Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File:                     5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier:          vof7X2BVfxpX2OOg0FijKP/PDb7AB4+IWrOhHiwiWR0=
Subject key identifier:   E4:F7:78:69:A5:F8:A6:CA:DC:1D:8F:C6:6A:EB:C6:7D:2A:34:21:1C
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer:       /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial:       019F8FB5955A7DF6BA36DD100D95387546FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number:          1007
Signing time:             Thu 23 Jul 2026 16:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:09 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:09 +0000
Files and hashes:         1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: 5ceUfTE8IHmKJuT/JQH9T58ppcY5Pv4SD3a+32Sm0vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:95:5a:7d:f6:ba:36:dd:10:0d:95:38:75:46:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
        Validity
            Not Before: Jul 23 16:01:09 2026 GMT
            Not After : Jul 24 16:01:09 2026 GMT
        Subject: CN=e4f77869a5f8a6cadc1d8fc66aebc67d2a34211c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d3:de:36:d9:fa:30:7c:ad:17:0a:bd:3f:ae:
                    60:89:63:a9:1c:03:f4:cb:f0:b3:0e:5b:5e:f3:08:
                    96:56:17:68:a2:f7:d1:36:76:f2:ee:67:e8:19:d0:
                    dc:64:2a:0f:93:2f:da:e8:e2:29:92:7c:45:a9:b6:
                    4c:62:48:a0:5e:e5:a3:27:fb:22:c2:1c:5e:23:05:
                    17:56:f1:83:07:fb:8a:f8:7f:f5:4e:6c:ef:a5:dc:
                    0a:69:84:cb:d1:5d:63:01:b9:ba:63:93:dc:f0:55:
                    3e:62:11:30:08:7e:2b:49:db:bd:1b:f5:2b:99:ee:
                    1d:26:77:52:3c:ba:5e:70:fc:01:ee:a6:a9:f8:44:
                    41:04:64:1f:ec:eb:92:16:1b:75:fa:cc:2f:70:9e:
                    a3:0b:65:98:01:cc:59:c8:cc:0c:ef:89:fb:9b:ec:
                    c1:6c:0d:82:b4:a0:ce:78:da:47:4d:e5:22:6d:e4:
                    58:1b:9b:b2:8b:ef:e8:4f:4f:7a:46:b9:27:18:63:
                    9b:a7:3a:79:8b:64:71:ca:48:93:ae:f4:14:00:4f:
                    89:a9:b5:db:4a:5e:f3:d6:0e:78:bc:b4:27:bd:d3:
                    5b:53:8a:a8:65:3f:81:0b:e6:47:93:dd:b4:11:66:
                    dd:fd:8f:8d:1a:07:7c:cf:5d:c3:77:27:8b:84:9d:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:78:69:A5:F8:A6:CA:DC:1D:8F:C6:6A:EB:C6:7D:2A:34:21:1C
            X509v3 Authority Key Identifier:
                keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9f:5b:e0:59:d4:11:7c:d7:9e:55:59:bb:9b:aa:04:ec:53:
         9f:b7:21:bc:e9:fe:6a:c2:8b:88:17:a1:3c:58:df:0c:16:b3:
         be:a4:b3:74:7a:ba:86:08:86:81:5d:b4:6c:f1:9c:da:fb:3b:
         ed:83:d4:91:89:7b:ef:49:1f:5a:54:ef:45:28:05:03:f4:a5:
         64:b0:94:ed:46:93:8e:26:df:b6:70:d0:ec:33:3c:7c:27:ad:
         62:63:17:0a:be:41:43:2e:6e:d1:f4:02:7d:7d:5e:91:73:a0:
         d3:a9:52:89:c8:cb:1f:9b:6e:b4:31:f6:93:55:b0:5f:20:a8:
         1a:d8:48:e2:24:4c:36:1b:5c:7d:61:ec:ec:f0:8e:31:87:2e:
         a3:ed:32:82:71:48:f7:fc:eb:32:2d:ab:d0:be:d6:8a:77:9e:
         c6:52:c8:86:95:7b:04:27:9b:2b:31:73:4c:69:5c:6b:0b:f5:
         b5:4c:f1:42:68:ca:29:14:14:9c:98:bb:dd:67:9c:73:93:2d:
         3c:b9:c2:0f:af:ad:86:eb:82:3f:d9:8d:0f:3b:32:24:26:fd:
         49:50:10:da:77:1a:26:34:1a:85:c3:f9:c6:2f:3a:b4:c0:e8:
         c1:0b:64:84:24:2e:60:34:b5:a0:e5:a5:ea:d5:83:be:02:78:
         91:3c:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:02 2026 by rpki-client