Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File:                     5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier:          lot0ODPctm+76MHlCEqqLU0cPqi6jDO1VYQUZnMiWuQ=
Subject key identifier:   F3:8A:C4:8B:98:9A:24:CE:39:26:49:0B:C3:5F:F6:A0:D8:C9:40:60
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer:       /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial:       019FAB2C62CA18B7BA3CFD46233957D93559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number:          09AE
Signing time:             Wed 29 Jul 2026 00:00:40 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:40 +0000
Files and hashes:         1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: H4NSTruAU5jG+RJK/wdHXMQCvZD29vczyZNkUE6SW3Y=)
                          2: HALUJ8HMBpoHzskaJCYqZgHex5U.roa (hash: cOZhNR9S9Fv/MNqYDNuqDaMlzhNl0rBxxMK0bBBrUJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:62:ca:18:b7:ba:3c:fd:46:23:39:57:d9:35:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
        Validity
            Not Before: Jul 29 00:00:40 2026 GMT
            Not After : Jul 30 00:00:40 2026 GMT
        Subject: CN=f38ac48b989a24ce3926490bc35ff6a0d8c94060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:00:87:3f:2f:1a:b1:70:01:7a:9a:c5:35:
                    82:4c:df:b2:66:e1:be:3e:d7:41:54:41:41:c2:c2:
                    4d:61:70:25:4c:cc:6c:5e:3c:39:1d:19:8f:fa:49:
                    38:18:4f:e9:e4:73:c6:9a:28:9c:6c:67:54:c7:eb:
                    20:e8:4a:48:4f:14:5f:18:c5:fd:78:95:dc:8f:84:
                    1c:57:25:af:3c:18:1c:78:e9:07:ba:f8:04:dc:7d:
                    b3:51:f6:df:a2:ae:f0:d7:b8:2e:4c:70:a6:38:e9:
                    2b:1a:c0:4b:25:d5:fc:22:80:93:36:0b:3b:81:ee:
                    a9:0e:89:86:bc:de:c0:a3:02:fe:8a:da:25:47:79:
                    1f:2e:59:34:c6:6b:e9:16:92:13:33:a4:f0:66:50:
                    e0:c1:94:ec:79:24:eb:f2:18:79:9f:8b:ab:e8:b9:
                    1c:a0:3f:2a:55:1d:8a:20:36:19:e9:ed:70:e3:0a:
                    58:89:50:65:bc:b8:0b:9f:c8:5d:63:8d:82:00:09:
                    d3:ae:87:5f:0e:cd:4e:2f:c8:89:1f:71:ab:b4:c6:
                    5d:f8:a0:fd:6a:dc:e1:c7:1d:e4:ec:60:cb:af:9d:
                    a3:a7:ba:7e:8e:54:35:06:88:e7:6e:40:bf:46:b8:
                    e8:61:b4:e6:40:c9:65:88:14:63:a7:83:e3:1b:c1:
                    b1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8A:C4:8B:98:9A:24:CE:39:26:49:0B:C3:5F:F6:A0:D8:C9:40:60
            X509v3 Authority Key Identifier:
                keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ef:b9:18:ea:f3:fd:22:10:b7:95:d6:0b:2d:12:a2:79:02:
         b4:44:17:4e:68:1b:04:29:dd:24:fb:cb:e6:fd:ce:8a:45:7b:
         86:a6:d5:2d:69:7e:56:73:f5:65:31:67:e6:4b:bc:e4:6b:5c:
         b2:fd:c5:85:17:d6:a1:94:6c:e2:e6:ff:50:36:93:cc:a6:1d:
         a0:63:ba:ec:c7:e0:26:fe:d5:0c:8b:af:c8:6c:20:36:af:39:
         2d:32:75:3d:3b:c1:04:5b:5c:ad:67:93:31:d9:78:32:1c:6a:
         a4:28:6e:94:63:c1:2d:50:92:f7:5f:1a:07:9d:5e:87:1a:95:
         ef:21:b0:09:c3:f9:7a:5c:c8:ae:e7:05:07:ba:0e:68:6d:95:
         5b:30:2c:79:a2:a8:02:d1:3a:f6:42:e9:a7:3b:9e:ca:b2:0e:
         8b:4b:89:fc:46:d8:ad:49:17:74:0b:5e:93:3a:ef:d8:41:6f:
         93:69:68:f0:a5:5c:c4:b8:34:5f:d9:fe:ba:ad:96:c2:0e:fe:
         b6:5a:3d:89:6f:e6:5b:4c:ca:08:12:06:7d:ea:af:17:36:4d:
         c6:c9:0c:17:c3:33:ab:58:eb:76:4f:62:4f:53:08:1e:79:e4:
         d0:26:f7:ff:0a:d6:6b:20:7d:79:c9:2f:1d:09:2c:e4:27:66:
         bb:54:a5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:18:09 2026 by rpki-client