Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File:                     5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier:          bHerPWYSCnT6B3MCyVj86r1RUbjUY84eaXR4FfGsItk=
Subject key identifier:   22:1C:3E:6E:EE:7F:3F:18:D0:C5:91:3B:5A:0E:69:3E:70:46:4D:E0
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer:       /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial:       019F9023720B90D41E8FD0B7AEC3F2DF62EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number:          0BD5
Signing time:             Thu 23 Jul 2026 18:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 18:01:09 +0000
Manifest next update:     Fri 24 Jul 2026 18:01:09 +0000
Files and hashes:         1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: kzwG/Huj0UgZ1xFp9T8Blh3nEpFRObw3leh71/DF8Ow=)
                          2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:72:0b:90:d4:1e:8f:d0:b7:ae:c3:f2:df:62:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
        Validity
            Not Before: Jul 23 18:01:09 2026 GMT
            Not After : Jul 24 18:01:09 2026 GMT
        Subject: CN=221c3e6eee7f3f18d0c5913b5a0e693e70464de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:ce:0d:de:bb:8a:0b:9f:9e:e2:5c:c7:91:
                    79:cf:d5:e0:a0:f5:6d:0a:78:6e:58:1e:75:26:03:
                    6e:2f:85:be:fc:13:0a:55:90:e5:5b:84:48:17:52:
                    50:a1:9f:9d:44:90:b4:d1:85:da:8f:bd:ca:73:2a:
                    dd:27:4f:e1:b4:aa:25:9f:db:b3:a6:03:b9:3b:f2:
                    5a:bf:35:36:39:a3:bd:fd:49:0a:e9:d3:4f:2a:3b:
                    f9:29:67:e3:6b:1d:4f:f8:11:68:7f:7a:15:d7:08:
                    a5:05:21:a1:5a:f4:e2:08:ef:67:65:fe:2a:6c:06:
                    86:9c:eb:6c:72:78:44:31:70:cf:82:0d:0b:1f:ec:
                    d5:f0:39:d4:15:b3:d2:ad:bf:c8:33:24:a1:d2:00:
                    ff:d3:a0:31:cf:75:56:b1:3a:9d:6f:15:d0:ba:2f:
                    01:86:e6:b0:15:2e:5e:23:b1:71:33:2c:ff:ad:e8:
                    52:46:86:be:f4:45:46:26:87:db:f7:b4:7d:d6:35:
                    4e:0b:b0:6e:74:08:f7:35:ef:59:df:c6:21:af:e7:
                    84:7e:5f:1e:ce:15:5f:c8:c8:59:da:2e:de:6b:87:
                    b2:52:81:ce:7f:d9:9e:9a:1e:83:cf:e7:e8:c0:41:
                    60:45:55:cf:45:8e:5f:cf:b9:40:fa:9a:d7:1f:70:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:3E:6E:EE:7F:3F:18:D0:C5:91:3B:5A:0E:69:3E:70:46:4D:E0
            X509v3 Authority Key Identifier:
                keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:87:4e:19:1f:8d:a1:90:77:07:b2:fb:51:f2:b2:77:00:3f:
         28:23:87:17:35:16:50:7b:a6:3c:f6:27:63:bd:98:67:07:5e:
         7c:9d:b9:8a:f0:20:97:f3:41:af:7c:07:94:19:09:4d:2d:8e:
         36:17:e5:da:e3:2e:d9:76:11:7d:73:3a:29:2f:f7:6f:59:01:
         8b:6d:c7:6b:e2:69:16:15:79:3f:f5:57:b0:ff:65:94:0c:5a:
         65:38:62:62:64:03:c2:04:d9:11:60:48:36:5d:9d:59:fb:c0:
         5a:5c:1c:4a:aa:cd:33:8c:ce:c5:ef:ad:06:9e:83:d1:fa:db:
         ca:f7:fa:ce:be:03:49:1b:a4:60:c1:0f:7f:2f:9f:55:b6:cb:
         fe:63:76:14:13:4c:cf:06:e7:27:12:5b:ef:52:2a:61:91:a0:
         27:4b:a7:e4:05:de:0c:de:5d:d7:95:9a:fb:e6:aa:2f:b6:1b:
         cc:a9:2b:18:54:4e:2e:e4:7d:ce:4b:b9:61:88:d2:6c:af:18:
         a3:f8:c5:13:28:5d:d1:7d:5f:ca:00:c6:bb:03:ce:bb:26:a2:
         28:a1:5f:7a:7b:4b:10:58:4e:af:b3:49:0c:32:7e:e5:1e:c2:
         ef:db:ac:76:0e:fd:17:0d:c3:7f:7c:30:19:67:fb:23:8a:e1:
         4f:78:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:41 2026 by rpki-client