Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File:                     5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier:          Jh4ZqGDW6fMyOLMSU2NUW1BQ89IeQ6sHKqyJImbcjn4=
Subject key identifier:   DC:67:FB:68:7E:FA:A5:C3:68:CD:A0:46:ED:57:28:C1:73:E1:73:71
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       019FAA1983D05484A53115C6AF74CBEC4421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number:          1A56
Signing time:             Tue 28 Jul 2026 19:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:26 +0000
Files and hashes:         1: 0xg0LHFmIAhRMpdSsXPI-Ie_PsI.roa (hash: WHzwzDrG+iQh9uqHG4tV1Yh6NKaFw5D08VOYk/ojXTc=)
                          2: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: qswKevQU7YFsQ1MPWRgPv4WX6fYUu5EPBiyaTSgcR1Q=)
                          3: azXt4JSrhCkbBDLougb_ea1t6os.roa (hash: zCtBx08/hOTifYY1efRidpEdm3U/OsYy+2PnGFcIFuE=)
                          4: wF76zj4RuOFh39FZ-21d3WLD4As.roa (hash: +mS0w0JTWZxTgTnEjxzUUW+qwY254+9o+tm44Q39t6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:83:d0:54:84:a5:31:15:c6:af:74:cb:ec:44:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: Jul 28 19:00:26 2026 GMT
            Not After : Jul 29 19:00:26 2026 GMT
        Subject: CN=dc67fb687efaa5c368cda046ed5728c173e17371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:3a:bc:b6:37:5f:ac:17:15:fd:5a:df:be:
                    ca:9d:8d:99:fc:5a:ee:40:37:2d:6b:3d:cc:c1:b6:
                    5f:0e:f9:5a:c8:64:1e:66:e8:c8:91:61:e5:31:71:
                    d3:9e:c6:2a:49:0d:ca:29:c1:4f:dd:5e:db:12:a5:
                    06:89:26:b2:4f:e3:9f:e8:c1:3d:4e:d9:e0:c0:6b:
                    c6:03:96:9a:2c:02:59:b4:7d:33:5d:cc:57:72:88:
                    3f:fb:c7:44:e1:56:a6:72:e3:f0:db:8f:02:98:04:
                    a1:aa:e7:58:bc:70:6f:08:8d:c1:25:56:e2:b5:c0:
                    67:82:6c:ae:39:ef:1b:e3:9a:11:cd:59:d3:7b:f5:
                    ef:67:d9:25:89:e6:a7:ec:3c:ca:fe:37:56:53:e8:
                    37:7e:17:b5:7c:e9:5a:95:e4:f5:20:d5:05:85:6e:
                    b9:89:0c:a5:d8:d4:71:82:2a:43:c6:98:56:31:ff:
                    5d:b3:71:e7:2d:96:03:0a:02:fa:af:15:2f:6c:d9:
                    51:11:7d:81:0e:65:2b:a0:54:9e:28:be:1f:ab:ed:
                    d5:f3:dd:f4:9b:a9:0c:2b:dc:a2:31:97:0e:ed:84:
                    0f:75:52:33:f1:e2:47:3a:0e:c9:7f:f5:c4:3d:1f:
                    9a:e4:2a:c2:82:0c:11:de:6c:04:a6:ae:7c:d6:34:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:67:FB:68:7E:FA:A5:C3:68:CD:A0:46:ED:57:28:C1:73:E1:73:71
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:07:4c:b7:91:be:84:79:f0:46:86:9a:2e:ca:3a:bc:9a:b8:
         0d:0e:3f:ab:cf:58:42:43:ee:34:9d:9c:45:6b:0e:17:38:f4:
         c9:93:0c:8a:18:de:80:81:97:3a:0a:9f:c3:0b:27:70:51:ce:
         7d:84:e8:54:25:d5:67:06:f4:b4:d6:69:90:9a:36:65:5c:6f:
         54:3a:b0:4d:ca:9b:c5:df:35:60:15:1e:a3:87:5a:b3:36:22:
         ae:ae:00:44:f1:a6:87:cb:10:19:c6:e0:27:b6:1c:59:ae:09:
         d3:e9:4c:0f:e6:ad:37:6d:84:93:36:be:d7:0b:d3:c0:23:ab:
         6a:df:13:0a:37:3d:de:32:2f:c5:10:ec:94:dd:09:c0:63:b0:
         b5:47:58:c6:9e:6b:0d:66:85:e5:55:dd:6a:4a:1e:d9:e9:5d:
         44:8d:6c:cf:90:c6:53:ea:94:15:f3:09:cc:97:68:11:5f:4f:
         e3:51:6e:f6:16:d6:79:66:0e:69:37:e4:b3:29:ae:3b:ce:8e:
         ee:db:22:17:a1:c2:b0:e2:6e:8f:66:7f:6f:0c:63:d6:1e:ce:
         a5:39:ca:49:78:7e:a2:83:3a:ba:29:99:c3:74:0d:df:8a:ba:
         b0:07:18:3c:85:3e:38:15:e1:0f:73:e7:e7:9e:99:38:33:55:
         a4:ed:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:12 2026 by rpki-client