Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File:                     5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier:          ngkdBHda6Hj81ygN51PAjr9tmvjzcaUn/p0DZvJmfCI=
Subject key identifier:   12:47:26:71:D0:BC:2B:3E:B2:A5:BA:A2:32:E2:BF:51:24:4A:F2:03
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       019F905A191DD7861411F24225DD42E33035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number:          1509
Signing time:             Thu 23 Jul 2026 19:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:51 +0000
Files and hashes:         1: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: ezqJ01dvYlO8GtqGOydUeA1XWzAR/5VIV0ubR3M+/YA=)
                          2: A1D00v3A4CQZLEI4nsAImmP-iFw.roa (hash: E/3ao48NIzK+YhB3GFzpFI3pAlwXP3xA9O+zTwVZIJ0=)
                          3: GJZc_gLiiRe7OqjNr9x1ky7xXpg.roa (hash: 8nJXVrKq22+Fo+U1/ucjOBB+qvYDFNRUhH11zvrhaPE=)
                          4: kqPwo-tGhdHXOEYZAA2rZ5T34g4.roa (hash: 4MUqRPaEDTzgXrU6Y0k0IEZ7T2M+taIszXucXEvAMGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:19:1d:d7:86:14:11:f2:42:25:dd:42:e3:30:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Jul 23 19:00:51 2026 GMT
            Not After : Jul 24 19:00:51 2026 GMT
        Subject: CN=12472671d0bc2b3eb2a5baa232e2bf51244af203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:6a:06:64:9b:c9:24:2f:3f:0c:6b:b9:74:
                    47:ef:67:6f:f7:0a:aa:bc:d8:9c:f3:76:20:80:0d:
                    42:1a:fe:12:69:04:da:02:c9:73:3f:c1:2a:c8:51:
                    31:a6:8a:9e:b9:44:b1:b5:0e:b9:d6:ed:3a:30:80:
                    c5:a3:8d:3c:f0:c7:d7:bd:6e:7f:07:36:dc:d2:89:
                    90:f1:73:8b:fa:f5:7b:ce:85:15:c6:7e:d6:95:7e:
                    a7:d4:e0:9a:14:af:fa:39:d7:3c:8c:c8:bd:f2:15:
                    49:aa:07:28:e5:5d:8d:16:6c:2b:20:88:a7:3e:ba:
                    bf:ae:73:25:2c:0b:b0:dd:af:a8:55:5d:36:0d:90:
                    1d:2b:7a:0c:6c:56:a4:aa:c4:24:cd:04:27:a7:ae:
                    28:b1:81:f4:2a:7d:8f:b3:bb:d7:54:a5:ae:e1:a8:
                    65:48:dd:da:ae:fd:b0:d3:76:7b:00:de:c7:6e:46:
                    55:88:91:a4:47:b3:e8:58:76:c3:81:f5:8e:35:ca:
                    9a:23:c1:d3:03:8e:c8:d7:5c:49:7d:04:51:a9:27:
                    1f:c0:5a:d5:79:76:b5:6b:0c:c1:ef:8a:5b:13:8a:
                    15:4d:e6:0c:b6:5d:e7:30:d2:61:b1:57:20:41:2b:
                    df:3a:bd:26:69:22:52:31:e9:e0:63:30:a8:0b:46:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:47:26:71:D0:BC:2B:3E:B2:A5:BA:A2:32:E2:BF:51:24:4A:F2:03
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:91:b8:88:27:3c:bc:ee:3a:bf:a3:d9:78:e1:10:80:c4:99:
         84:ca:ff:22:45:65:06:23:bd:a9:a0:89:a0:aa:7d:67:8b:0e:
         4a:13:8d:61:4e:d8:67:86:18:ca:8e:9f:3c:a0:09:15:eb:7a:
         e8:35:50:90:aa:30:3d:24:3b:21:be:2d:fc:9d:b5:71:87:e2:
         d1:c9:86:ad:a5:7e:04:88:cb:48:c8:49:06:bd:bd:e9:1b:bb:
         9d:fc:30:d2:5e:80:f5:66:54:70:16:64:11:f4:ab:92:00:4f:
         83:9c:07:74:8a:83:fd:87:f6:14:57:17:16:18:15:1f:ad:2e:
         49:0c:f7:bf:ce:b5:c8:92:33:9d:92:59:60:84:3a:e1:64:ef:
         b0:24:07:fe:09:67:fa:f2:3a:d4:81:1f:d2:f0:44:6a:b0:c7:
         99:3d:91:f9:61:59:ba:3b:aa:0f:ec:0a:dd:da:cf:f4:8c:59:
         ad:b4:89:cc:43:4a:f4:3e:32:1f:b0:1e:1c:86:44:88:62:92:
         a0:1b:05:73:38:53:18:02:6f:3f:c8:18:e5:82:18:ea:ee:ce:
         24:b2:d6:5d:46:c7:3b:ad:9b:b3:57:1a:83:0e:c4:09:c0:67:
         a4:ca:ed:33:f3:dc:10:0b:d0:0f:84:cc:f4:7c:ec:08:be:c2:
         d9:11:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:40 2026 by rpki-client