Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File:                     5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier:          m9CVuOUUORMOqV6T80cSewZgo7TIufPRYzf5l9i1muQ=
Subject key identifier:   F5:C5:04:23:89:9F:A1:AB:F2:68:26:89:A4:F4:7B:E2:69:89:56:61
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer:       /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial:       019F92B6A1E92F0E7F25EE7494AC48CD26BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 06:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:10 +0000
Files and hashes:         1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: L1TAsxuRWiIZfNwZ/S3FrEqMynuiBhGK8c+PvZfUWwE=)
                          2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:a1:e9:2f:0e:7f:25:ee:74:94:ac:48:cd:26:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Validity
            Not Before: Jul 24 06:01:10 2026 GMT
            Not After : Jul 25 06:01:10 2026 GMT
        Subject: CN=f5c50423899fa1abf2682689a4f47be269895661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:4f:e1:6a:f0:f1:df:d7:4e:96:f1:7c:bd:
                    70:88:c0:61:63:52:34:68:b9:a8:39:1a:e7:bc:d1:
                    f1:86:b3:61:4e:29:c7:72:4f:0d:f8:5a:39:fa:e0:
                    68:5a:2c:71:0a:02:92:97:63:ac:0f:b4:27:34:f0:
                    20:e0:ae:87:84:1b:94:e8:14:34:dd:ff:a2:55:83:
                    8c:60:73:f9:be:d8:20:8c:b3:58:c3:36:3d:5e:52:
                    8d:13:9d:ae:5d:9b:e7:f3:18:94:1a:31:1b:f6:0d:
                    bc:f6:cc:e0:21:70:70:b5:c2:8a:3a:13:d7:6c:97:
                    b2:86:35:dd:84:5c:45:f4:35:98:a8:6a:fa:ab:e8:
                    99:83:5d:09:1c:7b:23:0c:12:2f:9c:8c:55:68:c9:
                    13:96:7c:a8:65:a9:4c:cf:cc:e5:6c:d3:47:1b:26:
                    04:9b:0b:e0:79:6c:58:95:6a:c2:71:1a:2f:ac:b3:
                    65:63:67:9b:6c:c1:c0:7e:ac:a3:73:55:aa:a6:eb:
                    45:38:79:98:01:c8:ff:38:cd:2f:c8:8d:c4:77:85:
                    8a:47:b1:e0:61:04:1d:5b:0d:72:a8:d5:05:72:65:
                    fe:c8:ef:78:c5:e4:9d:95:d1:be:1f:c3:28:20:a5:
                    6a:02:4a:2c:6d:d9:b9:ca:05:b9:79:c1:29:37:b0:
                    f0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:04:23:89:9F:A1:AB:F2:68:26:89:A4:F4:7B:E2:69:89:56:61
            X509v3 Authority Key Identifier:
                keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:72:d1:71:0b:c5:6a:d7:7e:5c:56:cc:e5:6c:22:d5:30:
         28:c9:09:3e:b8:c2:9d:24:4e:97:95:df:f1:dd:da:e0:7f:c7:
         13:0f:71:ce:31:dd:03:0f:08:fe:76:6a:8b:a0:6b:84:6d:db:
         a9:2b:da:b7:d4:c0:5f:bc:a2:4b:86:09:92:b5:80:f0:69:54:
         8d:13:04:2f:11:f1:45:ec:6a:60:d2:78:4d:4d:4d:30:89:b7:
         b7:32:db:68:d3:ae:50:59:75:91:02:d8:10:c1:9a:e2:1e:d2:
         01:96:4d:de:b6:0f:3d:7d:ef:0d:f2:3a:26:7d:3b:ad:40:06:
         58:a5:7e:c2:ba:52:88:5f:07:b7:8b:de:b5:16:c9:a7:3f:dd:
         63:9e:aa:1b:b5:c4:b7:66:13:ad:dc:25:84:8c:87:ef:9f:81:
         28:2f:68:22:4c:92:06:1e:8c:22:74:08:82:63:62:f0:08:a6:
         cb:d2:5f:fa:13:ef:bc:ff:9a:65:90:8e:a8:e5:f0:68:0e:c7:
         69:67:1d:f5:20:7c:08:1d:cd:99:ff:1d:fe:32:81:e2:47:04:
         6a:09:27:24:33:b0:84:a2:58:72:53:51:e6:bf:ae:c3:0f:04:
         42:f2:d3:79:25:17:08:2c:95:1c:0c:15:40:16:e1:d3:9f:6e:
         aa:cf:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:07 2026 by rpki-client