Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          8JJQkKxWx85mcFVyL6K8pavkrF6ZSwNqP+SuunInDh0=
Subject key identifier:   67:79:4D:EC:1D:A7:44:C9:1D:5D:2A:54:C7:8B:3F:CB:24:8E:1B:3C
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       019FA7BD8B55240D875B8A3E38CA4057E70C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 08:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:44 +0000
Files and hashes:         1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
                          2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: 5oD2aZcrgXde5jJpZzr2/TWiYrYyge6BKjDz5BzGjXU=)
                          3: _Jzbksm-JMXJG_vIupQOGd5OWfA.asa (hash: Tb8L6c/yPd6zHGW5vozp+7vssh8lOxc/2tcpUf5JfNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:8b:55:24:0d:87:5b:8a:3e:38:ca:40:57:e7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Jul 28 08:00:44 2026 GMT
            Not After : Jul 29 08:00:44 2026 GMT
        Subject: CN=67794dec1da744c91d5d2a54c78b3fcb248e1b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:b3:71:d6:10:f4:b3:98:be:2a:c2:2b:ed:
                    2b:8a:66:44:28:15:3b:f9:ef:63:43:cd:0c:bd:cb:
                    89:e6:d5:56:d5:0f:ea:e7:2e:fb:cf:67:ea:3f:9d:
                    dd:29:d6:b3:99:50:68:8d:e9:89:2e:09:2b:d9:69:
                    e3:20:a2:7b:3e:f2:96:98:88:b7:c1:cb:cb:5b:25:
                    64:6d:6a:4b:e6:d9:d2:83:16:90:3d:7f:dc:cb:dd:
                    68:b2:ce:12:f2:18:5d:d9:b3:d2:ae:cc:49:4b:81:
                    f7:c2:c7:60:85:9d:e4:42:e6:71:97:7e:00:e2:a3:
                    33:c3:ef:60:ba:2b:63:7b:b0:40:26:36:35:65:2c:
                    8b:7d:6d:5b:78:93:3d:1c:40:21:23:dd:9c:89:aa:
                    e4:0a:fa:1b:3c:0e:d9:4e:82:b7:d3:b4:af:d1:35:
                    7c:82:ee:c5:e0:c2:01:3f:00:b1:cb:16:b1:c9:36:
                    f1:93:93:0a:46:37:6c:b5:ff:c2:e0:c2:48:6e:6d:
                    17:04:4d:93:eb:82:08:85:83:3b:48:85:a4:0a:b2:
                    fd:e0:fd:5e:01:87:a9:b0:22:af:76:f6:3a:23:05:
                    05:dc:97:42:67:f1:5e:16:0a:00:9b:5d:6e:7a:ed:
                    9e:03:a3:59:8b:ef:57:3f:86:80:9f:b1:26:d9:cf:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:4D:EC:1D:A7:44:C9:1D:5D:2A:54:C7:8B:3F:CB:24:8E:1B:3C
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:72:58:5b:1c:d1:59:a3:f8:fd:e7:5d:ee:56:93:71:ca:
         04:34:87:a8:b3:50:ff:14:4d:5b:34:3f:0b:88:9c:fb:5f:4b:
         5b:22:c1:9e:61:bc:d9:1f:f6:b9:ff:82:02:e8:fb:ad:e6:33:
         04:d2:90:de:ec:39:47:5b:05:0e:b0:46:63:e7:78:13:83:8e:
         38:43:b0:b4:4c:90:07:84:49:45:c2:6a:14:d8:c7:20:c8:2b:
         ec:8e:69:e1:2d:d7:ed:7e:53:da:83:40:07:cb:37:43:b6:0b:
         c9:b5:0e:bc:23:e2:91:53:b2:d6:1b:11:33:17:b7:fd:00:93:
         d4:a1:13:cd:eb:e5:38:6b:e3:13:3a:f3:4d:23:05:da:de:bc:
         d0:2e:f9:ac:f5:42:9c:0b:9c:a0:6d:57:56:91:f4:6d:44:84:
         74:7e:a0:49:98:34:a0:a1:7a:ff:99:1b:aa:f6:ed:25:ca:c1:
         5b:50:70:16:35:f4:f6:8a:86:7a:e9:55:3d:ef:f8:fb:92:35:
         d9:ec:66:ff:ac:45:c8:d8:a6:9f:c3:a4:9d:cf:ed:77:91:ae:
         fc:f1:e4:90:31:5e:0a:f8:59:b2:07:85:98:45:71:30:54:8c:
         95:6b:99:89:ec:3b:48:1e:8e:ff:57:cc:f3:ab:f2:81:05:91:
         84:72:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:45 2026 by rpki-client