Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File:                     e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier:          ar8xaZEB67Nar1dWtujE0kzAjqzAYJ5/QsxTV0+GV9M=
Subject key identifier:   5A:F9:F7:04:9F:AD:0F:3D:12:7A:8E:FD:B3:6A:4C:B5:14:FD:CC:F6
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer:       /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial:       019D28BBB9F32B7C614F9272A7F973D27B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number:          0680
Signing time:             Thu 26 Mar 2026 06:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:24 +0000
Files and hashes:         1: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: Z4TWLHxXNeGQDFN5qB/Twq1HqJnKVwKZG4rYwGLSAHU=)
                          2: yn22QITeYuSiQ4etW04NOKsyiwg.roa (hash: Hhng+JY/6IvIYBVuvykD/FKUSe2wsbGUoRKGJNpfZo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:b9:f3:2b:7c:61:4f:92:72:a7:f9:73:d2:7b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
        Validity
            Not Before: Mar 26 06:01:24 2026 GMT
            Not After : Mar 27 06:01:24 2026 GMT
        Subject: CN=5af9f7049fad0f3d127a8efdb36a4cb514fdccf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:ef:d7:c8:a1:40:1f:17:6e:32:0d:83:d5:
                    72:0e:fe:e6:99:58:bc:d2:0c:f5:ee:06:d0:03:fa:
                    29:66:d4:a7:33:5e:85:6e:4b:ad:42:dc:39:fa:44:
                    ea:cb:31:7e:91:68:cc:9e:4d:93:47:e2:40:e0:9e:
                    ae:1c:eb:eb:fe:38:3b:9c:d9:72:4a:d7:21:e4:2f:
                    08:7e:e6:13:41:da:92:63:14:9a:be:27:8d:b4:1d:
                    e2:bd:80:e4:65:33:26:d8:47:08:e4:a9:22:47:3c:
                    0a:2e:7d:34:fc:48:d7:64:82:81:7f:9c:5d:be:33:
                    5b:63:24:f6:fa:a7:6c:d1:d7:56:33:ee:84:92:f3:
                    82:bf:6c:55:aa:1f:9c:6f:66:d5:57:b3:e5:15:f3:
                    af:78:65:11:70:79:9c:8a:d5:ff:48:b1:c8:ed:15:
                    a0:30:ea:fe:c3:a3:41:8c:5c:4c:c6:e2:06:aa:a0:
                    0d:93:8e:20:3d:f9:28:7d:09:44:79:00:85:4d:e5:
                    b9:4b:3b:01:19:46:f8:5b:80:76:33:26:ac:b1:fa:
                    66:4b:e6:fc:69:d7:ed:14:0f:e1:87:53:1d:de:ee:
                    e2:51:a9:97:ea:46:e2:f4:f2:f8:3f:e6:38:0a:ad:
                    f4:aa:5c:b8:be:0d:e1:e8:74:58:7c:fb:ef:95:94:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:F7:04:9F:AD:0F:3D:12:7A:8E:FD:B3:6A:4C:B5:14:FD:CC:F6
            X509v3 Authority Key Identifier:
                keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:da:79:9e:51:15:d0:10:bd:60:f5:6f:00:2a:8b:14:ff:
         2d:60:5c:c9:37:6c:f6:1a:df:eb:e1:ba:6c:0d:11:4e:2c:d1:
         c3:e4:4b:bd:8b:04:a5:1c:1d:98:b1:c3:b0:4d:df:f3:9a:a1:
         27:38:d7:8b:0e:34:23:89:bd:8f:e3:6c:f2:3c:b2:63:40:26:
         58:0f:ca:f9:34:0c:21:f5:41:54:a4:e5:75:1e:c9:d8:0a:76:
         69:15:73:49:5e:17:6d:c9:a5:2d:71:79:70:c0:d6:7d:96:e8:
         0c:b2:01:a6:db:4e:4c:13:69:2c:7e:73:aa:2f:a9:2c:e1:ac:
         da:5c:3a:bf:00:22:e2:98:ad:aa:2b:83:af:25:8a:9a:f8:93:
         a4:18:a6:2d:b0:08:a9:e1:ef:34:d8:22:1b:7a:45:83:c1:6e:
         95:6a:6d:30:86:13:d5:e1:8c:dc:e1:91:62:1c:ac:14:2a:54:
         36:32:4b:5e:e4:d2:4e:03:6b:32:39:e4:1c:96:cc:23:84:1c:
         8a:ed:c4:c2:45:cb:e1:a4:ce:9a:14:f6:ef:df:24:0e:0f:9b:
         30:57:91:85:a9:db:e6:2c:9d:4d:83:48:d7:3e:b0:81:ed:2e:
         ca:be:3c:d9:34:11:65:eb:df:78:5e:63:93:de:6f:98:88:65:
         ab:16:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:13 2026 by rpki-client