Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File:                     5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier:          qjh/24WyStmPN+tLKc6yKqPXPVr0SQnAiVvGeBV5BaA=
Subject key identifier:   73:DE:04:FD:8A:B6:60:41:66:49:B3:0A:61:04:71:AB:31:68:CD:9D
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer:       /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial:       019F90230DF8BD6364CFFF13E8912D03F161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number:          1754
Signing time:             Thu 23 Jul 2026 18:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:44 +0000
Files and hashes:         1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: as4zWtCnbfEHrANmAUt97I62CngkV24AQjgVW66rThI=)
                          2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
                          3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:0d:f8:bd:63:64:cf:ff:13:e8:91:2d:03:f1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
        Validity
            Not Before: Jul 23 18:00:44 2026 GMT
            Not After : Jul 24 18:00:44 2026 GMT
        Subject: CN=73de04fd8ab660416649b30a610471ab3168cd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:22:bc:d5:67:bb:eb:b9:84:05:48:3d:c1:20:
                    65:c4:5d:98:a4:85:ab:d4:a0:65:64:d1:11:24:84:
                    37:9a:a8:42:75:b2:e5:9a:11:a0:3c:43:dc:40:97:
                    06:37:05:92:72:2c:49:85:d2:0d:40:00:41:6b:ca:
                    9b:56:f4:e8:5b:7e:3b:31:06:e4:89:1b:b7:61:b5:
                    ed:44:f8:0a:04:08:de:c6:91:75:f5:25:69:e1:b5:
                    08:e0:3c:6a:10:d3:93:f5:ac:cf:71:34:59:5e:cb:
                    bf:08:a6:90:af:14:d0:cf:7b:36:c4:3f:43:e3:a1:
                    a4:70:09:99:36:aa:9b:90:cd:2d:22:00:27:2d:0f:
                    98:c4:5f:a6:c2:6d:c0:9d:c5:4c:d0:90:81:d6:56:
                    5b:56:b1:4d:ff:c1:e1:f1:90:46:2f:62:5a:9c:bd:
                    e0:5b:64:be:a1:2f:a8:31:7c:f0:45:68:3c:79:b8:
                    62:76:31:c7:59:a8:05:2d:ef:54:45:eb:ca:f4:d2:
                    f1:b3:e4:cc:25:31:cb:71:b5:aa:55:22:58:86:b1:
                    e9:bd:18:51:c2:78:54:82:8f:03:2b:fa:4e:62:9e:
                    2a:2e:2a:bf:b6:ae:02:41:92:d7:b3:4b:b2:ad:3e:
                    07:ee:b1:17:b8:d7:60:50:4f:06:f2:12:24:2f:13:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DE:04:FD:8A:B6:60:41:66:49:B3:0A:61:04:71:AB:31:68:CD:9D
            X509v3 Authority Key Identifier:
                keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fd:38:29:4f:e7:b6:97:0b:93:93:61:c1:48:5c:e7:6c:5f:
         f5:b1:6d:13:6d:98:ba:21:9e:64:16:0e:8b:a8:9c:9a:16:88:
         9b:49:ff:a8:91:f3:05:2a:81:b1:33:e3:28:5d:6f:3a:79:d5:
         ee:32:da:2f:82:d7:4e:d8:b5:17:91:71:8d:a0:64:57:65:c8:
         c7:f4:e4:e1:ba:5c:fb:38:3d:d1:b0:aa:ae:55:0f:aa:84:05:
         17:42:2c:6e:de:da:86:b0:06:9b:3a:b9:de:f1:1a:4d:44:dc:
         6e:d2:0d:4a:e4:ca:1f:14:38:08:a9:be:98:6d:43:64:e1:19:
         39:e7:b8:26:95:7a:8a:b4:e2:79:aa:9b:9d:6c:c7:37:1a:a0:
         ec:dc:71:85:b6:2f:af:9f:67:52:c6:75:c7:09:85:eb:2c:81:
         5d:03:74:a1:f4:7a:4a:ae:a1:c7:3f:bd:bf:75:1c:7a:ed:a7:
         fa:23:88:e9:4c:ca:a9:eb:d1:f4:ce:d3:eb:cf:e5:dd:b2:80:
         4d:f3:3c:d5:e6:03:08:14:ba:32:3d:66:2e:eb:c7:8d:53:4f:
         a4:7e:b2:1c:fa:91:2c:2b:e9:eb:3f:7c:98:6f:3a:5d:25:fc:
         7c:0b:de:43:a2:01:d6:a9:f1:33:72:2a:e6:7c:39:a6:0b:e6:
         44:4a:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:37 2026 by rpki-client