Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File:                     7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier:          tdUguEvsAB7bAIlYhlNTa0hIZwjxblK7jnNUD4yoz5Y=
Subject key identifier:   C5:4E:7A:F8:20:65:EE:E3:1D:A2:7B:56:25:6C:18:83:CA:B7:9E:B5
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer:       /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial:       019FAAF60C29E3279BAE772CD34C05A100E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 23:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:19 +0000
Files and hashes:         1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
                          2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: APPdCW4TjGAdij/bZ50TswzstwJFcyT5Fysb5mc0dbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:0c:29:e3:27:9b:ae:77:2c:d3:4c:05:a1:00:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
        Validity
            Not Before: Jul 28 23:01:19 2026 GMT
            Not After : Jul 29 23:01:19 2026 GMT
        Subject: CN=c54e7af82065eee31da27b56256c1883cab79eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:17:1e:f8:e9:5c:57:ef:aa:dd:c1:1c:fa:6c:
                    b7:28:82:47:77:d7:2f:8a:d2:20:4e:f7:e3:80:60:
                    a4:15:a6:b4:83:5c:26:17:1c:80:30:26:83:ab:b0:
                    ec:94:3b:28:2e:47:59:86:94:00:44:0f:78:62:ad:
                    c1:53:f6:26:ec:60:ca:07:c0:5b:ef:65:eb:38:4a:
                    f5:bf:38:c5:dc:5a:5a:bf:e9:f2:ef:a7:9a:88:32:
                    8c:4c:f5:d9:1a:ee:01:1f:8b:2d:e4:e8:4f:15:98:
                    e6:2b:e2:90:6d:b7:f4:c9:53:4f:bb:8a:ac:55:ed:
                    cb:d7:41:cd:42:86:82:f8:8c:50:72:fb:5f:e1:05:
                    6f:a7:d4:04:5c:a4:08:fb:c3:de:4d:6a:c1:13:af:
                    d3:a7:44:d6:bb:b9:ea:a0:4e:97:c7:9e:0b:ac:4d:
                    5d:68:e0:d4:87:9b:58:e2:69:4b:38:41:e9:ff:d5:
                    7a:a3:15:6c:c8:6d:d1:1d:f2:19:e9:a8:0c:fa:e4:
                    89:7d:5f:b2:ef:11:72:92:c6:6a:61:4c:90:6c:7f:
                    ad:b7:6a:de:9a:5b:2d:0c:10:ec:d9:a6:6d:01:7f:
                    35:ba:b8:e6:b4:a0:91:e7:be:51:c9:c4:52:81:5a:
                    7f:9d:b6:d5:d8:95:1d:af:9f:a4:fb:b0:bf:31:b2:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4E:7A:F8:20:65:EE:E3:1D:A2:7B:56:25:6C:18:83:CA:B7:9E:B5
            X509v3 Authority Key Identifier:
                keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:85:18:6c:ac:cc:a9:6e:6d:a2:4c:a9:57:08:68:e1:c5:
         b5:51:49:4f:ea:8d:c2:44:fc:9f:9d:26:f1:5b:53:9b:9e:72:
         39:6e:53:3e:df:6e:f7:2e:5f:9e:a2:8b:59:b0:36:8a:02:d2:
         ee:6a:4f:79:8b:5b:89:1c:d4:d7:21:b3:16:9d:b7:1d:b9:97:
         10:11:4f:e7:78:29:ed:40:bb:e4:9f:b5:8c:b3:c6:0a:ae:bc:
         57:3d:c0:35:b4:ac:e8:f7:34:c6:06:08:59:4c:6f:36:c1:2c:
         e8:d0:e6:a9:f0:69:31:61:06:9a:73:79:31:fe:87:ab:07:07:
         b8:77:ab:02:b1:f3:68:01:a9:7b:92:9d:63:22:5c:f5:19:14:
         13:96:ae:d3:84:40:83:01:c0:32:c3:6f:8c:77:a8:b5:b0:8f:
         5c:13:91:7d:42:e1:f7:fc:e4:ae:0a:bb:64:99:56:b2:62:5e:
         79:10:5b:5c:eb:f3:95:53:cd:27:d0:77:6c:51:40:32:8a:77:
         29:81:72:90:f3:f2:de:d3:ec:62:91:dd:77:10:5c:62:6d:7d:
         ae:4c:17:89:28:7d:46:a2:f5:72:2b:d5:ac:e2:59:73:df:b0:
         64:76:0b:8e:6c:84:40:20:c1:fa:01:af:9a:9a:77:c5:eb:5a:
         3a:ff:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:47 2026 by rpki-client