Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
File:                     5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json)
Hash identifier:          +DA+qb1ZWf7h+yX1vpTWffGBhc5VJFLdkL091+TTvmw=
Subject key identifier:   DD:F4:B3:7A:1F:AA:66:3B:F8:DD:37:02:BB:30:03:11:1F:E3:63:81
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Certificate issuer:       /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial:       019FA8CFE2227B86F4C4F339CC4180998866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
Manifest number:          083A
Signing time:             Tue 28 Jul 2026 13:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:23 +0000
Files and hashes:         1: 4p5MDgx80WrNV4qWtYD29zqy-Vk.roa (hash: 1uvtk+0FlzJu9XJBd0te2sWPClZtr04c0PqiVDd+kic=)
                          2: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: v1CdAAwXnHToneoUVw9RUs/WaVov9dh7a1gMYYW/yU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:e2:22:7b:86:f4:c4:f3:39:cc:41:80:99:88:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
        Validity
            Not Before: Jul 28 13:00:23 2026 GMT
            Not After : Jul 29 13:00:23 2026 GMT
        Subject: CN=ddf4b37a1faa663bf8dd3702bb3003111fe36381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:20:1e:15:dc:f7:5c:0e:b5:2e:8d:72:6c:
                    06:42:ff:d7:1b:d4:f5:bf:a7:dd:00:0e:12:2d:1d:
                    0f:25:1b:74:7b:a7:6d:05:b1:f8:36:9c:ed:b7:09:
                    f6:c4:c2:51:c8:64:5c:e0:8d:91:fc:f2:8d:1d:40:
                    ba:83:f8:2c:c1:d4:d4:07:3d:11:ae:74:f8:04:76:
                    02:e9:33:9e:6b:10:db:7d:4d:ea:50:45:81:a7:48:
                    26:54:8a:d6:52:c5:35:b3:7c:d7:94:e4:33:09:c4:
                    17:60:00:28:8e:46:bc:2a:3d:c1:aa:57:36:3a:e7:
                    b7:f8:24:6d:87:aa:40:c5:fd:03:68:91:98:d8:1f:
                    7c:94:a0:6d:e3:13:5d:31:0d:bf:93:e4:4f:2b:93:
                    b2:c5:2f:62:b5:15:e5:c5:58:5e:60:97:d7:81:b8:
                    b6:8e:e9:4f:60:93:e4:44:f0:a0:71:3a:2a:7b:7e:
                    b8:ed:11:61:23:4b:e0:1b:89:66:19:02:d6:06:60:
                    6e:79:ed:91:4c:b4:03:c1:5e:c1:74:bc:4c:03:69:
                    0b:d6:c1:da:bb:10:af:a7:bc:dd:6f:35:2a:e7:63:
                    86:f8:cf:8c:cc:b0:8e:fa:4a:26:2a:3a:44:37:25:
                    9b:9a:2f:e6:13:72:55:61:5a:41:13:8e:9a:70:16:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:B3:7A:1F:AA:66:3B:F8:DD:37:02:BB:30:03:11:1F:E3:63:81
            X509v3 Authority Key Identifier:
                keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:01:23:bb:3a:e6:df:f0:22:7e:ed:05:38:0d:65:f4:57:a6:
         4b:61:2c:98:ea:ab:2d:82:be:b9:4f:4d:03:dd:b1:86:31:7d:
         c4:67:ca:69:e0:64:e5:93:a0:80:b0:35:9d:a2:75:1a:0c:3a:
         3e:92:aa:30:a4:8a:46:1a:ca:ad:ab:f3:e5:06:25:17:0e:17:
         1a:1b:49:68:4a:6c:90:aa:85:53:05:a5:d3:10:cf:69:50:02:
         ec:5d:bd:76:0d:42:f9:aa:80:f9:22:de:61:53:00:73:37:1e:
         50:f4:22:33:f8:0e:24:95:07:54:0e:0b:97:6c:e6:09:26:b2:
         66:79:c4:83:b0:4f:43:e2:b9:77:56:9b:39:55:16:06:a6:1f:
         a8:c3:70:c3:05:c3:5c:1a:6f:ea:14:0e:a1:45:50:3b:ef:80:
         d6:ad:a4:f6:ad:e7:5f:ad:c3:ce:b3:c3:13:85:8f:12:8d:64:
         19:8a:5b:5b:1d:58:96:49:97:1e:cf:d8:8d:b0:49:81:f8:11:
         78:67:ae:cc:f5:59:7b:c8:91:4d:94:6a:fd:9e:a4:6c:3d:94:
         bc:ad:2f:64:5e:c5:38:fe:92:d7:49:b5:26:4a:e2:38:9c:61:
         70:ac:97:c9:bd:9a:02:95:7b:25:ff:db:28:41:82:36:bb:9a:
         ef:c1:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:20 2026 by rpki-client