Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File:                     5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier:          K+VOq6VrdnFoU2GO/EZZuxRY1Y3LnVguZ1Q7dtuQYkk=
Subject key identifier:   DC:FB:ED:D5:A8:DB:C8:BE:F3:6B:F3:20:6E:75:77:C4:98:FD:57:85
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer:       /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial:       019FAB63E1915DD33473B16731A3D3733FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number:          19D0
Signing time:             Wed 29 Jul 2026 01:01:17 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:17 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:17 +0000
Files and hashes:         1: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (hash: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4=)
                          2: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: I9U2Pm4JLKOo2fKCUy+rO08FH964sBGfvKO5J7lhdHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:e1:91:5d:d3:34:73:b1:67:31:a3:d3:73:3f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
        Validity
            Not Before: Jul 29 01:01:17 2026 GMT
            Not After : Jul 30 01:01:17 2026 GMT
        Subject: CN=dcfbedd5a8dbc8bef36bf3206e7577c498fd5785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:03:fc:8c:3a:d2:ce:62:f0:5d:d5:dd:d3:
                    3c:93:74:77:f3:62:35:20:32:fe:34:10:a9:46:95:
                    28:f2:6b:9e:b3:c7:28:03:3b:67:f8:6c:02:4a:31:
                    89:d0:d7:47:b9:39:4c:1b:19:99:53:1f:c9:a4:a2:
                    e8:df:09:0c:04:b9:3f:ec:57:98:c2:34:80:1c:f6:
                    f1:88:bf:68:b9:76:6c:a4:31:b8:57:54:a8:29:3d:
                    bd:0d:c4:7c:71:a9:da:fd:0a:42:d5:0e:42:2d:cd:
                    24:4e:d7:25:b4:ae:87:d4:84:85:d4:08:f1:ab:bf:
                    f9:e5:96:c6:4e:49:d1:a7:e6:ec:e8:2e:5d:52:38:
                    61:3c:af:4d:43:4b:0a:4d:ec:b5:b2:ed:54:4b:3b:
                    3b:4c:69:a0:24:82:3c:ec:89:48:1c:45:04:83:39:
                    a3:11:32:e6:0e:99:96:40:a7:54:91:b6:41:4e:38:
                    84:21:fa:61:06:52:e3:e4:ec:a6:d3:e0:4e:a3:07:
                    68:01:2d:1d:5e:f5:46:5d:6e:83:34:47:d3:1c:2f:
                    25:29:3e:cf:71:4f:cd:85:65:5f:3f:7c:e9:d8:fa:
                    f7:de:35:88:b4:cb:fb:a0:ff:25:50:c7:a7:de:b8:
                    d5:a7:30:b7:a5:02:9e:6a:74:85:b2:ca:0c:27:f2:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:ED:D5:A8:DB:C8:BE:F3:6B:F3:20:6E:75:77:C4:98:FD:57:85
            X509v3 Authority Key Identifier:
                keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:81:14:23:49:56:a3:11:9e:0f:14:21:63:ee:58:49:b3:3a:
         d0:8c:4f:60:2e:f6:e3:74:5c:90:3b:72:57:6a:e9:10:a0:d0:
         ee:ba:b0:75:ab:54:98:0d:6a:05:ba:46:6d:13:32:36:ba:36:
         c4:9d:c4:a1:71:2d:1d:d0:e2:91:90:6d:04:a1:fb:82:e0:18:
         fc:78:0a:ae:b4:c2:0c:3d:9c:60:fd:0a:03:e3:48:1b:b1:b7:
         64:49:e9:8d:af:6d:bd:a2:4f:82:c0:d7:ff:42:05:75:38:17:
         0c:7b:e7:99:c2:1c:f7:86:64:af:aa:08:1c:27:65:7b:c5:5f:
         ba:82:44:18:67:b5:75:6f:78:d7:93:27:ad:ff:fa:36:bb:c2:
         8a:25:bf:15:dd:3c:8c:43:85:cd:d2:a0:27:95:99:3c:1c:6d:
         42:d1:b9:e4:8d:4f:46:b5:38:14:fb:7a:61:14:f5:ad:61:5c:
         86:a1:38:87:4f:4b:bb:82:56:0f:9f:d6:73:d0:22:61:fe:60:
         b8:1c:57:63:2a:08:d5:f5:f3:96:02:0d:f9:ce:c0:2a:e0:7b:
         61:09:b6:47:61:07:35:81:65:72:bb:43:78:9f:24:d1:d0:b5:
         64:01:fd:6d:2c:0d:94:1a:ee:17:1f:1b:78:b7:75:75:9b:06:
         01:05:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:52:02 2026 by rpki-client