Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File:                     0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier:          P0Qhduk7Wt4TeAhoowS5w7zPSgQt0O2XC1wDckpPFgo=
Subject key identifier:   5C:D6:85:E7:11:7E:18:42:F7:0C:33:DE:3B:FF:30:55:70:32:91:53
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer:       /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial:       019FAC3F1C80FB23984705DE99DE88190E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number:          05F0
Signing time:             Wed 29 Jul 2026 05:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:44 +0000
Files and hashes:         1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: jZCUqF6m19D58FGtFnk34pNcrZhO0GsCfAPrRqFsMWU=)
                          2: 0r4BvsnJAN2Pz40prPoUEy6WvzU.roa (hash: AamdQ0j/vjkbuVtweF8p9JDSZ2i84cCde/Gwvcvf218=)
                          3: 5bf5CwJmQOVXufa2Bw359AZEO9s.roa (hash: vE+kqAcM+EoC006Mvnftc/u8n7NMMiAT3ni4cuysV1M=)
                          4: epNTET6BvQ6zhUMoLdSPzHjbIWE.roa (hash: qxvi55+BDN0SED0a/Y9HgRfeWegI7IGQUucmOAr178Y=)
                          5: ncOZbEMiJNqjiscavpDBkZeriIg.roa (hash: KP4yleOLVWJhJdzAKqGM+QLwSbZEncnkoAH1TNTBzJs=)
                          6: oS9h716veeRY1y9kuFn-MIGUEBg.roa (hash: KS+2BIj/1oDD8HcECr/uPYIsA+2SUgLQkBkCEiNQnZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:1c:80:fb:23:98:47:05:de:99:de:88:19:0e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
        Validity
            Not Before: Jul 29 05:00:44 2026 GMT
            Not After : Jul 30 05:00:44 2026 GMT
        Subject: CN=5cd685e7117e1842f70c33de3bff305570329153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:b0:65:87:aa:f0:c1:1e:84:61:b4:21:f8:
                    32:21:32:8a:2c:9b:bd:45:0b:c2:df:0b:91:84:78:
                    52:32:93:4c:aa:d0:a8:3f:47:36:88:5d:3d:7a:1c:
                    43:38:f8:2a:84:24:f7:31:87:15:e1:95:ff:ab:9c:
                    25:19:3d:bf:c8:36:89:7c:c6:59:1a:80:22:9b:a2:
                    65:03:a1:33:ca:66:1f:4b:e6:f8:d0:bb:af:f8:8f:
                    c0:56:13:ad:c9:95:e5:43:e2:25:cf:8d:70:5d:38:
                    17:6c:b6:c0:e0:d6:cd:59:56:79:74:7c:44:9c:65:
                    78:8e:42:f1:7f:75:b1:4d:73:a7:f7:a9:91:4a:e8:
                    23:1f:98:ae:ec:23:12:91:39:49:20:96:b0:a8:30:
                    03:47:b4:2b:09:41:aa:7d:e2:2b:f4:68:55:3b:16:
                    de:bb:31:f6:4b:20:5f:7a:04:3f:96:86:09:b8:f6:
                    35:c8:54:10:8e:d4:3e:69:85:ac:a2:d8:ce:62:55:
                    18:b9:f8:53:46:7e:ba:c4:15:7e:45:30:8e:35:44:
                    46:a2:f1:a7:23:0a:c8:ba:8c:da:c0:23:a1:42:2f:
                    00:4f:c4:40:6c:21:6d:96:f8:06:27:81:45:80:35:
                    3a:3e:e6:10:aa:9e:0a:2f:4f:95:a3:8d:b5:bb:5f:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D6:85:E7:11:7E:18:42:F7:0C:33:DE:3B:FF:30:55:70:32:91:53
            X509v3 Authority Key Identifier:
                keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e6:b6:7d:df:e4:22:e0:a0:6e:c1:f7:c3:ba:d9:81:b1:d7:
         26:46:74:47:a0:15:49:07:df:f6:ad:a9:40:b1:12:e4:ab:c8:
         fa:d6:e1:6e:69:ea:aa:d4:61:7f:1f:57:72:0a:69:c3:28:97:
         f3:3b:47:91:08:0e:ac:36:d5:87:cc:fd:23:11:f7:2f:90:e8:
         13:8c:63:ee:fb:ac:29:8e:84:28:d5:72:a7:7a:ae:44:16:6e:
         26:31:b4:35:ad:5a:27:55:bf:94:7e:24:6e:28:5d:d7:aa:b8:
         b3:07:85:4c:10:5a:76:f8:78:f4:b5:e6:c8:26:40:5e:e1:17:
         be:63:7d:65:de:7e:bc:a3:b7:e1:b1:1e:a4:dd:70:42:2b:3f:
         07:36:d7:8a:b2:70:4b:31:bd:e5:67:45:6f:6b:7a:d2:5c:c4:
         3a:dc:5a:18:f0:ce:9e:30:71:9b:9d:40:93:1e:e1:f8:42:43:
         a4:e6:b9:7c:14:3e:a7:20:c6:04:ae:d0:95:a5:c4:ec:e3:bd:
         b6:90:1c:8c:cb:dc:9e:1e:df:36:5e:78:fb:9c:fb:71:fe:bf:
         9c:74:b5:30:83:d0:9c:b7:94:de:2c:7f:2f:14:16:df:f4:f4:
         e5:cf:0b:b0:80:e8:57:41:dd:3c:a9:f1:72:96:9a:a9:17:58:
         b2:69:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:24 2026 by rpki-client