Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File:                     5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier:          AAaONcE6JhpFQopmbFeipzMId6djQH1O+wn5ik/e34U=
Subject key identifier:   79:CC:7A:CC:59:72:38:CF:D3:25:15:7D:C9:A1:6B:18:E6:34:96:6E
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer:       /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial:       019FA899D4994B08BD4E0CEA6833B217F88A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number:          0205
Signing time:             Tue 28 Jul 2026 12:01:21 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:21 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:21 +0000
Files and hashes:         1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
                          2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: nG9mqG5p6Gm8TYRSq+K8g9lyU6mgr0RwLfJ2pHS2y4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d4:99:4b:08:bd:4e:0c:ea:68:33:b2:17:f8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
        Validity
            Not Before: Jul 28 12:01:21 2026 GMT
            Not After : Jul 29 12:01:21 2026 GMT
        Subject: CN=79cc7acc597238cfd325157dc9a16b18e634966e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:c5:15:99:0e:cb:87:5e:38:26:32:d6:59:
                    ec:3d:ec:94:e5:ef:89:8e:d1:c6:c4:6b:81:d8:bc:
                    e5:0c:b2:b6:d6:aa:ca:e1:c4:ab:2f:d6:f4:d4:f5:
                    7e:f3:fe:aa:2c:ea:d0:87:4f:b0:7e:f6:af:c3:31:
                    c1:45:7a:91:ad:35:bc:c0:fd:90:7b:eb:7e:3d:a1:
                    54:e7:14:80:cc:60:eb:cb:81:b2:dc:ea:2f:0b:43:
                    8f:20:9c:d0:81:36:89:41:ee:a4:f7:a7:f8:22:61:
                    2f:ee:58:c5:ec:fe:1b:62:a9:ba:68:12:91:53:d0:
                    a3:b0:cb:7a:d5:b6:1f:88:dc:f0:83:6b:54:4a:f4:
                    b2:0a:44:93:da:4f:70:a9:79:ac:0c:1b:17:b1:30:
                    e0:ba:55:f9:cf:3c:e4:00:e8:e3:1a:90:be:56:ff:
                    c3:dd:e0:82:d6:4d:97:0a:3d:86:5e:9d:15:9a:50:
                    ca:d3:f0:b6:1d:95:d3:6a:59:a4:55:78:aa:cb:4c:
                    71:d9:34:ba:ad:a1:cc:0b:04:e1:f6:08:bd:5f:09:
                    69:01:12:c9:59:2c:e8:52:5b:8c:b0:9e:f3:94:66:
                    e2:58:32:7e:e3:0c:c5:96:4a:cc:2f:12:28:ff:06:
                    9d:7e:c2:44:86:69:68:87:86:65:ba:dc:2c:a9:97:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CC:7A:CC:59:72:38:CF:D3:25:15:7D:C9:A1:6B:18:E6:34:96:6E
            X509v3 Authority Key Identifier:
                keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:46:db:19:24:47:f5:ea:aa:8d:b7:98:78:61:90:3f:5a:b4:
         fd:b9:05:a5:67:24:57:9f:3b:bf:c3:c4:c6:6b:eb:12:e6:ef:
         3c:bb:2a:b6:36:f0:ee:35:50:38:2e:92:87:5b:15:0b:bc:07:
         3e:24:25:0d:6a:cf:81:07:83:51:27:3e:22:c0:34:76:0b:a9:
         92:54:d9:32:ee:96:30:53:b1:56:7e:31:43:70:f0:06:ae:92:
         c3:27:db:fb:38:e0:81:05:25:e1:30:4e:1b:09:6d:72:cf:c6:
         d8:45:90:8b:ef:8c:4f:9c:35:4e:9e:e7:1f:0a:5a:7c:a1:42:
         16:b7:8c:5f:72:ba:8d:93:0e:b5:1b:6b:bd:c2:76:c1:71:e4:
         54:5a:27:93:dd:a6:05:53:7d:d4:9a:34:87:4b:29:25:93:3c:
         a7:02:69:99:8d:52:70:e9:df:a5:ad:96:e9:41:df:8c:8c:1d:
         be:7b:64:31:cb:52:fd:04:23:1d:3e:3e:14:30:f7:0e:0f:6b:
         b6:dd:b1:a0:c5:a1:e6:57:f0:f1:de:92:00:f1:ea:24:ba:bd:
         8b:56:07:f4:3a:38:d1:31:f8:80:be:2a:9d:d9:06:4b:25:ba:
         17:15:b3:b7:b4:57:5b:09:c4:fa:01:04:c5:c8:5a:b0:25:12:
         96:42:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:53 2026 by rpki-client