:bd:69:f6:5f:10:c8:df:f1:ca:e3:4b:10:85:c4:
                    9b:a7:c6:f3:41:77:af:e3:c6:d7:dd:c1:36:02:98:
                    33:7c:e5:5b:e9:75:bd:7d:8f:71:09:ae:1e:25:0e:
                    f4:79:ed:94:e8:04:ba:98:00:85:29:52:fd:43:b2:
                    f5:c9:0e:20:8d:22:6a:46:48:96:01:af:56:45:c0:
                    5d:8e:5d:84:d2:da:ce:55:78:ea:31:d6:d6:af:f5:
                    e2:42:7d:66:de:90:28:4b:de:0f:d9:ee:a9:34:fb:
                    24:7a:cd:9b:88:1b:c2:fb:b3:26:20:2e:14:cf:9f:
                    ca:12:06:3a:1e:20:40:c4:23:10:bf:9b:bf:25:50:
                    e8:35:cf:b7:23:a9:5a:5d:4f:5d:2e:00:4d:3f:cb:
                    00:2a:08:1d:e6:fe:bf:01:13:0c:f6:c9:c2:ac:18:
                    19:57:57:67:1b:d8:5e:ad:ae:6d:13:1b:11:d9:45:
                    2c:fa:e2:c3:0c:7a:ad:33:2a:99:35:22:d1:95:ac:
                    8b:bc:07:51:97:88:26:f0:e2:ee:56:27:de:c8:27:
                    9b:b1:a2:27:51:f1:38:e0:67:f5:52:e9:12:12:bd:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E3:1F:CE:6F:BB:98:DE:77:04:1E:7B:D2:26:22:17:38:A6:E3:9F
            X509v3 Authority Key Identifier:
                keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:60:e5:d6:1d:94:9e:51:97:b2:c1:e1:82:3a:4a:80:57:ae:
         83:08:2c:67:49:a9:45:e5:9f:82:5a:d4:8a:d1:1f:f0:a7:3a:
         4e:c8:9c:84:61:4e:b9:f9:39:ce:f9:2a:cc:ac:ad:38:43:f8:
         01:6c:b5:70:c2:15:7b:0f:6e:52:4d:06:42:42:5d:df:e1:8c:
         c9:98:8f:3b:d8:b5:01:3a:47:b8:3f:24:d3:a0:0a:9c:8e:29:
         74:c4:6c:21:3c:12:52:e5:8f:ff:c0:e0:98:41:63:6a:fc:95:
         fe:d7:8e:7b:c2:c1:cd:b8:cc:40:fc:ef:bb:8c:ab:97:b2:c9:
         ef:25:6e:23:10:50:1e:54:1b:46:16:fc:d7:c7:f2:ff:fd:57:
         62:3a:78:97:b1:9b:1d:c1:9b:a0:dc:1d:c0:34:3a:fe:8c:aa:
         be:b3:f8:99:8b:dc:52:19:c5:56:83:90:6a:90:41:76:75:b3:
         54:95:a8:19:56:a2:d3:9e:39:7d:8e:33:ed:fb:e6:8d:c9:15:
         d8:4d:72:28:3d:69:99:39:b0:8e:55:7d:e3:90:70:f0:dd:2b:
         28:d4:d4:ba:87:4e:c5:fd:c7:be:40:db:a6:24:87:f7:7f:c6:
         c9:81:37:3a:c3:72:61:86:65:da:bc:1d:84:2b:e8:91:a9:f1:
         7c:7c:70:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbI5D+pm+gUviNfjogTABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YWE1MzNmNDc1ZjA3OWY3MzVmZWIxOTQ2ODRjMThkNWFl
YTYzMmYwHhcNMjYwNzI0MDAwMDM4WhcNMjYwNzI1MDAwMDM4WjAzMTEwLwYDVQQD
Eyg5MGUzMWZjZTZmYmI5OGRlNzcwNDFlN2JkMjI2MjIxNzM4YTZlMzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUtAICWE922+L5sBQ6GJAizVQESI
Vw43Z+L+qTSkvWn2XxDI3/HK40sQhcSbp8bzQXev48bX3cE2ApgzfOVb6XW9fY9x
Ca4eJQ70ee2U6AS6mACFKVL9Q7L1yQ4gjSJqRkiWAa9WRcBdjl2E0trOVXjqMdbW
r/XiQn1m3pAoS94P2e6pNPskes2biBvC+7MmIC4Uz5/KEgY6HiBAxCMQv5u/JVDo
Nc+3I6laXU9dLgBNP8sAKggd5v6/ARMM9snCrBgZV1dnG9hera5tExsR2UUs+uLD
DHqtMyqZNSLRlayLvAdRl4gm8OLuVifeyCebsaInUfE44Gf1UukSEr1dOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDjH85vu5jedwQee9ImIhc4puOfMB8GA1UdIwQY
MBaAFOSqUz9HXwefc1/rGUaEwY1a6mMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lN2I3MGQtNjAwMS00MjhiLWFkZDAt
MzdjMjEwYmFiN2EwLzEvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lN2I3MGQtNjAwMS00MjhiLWFkZDAtMzdjMjEwYmFiN2Ew
LzEvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWDl1h2U
nlGXssHhgjpKgFeugwgsZ0mpReWfglrUitEf8Kc6TsichGFOufk5zvkqzKytOEP4
AWy1cMIVew9uUk0GQkJd3+GMyZiPO9i1ATpHuD8k06AKnI4pdMRsITwSUuWP/8Dg
mEFjavyV/teOe8LBzbjMQPzvu4yrl7LJ7yVuIxBQHlQbRhb818fy//1XYjp4l7Gb
HcGboNwdwDQ6/oyqvrP4mYvcUhnFVoOQapBBdnWzVJWoGVai0545fY4z7fvmjckV
2E1yKD1pmTmwjlV945Bw8N0rKNTUuodOxf3HvkDbpiSH93/GyYE3OsNyYYZl2rwd
hCvokanxfHxwpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:00:34 2026 by rpki-client