Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File:                     5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier:          +fgss7EskXt0dKliSfRA8icoxtq3TkW4U5a59g44nqo=
Subject key identifier:   6D:46:FF:08:4A:AF:78:02:0C:A1:39:95:CA:E5:19:B9:7B:77:83:5B
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer:       /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial:       019FA7F4A0A779028952FB668F104F125F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 09:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:54 +0000
Files and hashes:         1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: CNitGMUtp//GgpHVBQiTgbUJmMrMcGHJ9HAXnnL2Mgs=)
                          2: DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa (hash: FTS7rWAdFS8UyAMp19YH0zdu88+Df8yK+Znwjqplx54=)
                          3: sA6Qf2_ToIyGcsbWCFpl1ww3zYM.roa (hash: wfbilCSxn7pd6CKUaeLQcmM0OSGs3jIpHSCViiEgaxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:a0:a7:79:02:89:52:fb:66:8f:10:4f:12:5f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
        Validity
            Not Before: Jul 28 09:00:54 2026 GMT
            Not After : Jul 29 09:00:54 2026 GMT
        Subject: CN=6d46ff084aaf78020ca13995cae519b97b77835b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:ab:7f:b7:d6:fc:9e:49:a0:ec:37:cb:ba:
                    f6:6b:56:59:29:bb:ff:6b:f1:e6:2a:12:c3:c5:cd:
                    c6:f9:83:4c:2b:29:a5:f1:fd:a3:54:5c:e1:f0:8b:
                    ba:b0:dd:8d:46:0c:4d:ea:52:d6:06:f9:f2:69:37:
                    ea:9e:ce:95:56:df:11:bc:9c:51:78:8d:d8:7b:42:
                    51:1c:30:65:4b:d4:18:79:6b:49:42:f7:97:f5:bf:
                    74:c9:3f:67:b5:e3:b3:4c:b2:03:13:67:c5:a7:2d:
                    9e:93:fc:80:4a:73:1d:57:b6:46:7c:0b:e6:01:23:
                    9f:23:91:fd:70:c0:1e:c4:b6:7d:68:ff:03:d2:a2:
                    88:44:a0:57:07:2e:01:86:5f:29:fc:4d:37:d7:20:
                    af:cf:aa:91:5c:8b:2c:a5:fb:b8:99:27:df:54:bd:
                    cf:a4:15:fe:55:3b:92:3f:ec:c3:bc:cc:b4:76:7d:
                    28:d5:8c:13:81:c7:40:ed:e6:21:f9:ab:09:45:05:
                    9e:6e:3c:04:cd:e5:c8:db:35:e9:f3:ef:ce:b6:42:
                    17:3b:51:c5:7b:d9:fa:41:38:a0:db:52:71:ab:d3:
                    82:9b:63:f1:b3:b3:82:99:7f:a1:d1:64:3e:c9:d3:
                    07:dd:04:b7:6a:e5:2d:1d:c9:c9:85:7f:fb:11:d8:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:46:FF:08:4A:AF:78:02:0C:A1:39:95:CA:E5:19:B9:7B:77:83:5B
            X509v3 Authority Key Identifier:
                keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:bd:44:61:2f:ab:29:45:e4:6e:43:6d:e7:a8:ec:4a:18:
         51:d5:2b:13:b7:c1:c0:e8:68:d3:8c:57:a8:4e:0a:53:a5:b4:
         97:02:bd:1a:50:1f:bc:33:ce:30:4b:03:27:a7:d4:8c:4c:a2:
         48:f4:97:95:5c:21:4f:7e:95:6c:17:1c:c3:2d:a3:60:f1:bf:
         88:ff:b7:1f:a1:e1:c8:c6:65:bb:65:ec:95:09:9a:61:ec:f8:
         dc:c3:20:37:b2:5d:29:dc:45:3b:f8:33:60:a7:93:5b:4b:53:
         71:eb:5c:24:29:e5:ec:b0:97:56:23:f1:57:2a:a5:e4:e6:63:
         09:e1:7a:4a:b0:62:19:75:a1:9f:23:7a:d9:13:70:6f:3c:d7:
         ad:28:2c:77:40:4c:18:af:50:c4:bc:60:c0:98:0b:3e:32:9c:
         5f:db:50:b8:dc:6d:09:74:a5:aa:4d:ca:e6:68:c5:c9:5f:bf:
         18:5f:cb:02:36:3f:08:60:cc:43:78:4e:d4:df:34:24:96:1b:
         7a:f9:51:4f:f9:9e:84:fd:69:b0:ac:4e:a5:95:2b:f6:2e:1d:
         0e:d7:be:da:af:e7:e7:54:e9:86:98:17:9a:6d:3c:ec:d7:d9:
         38:85:09:93:05:d0:6e:02:50:56:cd:d0:ff:27:b9:96:aa:ff:
         fc:0e:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:18:35 2026 by rpki-client