Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File:                     5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier:          1nZ0NGxTYKsxi3L2NRv4NJrSg9y2Nfb0N2iuM4MFIC4=
Subject key identifier:   73:23:64:35:11:F1:16:40:CE:5A:E8:3E:13:B9:CD:26:A1:62:EA:B2
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer:       /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial:       019F90FF33E377F2374AFBC1DEAD3089791C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number:          0CE3
Signing time:             Thu 23 Jul 2026 22:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:11 +0000
Files and hashes:         1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: y9N0yrCwcyplTFZ1fmbmyOI3PhGFeR5xq84zqNrh+d8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:33:e3:77:f2:37:4a:fb:c1:de:ad:30:89:79:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
        Validity
            Not Before: Jul 23 22:01:11 2026 GMT
            Not After : Jul 24 22:01:11 2026 GMT
        Subject: CN=7323643511f11640ce5ae83e13b9cd26a162eab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:86:d5:e8:7e:31:3f:37:d9:86:b3:81:ee:
                    c1:a9:3e:1e:9c:e7:18:1e:52:08:cd:7f:af:57:f1:
                    c6:70:f6:6b:c6:a0:e7:b5:93:81:6d:30:27:f7:3e:
                    07:97:11:1a:27:a9:38:4a:30:3c:d3:ed:23:3e:26:
                    85:df:c4:73:f2:de:7a:d6:4d:71:4a:e1:57:85:52:
                    46:ac:5e:8e:71:9c:5e:8a:38:8c:71:e0:5a:ef:68:
                    12:28:99:21:77:38:88:9c:79:6a:0f:95:10:a0:76:
                    fd:16:f6:25:08:aa:87:7e:55:05:bc:b9:4a:b0:e3:
                    32:e9:5a:c3:9a:15:46:98:ed:83:dd:9b:38:7f:eb:
                    d3:7a:34:73:38:2d:ae:e3:96:f5:52:28:f6:99:ed:
                    31:2e:81:c7:e1:b4:8c:3e:5c:c9:3c:4b:66:9f:26:
                    74:eb:ee:f3:2e:b7:83:61:d6:65:a8:80:03:8a:c6:
                    ca:05:23:ed:8b:5a:c0:ca:4e:80:ff:b4:de:68:84:
                    51:a0:44:4c:ac:df:e4:eb:57:51:8e:5d:77:32:72:
                    4d:da:ff:02:29:2b:99:6b:e2:ae:33:ff:cb:45:79:
                    ef:a2:7f:26:4a:f3:45:a5:72:51:72:93:99:46:7c:
                    c3:ad:b7:78:f1:b0:30:62:0d:92:94:2a:88:7e:be:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:23:64:35:11:F1:16:40:CE:5A:E8:3E:13:B9:CD:26:A1:62:EA:B2
            X509v3 Authority Key Identifier:
                keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4f:b0:e0:11:cb:db:db:c1:56:94:c8:ac:62:ea:c2:d8:79:
         ca:e9:f3:a6:22:91:9c:44:f2:60:d2:ba:49:39:4e:92:b1:49:
         39:47:ff:84:8d:59:85:5c:41:cc:14:ab:59:67:e4:e2:7e:0e:
         88:a7:ca:af:64:23:66:c1:d0:66:ee:bf:6e:44:48:df:ce:19:
         70:f1:06:10:87:cc:d1:5c:15:13:89:ff:71:ba:2a:89:0e:c5:
         b6:a7:82:30:e1:7f:ec:49:e0:30:92:33:e8:c2:97:75:f7:bc:
         35:65:4b:67:71:e1:ec:25:41:3a:b5:9b:2f:aa:c2:6a:6b:cf:
         0f:eb:e9:dc:a6:56:81:e4:ee:20:ad:a8:0a:a2:b8:1d:3b:2d:
         90:2a:05:bf:7e:91:65:81:80:dd:60:e0:da:61:eb:cd:dc:ce:
         2d:be:45:63:dc:79:1d:ba:d0:46:db:c5:b4:ad:a0:3f:b2:fa:
         33:fe:13:b3:f4:b9:ad:cb:7a:42:9e:62:9b:ea:88:c0:89:81:
         6b:52:03:f0:2a:7a:bb:cd:f0:67:67:23:f7:d2:92:0a:db:09:
         55:fa:6b:87:e5:4c:02:18:46:57:b9:27:19:94:84:84:42:63:
         63:dc:47:5a:48:2e:7f:cc:6f:0d:03:d0:76:1f:16:31:f0:f2:
         40:ac:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:18 2026 by rpki-client