Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          gz6ee7ioko+dQqtG8ycFygSvi6JR3SjDkI732umlyg0=
Subject key identifier:   49:EA:D3:43:A9:0E:BB:D3:2E:2E:FB:4E:62:F0:A5:A0:AA:AE:7C:E5
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       019FAA87B752E2029292B00AE5F3129BF481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          1791
Signing time:             Tue 28 Jul 2026 21:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:48 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: BT/9rEv721AOMUlLW6QpkeicB4+C7TrkQkMXAU0Ckm8=)
                          2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:b7:52:e2:02:92:92:b0:0a:e5:f3:12:9b:f4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Jul 28 21:00:48 2026 GMT
            Not After : Jul 29 21:00:48 2026 GMT
        Subject: CN=49ead343a90ebbd32e2efb4e62f0a5a0aaae7ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:8d:26:d6:4d:0d:8c:8f:9d:01:d7:eb:fd:
                    cc:c8:1b:33:ec:1a:f0:e5:00:5f:f1:19:86:ba:31:
                    f2:c1:45:7a:fa:d5:c5:44:bb:b0:8d:0f:26:57:c9:
                    30:ef:e8:73:a7:15:a8:0b:b0:d3:e3:af:92:b9:de:
                    df:9f:c5:6b:b3:15:7a:0b:fa:cc:df:49:f6:65:84:
                    a6:2e:61:4c:8c:6a:a5:6b:58:5c:09:7a:7b:01:d6:
                    1f:47:55:97:fa:a8:04:b8:f3:f9:b9:c0:13:19:f1:
                    12:a5:5b:5a:80:d6:09:32:67:aa:99:93:ec:66:28:
                    6f:4f:6b:c6:a8:6d:d4:37:80:30:0a:cc:a9:64:cf:
                    dc:41:2a:7e:44:ba:4f:8f:1f:64:6f:bd:f2:6b:6c:
                    8c:de:07:88:2c:ac:86:14:17:8d:b7:0a:f8:cf:d7:
                    f7:cb:97:2f:e9:e4:d4:01:66:09:8a:e4:ea:c6:2c:
                    4f:69:2f:6c:6a:69:8f:5d:82:8b:c4:68:f7:e3:3f:
                    ed:8a:f7:3a:2f:af:49:73:cd:28:c2:ca:52:44:3f:
                    05:22:25:f5:02:35:80:16:16:53:84:5a:68:29:7c:
                    f8:68:a7:ec:b3:be:46:dc:65:bb:77:3a:17:90:62:
                    77:08:81:2d:54:5b:98:b4:a9:2b:0a:72:b4:a7:33:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EA:D3:43:A9:0E:BB:D3:2E:2E:FB:4E:62:F0:A5:A0:AA:AE:7C:E5
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:c3:52:47:27:ee:d1:a8:7e:5d:37:2a:db:6e:e3:5b:c7:
         f2:c3:61:aa:46:99:07:3c:0c:ef:6d:e7:af:de:3a:f0:5b:fa:
         d3:a3:e0:71:ae:93:1e:09:17:cf:9e:38:6e:75:0d:36:e6:1b:
         19:ac:46:ea:d0:69:05:f2:14:79:8c:6c:e2:6e:67:bd:b1:aa:
         63:59:ad:f4:c4:68:a3:93:f0:7c:28:52:38:de:0a:2f:7e:14:
         fe:1d:09:43:24:cc:83:6d:c1:d1:bb:36:01:c8:a5:be:61:c7:
         79:9c:86:52:31:e3:34:2a:2a:89:c1:7c:07:24:20:8d:af:8d:
         05:8c:f4:d5:df:66:33:40:a1:25:45:d2:dd:78:f4:98:72:ea:
         5b:29:59:88:57:03:cf:d0:ba:1d:05:ba:13:21:5b:fd:c0:2d:
         56:ab:3a:ca:9c:bc:65:95:26:ef:27:bb:f5:d6:fe:e2:bd:d5:
         4a:95:2f:e8:74:73:e1:d9:44:69:d4:36:7a:b3:10:56:0d:d9:
         e4:15:f1:01:be:c7:d3:4f:f4:92:01:e1:0a:9a:3c:b5:d5:36:
         c1:13:3f:32:35:86:e6:2c:0b:94:c0:3e:05:ef:56:30:e1:d3:
         9c:ec:67:1f:42:86:1d:47:40:12:0a:a7:4b:d0:87:4d:1a:48:
         30:5a:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:31 2026 by rpki-client