Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File:                     5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier:          SKy2rniq+xpg0FoGsVvSZxMk7Rh95XGRrBuACK1Wsyg=
Subject key identifier:   DF:E9:E0:2A:AD:5F:3E:97:85:69:53:5F:6E:94:F0:44:D1:08:68:38
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer:       /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial:       019FACE43C2CD317B0B0B77E49EF67FE635C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 08:01:06 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:06 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:06 +0000
Files and hashes:         1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: 4szsyVuIrgQftbZ3hg7IXJNCDUiEtJ3cQrh0rRkhaXs=)
                          2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:3c:2c:d3:17:b0:b0:b7:7e:49:ef:67:fe:63:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
        Validity
            Not Before: Jul 29 08:01:06 2026 GMT
            Not After : Jul 30 08:01:06 2026 GMT
        Subject: CN=dfe9e02aad5f3e978569535f6e94f044d1086838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:64:6c:46:7b:6c:53:29:40:1b:bf:bd:4d:
                    4b:84:00:53:03:ce:1f:b5:d0:41:b4:ef:89:24:dd:
                    ca:5f:bc:b1:c9:19:f2:15:fc:d5:cc:3b:57:cc:c8:
                    08:30:6d:f4:4d:ae:09:a0:75:29:0f:98:91:65:4a:
                    43:5b:03:f3:e5:eb:96:f3:07:7c:80:c8:3d:86:0c:
                    55:d5:2f:32:a6:b3:5f:d1:96:e7:a5:73:ec:55:80:
                    2e:98:13:f6:8f:fc:be:c4:3e:ba:31:9b:56:64:db:
                    fa:42:86:84:47:b2:32:49:4e:66:1d:93:9f:0e:38:
                    83:45:db:89:11:3d:c1:2e:6c:c0:86:2a:90:d1:be:
                    66:31:ac:17:f1:9b:69:15:5a:a1:a5:8c:16:42:2d:
                    8a:a2:f0:54:82:8f:5c:2c:b6:f7:10:b5:65:b5:f4:
                    ad:3d:12:c1:47:dc:25:7f:39:41:20:ba:fb:13:23:
                    f0:5d:21:cd:70:dd:86:e8:2a:1b:64:0b:1a:2a:8e:
                    b9:74:fb:2a:06:58:a6:6f:ca:35:6c:69:c1:9b:98:
                    ab:ac:9e:c6:5a:0e:2c:0f:47:a8:60:5b:46:6c:6b:
                    84:c2:60:a3:fa:e7:ed:a3:f2:c0:17:01:55:f8:4d:
                    e1:ef:42:ba:ab:6a:52:09:3c:9b:8c:7b:ac:cc:d4:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E9:E0:2A:AD:5F:3E:97:85:69:53:5F:6E:94:F0:44:D1:08:68:38
            X509v3 Authority Key Identifier:
                keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:67:1b:5e:05:c9:84:d2:3b:8c:85:8f:0f:13:dd:76:74:
         6c:ed:1d:0b:e4:6d:26:ca:8c:2d:8b:ec:7d:51:b6:32:d8:d5:
         42:ab:2a:30:e6:08:8f:77:70:84:c0:6d:c8:be:0e:a2:8f:47:
         87:f6:2c:fe:21:50:25:4d:ee:26:ee:89:7d:d8:7e:b2:d7:84:
         0f:da:06:01:d2:0f:fa:b8:b4:73:ad:b1:fd:24:1b:56:22:e5:
         b5:57:ed:9b:d0:d4:e4:78:01:35:3b:00:7e:38:d9:05:c0:db:
         04:bd:80:cf:6f:de:4f:ba:21:bf:a5:69:63:95:35:5c:a1:d2:
         7c:b1:41:4d:f5:96:65:4c:d8:99:37:8c:86:3d:ba:9a:f3:14:
         57:2c:e0:e9:9d:41:22:10:c4:eb:ce:e1:f4:02:0c:66:18:6c:
         20:77:96:e0:e0:df:0a:6c:01:fa:9e:b9:2b:73:cf:4b:9d:04:
         d7:80:10:32:a6:a4:26:75:3a:59:e2:0c:04:5f:bf:80:30:3a:
         b5:c0:27:82:30:7c:59:b9:2b:85:14:8b:71:57:48:83:c6:cc:
         78:f4:d5:02:17:a3:95:65:0c:8b:32:a9:7c:70:b5:b8:3e:04:
         bf:99:51:84:ed:18:80:90:72:91:47:6a:09:cc:8f:45:4e:69:
         5d:ab:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:21:44 2026 by rpki-client