Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File:                     5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier:          XSBbn12fHZSL7xcs3aaMrnZSlGa1qUnyCcLJ1R96TcE=
Subject key identifier:   3D:A4:F2:3C:D8:F4:7A:E3:09:29:D0:FA:B4:E7:0E:9B:10:F2:1B:99
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer:       /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial:       019FA974FF238D3C58E4CA5F4D2141CDE07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number:          0F25
Signing time:             Tue 28 Jul 2026 16:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:44 +0000
Files and hashes:         1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: hGu8L4qPV+EAhmTrDYwLG7+WvYh44UDMlT0K5I0A4Ag=)
                          2: kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa (hash: cyrjAwqc3oU6K0wTg1ctpzSIWyDuDU/OKlnASWiAbYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:ff:23:8d:3c:58:e4:ca:5f:4d:21:41:cd:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
        Validity
            Not Before: Jul 28 16:00:44 2026 GMT
            Not After : Jul 29 16:00:44 2026 GMT
        Subject: CN=3da4f23cd8f47ae30929d0fab4e70e9b10f21b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:7e:ce:5a:24:16:68:52:2c:15:5c:0b:8e:
                    8c:5a:52:99:6e:38:e7:3a:b7:5a:5d:5b:ad:4e:b0:
                    19:b8:1b:e8:0e:ae:ca:00:83:5d:23:5b:9d:31:f7:
                    0a:fa:34:01:4b:1f:ff:50:02:62:ba:a7:91:69:e1:
                    a4:5f:cb:91:43:b8:ce:2f:5e:d0:dd:39:49:3c:8a:
                    27:1e:a3:65:b8:1a:a1:78:11:c6:dc:28:f9:18:8d:
                    eb:b1:fe:c8:a9:ec:f7:b3:31:9d:5f:af:b9:89:1e:
                    c8:37:6b:ea:13:5a:e1:ef:e0:4b:58:61:1d:a6:35:
                    a4:1a:82:b9:5f:dc:c8:68:a5:3c:1e:72:51:c5:3b:
                    5c:b7:3f:e1:f3:96:1b:72:9d:40:be:c4:29:ad:99:
                    8f:a2:fa:90:fe:c3:93:34:f5:52:7c:75:3b:03:f3:
                    63:cd:70:81:c2:93:93:23:e4:bb:4b:ab:5e:9c:30:
                    47:4e:0b:33:17:3e:bc:92:01:88:28:21:d3:5e:84:
                    56:5d:41:23:ab:2c:84:96:bc:1e:a7:6c:d5:28:68:
                    78:27:76:0f:8a:58:ef:60:45:8a:03:1f:69:22:20:
                    5e:a3:2b:ce:1f:df:1c:da:56:cf:a2:d0:35:a1:67:
                    ff:b2:3e:bc:20:6e:30:38:88:75:17:91:e8:16:92:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A4:F2:3C:D8:F4:7A:E3:09:29:D0:FA:B4:E7:0E:9B:10:F2:1B:99
            X509v3 Authority Key Identifier:
                keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:57:aa:8c:13:ff:6c:96:53:9b:43:a3:17:e1:38:32:7f:
         8f:87:df:dd:6a:97:0e:5f:07:fa:8e:a0:a0:99:ab:19:0d:f4:
         b1:49:79:52:d7:55:4a:25:9d:0f:bd:fe:f2:38:ef:a3:d0:9d:
         0b:40:64:aa:6d:fb:98:22:65:55:e0:3b:69:7b:b0:85:97:46:
         dd:c3:39:74:ed:2c:96:7f:99:92:da:42:8a:7c:50:46:6c:91:
         57:f5:22:c4:52:96:06:36:40:b2:58:cb:74:49:a9:99:ac:d3:
         9c:a7:e5:a3:06:29:ed:d0:57:84:b2:f8:b6:4b:a5:f4:20:84:
         d6:3b:2f:5d:b3:44:09:54:18:ca:c6:a1:b0:3c:7b:1e:bc:97:
         bb:89:c2:5f:9b:ab:e1:71:71:c7:24:05:9d:88:e4:12:4a:49:
         7e:1b:a2:e4:91:63:07:f3:e9:53:de:1b:8f:e7:b6:ae:42:6a:
         7e:3d:eb:ed:ee:51:42:cf:e5:30:2b:2e:7a:f1:b2:7f:ac:99:
         e6:ad:9c:e5:76:f1:15:39:f4:98:0c:21:4d:91:bf:d3:13:65:
         8c:7a:e1:f8:4a:af:60:ec:89:4f:bf:f0:b6:bf:9e:12:b5:a7:
         f1:46:b5:0a:06:d1:a1:82:ec:c8:78:ec:62:72:a7:c2:b1:54:
         c7:26:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:41 2026 by rpki-client