Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File:                     5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier:          j8huD/viVik2VTlQYJ9p5QXY/5an5bdpWnc0vkgOtjg=
Subject key identifier:   A5:98:71:AC:19:46:8F:3E:D4:E5:E7:B0:29:1B:3B:BC:32:9F:5C:34
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       019FA8D020F9474ACA9915F76BF24C5688E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 13:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:39 +0000
Files and hashes:         1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: jZoSou35iF2ZJ7dgFojbFb6Wb+MA2InkXLOyQNHJCzU=)
                          2: ko2j8hnKnRa6XfeSySN88cJHiqc.roa (hash: MyMKVgwxSjCpWrh/r1qz4ah1FabN79izJ21lx/qGswk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:20:f9:47:4a:ca:99:15:f7:6b:f2:4c:56:88:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: Jul 28 13:00:39 2026 GMT
            Not After : Jul 29 13:00:39 2026 GMT
        Subject: CN=a59871ac19468f3ed4e5e7b0291b3bbc329f5c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:1d:a4:9d:b7:70:84:72:db:4e:8b:bb:21:
                    21:b2:e1:a1:3b:47:ae:13:a0:b1:fd:06:35:a8:b2:
                    2b:e6:bc:52:71:6d:5e:68:19:2d:b1:26:85:22:0e:
                    dc:ba:30:ad:47:b9:71:36:78:67:2b:6f:63:3e:ff:
                    1a:73:8c:78:1a:0b:1e:fb:98:9a:b1:33:ae:df:eb:
                    30:ce:9f:f5:9f:b8:35:7b:ea:7d:e0:6b:e9:6d:76:
                    23:7c:0b:3f:f4:b6:77:44:88:7e:1d:09:67:74:bc:
                    3d:15:09:e4:07:c7:31:bd:9f:de:75:89:23:ba:b2:
                    b4:64:b2:cc:01:23:57:4e:b2:e8:79:84:a5:72:63:
                    96:cc:b7:3e:09:b4:d7:39:e9:2c:eb:77:b8:36:59:
                    05:0a:26:7f:be:8a:5b:c4:db:4c:89:08:11:ca:28:
                    af:4f:e6:36:a9:7c:e6:d5:02:f3:2c:8b:59:fe:be:
                    ff:7c:29:ff:5c:61:46:18:1e:9a:d3:fe:56:d2:43:
                    4b:8f:4a:19:07:43:c0:23:df:c4:39:4f:f9:a5:02:
                    ff:e3:f7:4c:04:0b:78:d1:e6:e9:83:20:4e:57:f7:
                    23:ac:21:8d:47:6e:b7:19:82:e1:96:b4:5f:a4:2e:
                    a0:99:02:63:89:7a:e9:d2:d4:1a:48:1c:7c:87:e4:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:71:AC:19:46:8F:3E:D4:E5:E7:B0:29:1B:3B:BC:32:9F:5C:34
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:03:59:8d:8a:43:1b:c8:84:d4:a3:5f:de:01:95:5b:80:
         c0:3e:2f:55:14:76:82:5f:53:76:a2:db:ef:55:99:4b:29:73:
         ba:87:db:84:bc:80:4a:af:12:9b:9a:98:22:df:aa:50:2c:c6:
         24:30:9f:57:13:cb:41:90:27:4a:4c:10:35:0b:8c:d3:aa:54:
         fe:da:a3:f9:2d:27:18:6c:97:60:d2:8a:a8:c7:cb:7e:d1:6a:
         ef:7a:70:d4:e4:e9:6c:c4:30:03:10:34:c5:4f:cf:c8:ba:8e:
         e9:ab:3b:38:b9:4c:27:dd:88:a6:e8:1c:00:b3:62:33:f1:17:
         de:a4:b1:c3:e0:1f:9a:41:3e:aa:b4:1d:13:e3:ba:22:ce:31:
         93:b0:e2:b8:b8:98:cb:22:2b:83:9b:fe:48:d4:f7:98:e7:0f:
         ff:86:e4:11:d3:78:11:34:5a:0a:03:6c:29:fe:5b:a4:de:14:
         5f:4c:67:d5:c7:aa:f9:67:69:d4:b3:b2:e3:5f:ca:c2:07:e7:
         f9:c6:f1:ba:a6:70:2a:4f:8c:67:9e:7e:60:55:b9:20:73:a1:
         3d:5e:d6:62:40:7d:e3:89:40:b1:84:29:eb:df:0a:41:a2:74:
         b4:7f:02:c9:0a:8f:26:29:f9:27:a4:8c:7e:df:47:f4:07:2c:
         8d:36:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:40 2026 by rpki-client