Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          X7R/CWqb3F7f/POpP7whCW8CRieDikkM86zdUmsrr0o=
Subject key identifier:   AE:77:FE:B9:EA:39:1F:A0:9A:3F:42:40:68:E1:DC:57:95:F0:4E:DC
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       019FA89951C834507EB1F1E763E071C2B8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          12C1
Signing time:             Tue 28 Jul 2026 12:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:47 +0000
Files and hashes:         1: 31__Ljvdh5fFWa-BF1FmCzwwDW4.roa (hash: N9hIOu5MLbrZZOjfnys+h1KWiRyVn1BnWX+ujPnZveQ=)
                          2: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: j6Ub3p6kbhJUPcElfMFdWfApZn6r1qy2hu+evYYKIEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:51:c8:34:50:7e:b1:f1:e7:63:e0:71:c2:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Jul 28 12:00:47 2026 GMT
            Not After : Jul 29 12:00:47 2026 GMT
        Subject: CN=ae77feb9ea391fa09a3f424068e1dc5795f04edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:0d:2a:98:e2:d4:20:cf:4d:ae:ed:15:b4:
                    5a:d7:6b:ab:a2:f1:3d:9b:a8:da:10:47:e6:3b:0d:
                    76:77:5a:38:33:9b:30:1b:a5:34:6e:6d:16:9a:26:
                    6b:72:1e:22:3a:b7:a0:40:5b:d1:e0:cb:8b:f2:ec:
                    ab:31:84:55:26:0f:1a:24:40:11:cd:d7:af:1a:ff:
                    af:a6:e6:2e:d8:be:6c:4c:3a:e4:a5:3a:9c:90:2c:
                    e0:bd:28:d3:e8:eb:c0:0f:76:85:0c:40:69:60:bf:
                    38:76:28:3a:74:68:5a:73:d7:22:7f:94:c8:e8:e6:
                    1f:bf:23:49:cd:5f:b0:ff:e1:a8:75:4b:f2:13:8d:
                    a2:37:8f:e1:56:46:d0:19:21:3b:b3:07:8a:23:89:
                    6c:68:07:5a:28:33:d5:e8:80:2a:4e:f3:37:bd:a0:
                    7a:09:a3:76:fc:e4:85:ab:2c:0b:0c:54:00:3d:09:
                    5e:b8:d7:67:6b:ef:37:96:6a:59:4b:04:7d:6f:13:
                    41:aa:f7:1e:b2:30:00:97:ac:6e:1f:7e:40:75:22:
                    eb:d6:1d:27:b2:e6:7a:50:3c:24:7a:e4:bb:9f:82:
                    ed:8f:61:ff:8c:66:1f:f2:9e:b3:9d:fd:7c:72:83:
                    32:80:3c:12:58:ef:26:8c:aa:5b:ab:33:23:2e:34:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:77:FE:B9:EA:39:1F:A0:9A:3F:42:40:68:E1:DC:57:95:F0:4E:DC
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:58:65:21:44:4b:57:cf:4b:c3:27:25:d1:70:80:fe:4e:
         8b:f0:1a:1d:89:81:ab:6a:e2:43:06:cc:a1:75:63:4e:88:9e:
         25:82:05:e8:47:6b:a9:eb:47:b7:6d:99:78:f0:a9:bc:20:63:
         3c:d1:60:26:13:5e:c4:a4:ba:62:08:e7:59:9a:b9:b2:0c:b3:
         56:09:d1:24:37:9f:a2:5b:84:1c:83:99:8b:45:02:e0:d5:65:
         ae:96:d2:7a:9b:ee:c8:09:77:ad:f3:de:05:6e:3d:b8:45:fa:
         bb:94:7d:fc:ac:e7:a0:2a:08:59:6f:1e:5a:b3:24:e7:31:c3:
         cc:52:39:06:68:68:3b:79:a2:da:e7:c4:af:e0:6a:06:5d:ff:
         63:94:9f:3d:86:cd:99:0e:b2:a6:a7:9d:13:08:e3:41:9b:97:
         6f:60:91:6d:56:af:68:eb:3f:cd:7f:28:41:a0:69:85:b5:bf:
         cc:01:56:8a:19:53:b9:57:9e:19:b1:ce:ee:34:81:af:f3:ac:
         66:07:2e:a3:41:6c:d6:ee:44:7d:34:35:65:cc:08:67:b6:87:
         cd:ef:ab:9e:ad:6f:27:0b:e8:46:6e:7f:5e:8e:f1:41:34:aa:
         9b:a9:9e:21:ff:97:45:59:ad:d9:65:8d:11:cc:03:cd:ad:c2:
         c8:ee:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:26 2026 by rpki-client