Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File:                     ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier:          d1ThXA2fBWFEXugFLGQ0jV7PrqXBMUEzsjaw0krjSe4=
Subject key identifier:   F7:47:74:92:FE:9D:8D:5C:99:AC:14:E3:B6:6B:26:E7:3C:A5:D3:74
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer:       /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial:       019FAB633CEBF60AF2D68FF07F4627C39016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 01:00:35 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:35 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:35 +0000
Files and hashes:         1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=)
                          2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=)
                          3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=)
                          4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: uzITuqjHFdGtX+cueplQqrpDF4tJyU7JNo70BWmobF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:3c:eb:f6:0a:f2:d6:8f:f0:7f:46:27:c3:90:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
        Validity
            Not Before: Jul 29 01:00:35 2026 GMT
            Not After : Jul 30 01:00:35 2026 GMT
        Subject: CN=f7477492fe9d8d5c99ac14e3b66b26e73ca5d374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:22:61:5a:c9:05:0c:4e:ca:20:df:1a:a8:
                    d7:c5:8a:ce:5e:6d:27:95:34:a1:06:c5:8d:15:51:
                    c7:24:e6:d0:ef:a6:08:f9:9e:cb:b1:b7:cc:37:e6:
                    6c:b9:78:02:4e:09:af:fe:91:fe:1b:63:40:fc:8e:
                    c9:38:d5:56:24:aa:18:eb:0a:a2:6b:86:7e:6b:89:
                    81:d3:a2:d9:6b:f3:1b:5d:9a:b4:24:9e:c3:7f:7a:
                    62:7a:e1:f0:b2:af:5d:7e:87:56:ab:13:fc:9a:63:
                    ef:dd:fc:70:6e:44:f7:05:8f:be:84:db:9b:92:de:
                    76:29:00:a5:44:a1:17:41:79:f0:cb:fa:fc:12:31:
                    ce:53:c6:2b:09:0a:51:96:9e:08:4f:8a:50:df:63:
                    5b:5e:a4:df:9d:4b:09:55:04:d3:d8:04:10:2b:39:
                    2b:90:ee:ff:bd:d8:08:31:22:50:92:5b:70:89:3e:
                    83:03:e4:8c:c6:be:bf:2a:dd:c5:42:83:39:d4:75:
                    96:17:77:15:93:ff:b5:35:49:2e:93:8e:16:b7:68:
                    35:0b:60:c1:71:2f:9e:8b:3a:ff:9a:e3:46:10:0d:
                    c4:51:35:39:be:71:f0:f4:0c:17:f5:82:90:07:de:
                    15:42:52:7d:d5:d2:5d:ce:d2:8d:15:fa:20:a7:95:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:47:74:92:FE:9D:8D:5C:99:AC:14:E3:B6:6B:26:E7:3C:A5:D3:74
            X509v3 Authority Key Identifier:
                keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bd:9f:b0:b3:86:05:c5:7c:55:13:77:24:f3:f2:01:d6:8f:
         c0:62:4a:08:05:9b:9d:70:66:5e:b7:72:53:c0:2b:3a:7d:b0:
         a5:0f:16:73:39:1d:52:eb:33:6d:1e:fb:63:d8:e0:96:f1:6f:
         1f:f0:7c:07:5f:3f:54:3a:da:20:cf:ab:e0:81:c5:70:af:ad:
         1f:dd:83:2c:2a:61:98:c5:ae:36:8e:fc:9c:7e:9d:ea:28:b7:
         ee:3e:a5:d6:d5:cf:29:07:2c:74:8f:3b:10:5d:d9:a9:b3:cb:
         51:1b:94:2c:6a:4d:b7:f5:f2:2a:46:3f:af:a2:11:4e:61:15:
         65:ba:b2:8b:51:33:0f:49:2a:0c:38:9f:f1:72:de:04:1b:0b:
         c6:a3:72:67:78:a5:8d:bd:da:88:b4:d9:13:c5:89:c8:58:aa:
         5b:f6:f9:94:db:ca:fd:01:a9:bf:93:a3:2e:21:f3:28:f6:d1:
         8f:95:cf:17:4e:04:42:38:ed:00:a6:40:86:ad:b1:3d:a1:a0:
         d3:d1:c7:4e:d1:24:d5:54:b0:9c:a9:ab:42:3c:95:b5:42:89:
         e8:77:71:f2:f4:ab:14:d5:3d:03:f0:62:3e:55:4b:85:55:69:
         6f:bf:ed:76:b6:2a:4e:0e:74:7e:c9:4e:fa:9b:df:e7:17:31:
         bf:a6:60:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:38 2026 by rpki-client