Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          ElrM+0d5QxKKsOYhTgyBzy8oR/HY9zVnB0B4QifE1KU=
Subject key identifier:   37:C2:36:D9:AB:1E:62:D0:FD:75:B1:47:56:2D:DD:59:00:5F:77:31
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       019FAA888C8B3F4A5BA36F0AF4EEE6756B09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          1593
Signing time:             Tue 28 Jul 2026 21:01:43 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:43 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:43 +0000
Files and hashes:         1: 5O4WJBayXN8-T5sAxCOVSxDJECk.roa (hash: 1xrSDNWEV4bb8nFWycmGbVzjtMS9SCVl02w2LA86yYc=)
                          2: G1Ty4WndBpOGD61GKAs-CwP5c2w.roa (hash: l0eAmw+GJHiz9ePv9I+0pPo3dWb64rnkIyzrqbPQk6o=)
                          3: KJ_UKUidS9-7KSDGLThVTELwDhI.roa (hash: dHBmhOaPvkrCjpSOzFqmoqtogZjlMERH8Hhj6/qx0yI=)
                          4: NuEtWDfqstg6Pj9E1KeSos8IDaw.roa (hash: wtuhCZ4o02QJy1QmedWkrl+M7I3hD/AeGG3bB2Srdj0=)
                          5: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: i8GbSinmXiKgQh1uofX2+sYxlPmr3ihX7abPla0fm3E=)
                          6: kMsITRvtaXC741Y_7AjN_jGGmv4.roa (hash: gbq77+xKSdpHzBJMY7zv47/LbqIo3f6akkibyM35M7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:8c:8b:3f:4a:5b:a3:6f:0a:f4:ee:e6:75:6b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Jul 28 21:01:43 2026 GMT
            Not After : Jul 29 21:01:43 2026 GMT
        Subject: CN=37c236d9ab1e62d0fd75b147562ddd59005f7731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:51:68:b7:da:64:85:c0:a6:c0:16:b7:60:
                    d8:1b:59:38:a2:c5:9e:c0:28:b0:6b:1b:07:d5:fb:
                    cd:c3:00:f9:97:32:cb:c5:35:ad:f9:35:2a:6d:07:
                    27:da:a8:9f:70:a8:33:a9:3b:47:d7:68:70:11:d5:
                    c3:3e:a4:55:72:a9:e6:8d:fd:a8:b4:7b:ab:56:61:
                    0d:32:ec:08:24:b0:b4:0e:32:e4:61:08:8a:59:3b:
                    67:87:c8:a3:b7:33:77:2b:53:98:bd:a0:f8:c1:06:
                    54:8b:77:30:97:41:a4:0e:75:4f:64:ce:77:ce:f5:
                    76:a0:71:49:84:0b:f6:8c:1c:c6:3f:5a:0e:e5:de:
                    44:60:4d:83:9b:db:35:a5:11:ff:dd:ec:ad:f1:7f:
                    9f:40:9c:a6:03:3f:ab:a1:99:a0:7a:b1:22:a6:39:
                    4e:f0:6b:2f:9c:e1:58:18:d7:93:6b:5f:03:10:76:
                    d7:77:08:b6:6d:26:1b:1e:d3:a9:ad:de:78:d6:e1:
                    92:56:5e:81:96:00:8a:c6:0a:93:b4:42:f3:30:ed:
                    f4:b3:b2:1d:a8:54:31:7f:1f:f8:07:3f:7b:51:5e:
                    58:db:23:d0:b9:d4:34:39:38:78:eb:44:61:c7:37:
                    46:1b:65:79:aa:0f:28:ea:ca:62:fa:f8:eb:8c:7e:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:36:D9:AB:1E:62:D0:FD:75:B1:47:56:2D:DD:59:00:5F:77:31
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:da:13:83:78:2c:93:04:d8:4c:21:b9:ac:44:86:91:78:0e:
         8d:51:b8:b7:b7:15:e7:70:d9:e1:4a:0d:7d:dd:3a:92:cc:7e:
         07:55:5d:95:82:69:9f:38:6c:15:79:59:15:e4:e6:40:ad:5b:
         47:72:70:a5:95:8b:67:2f:a6:8e:69:ce:ff:a4:9d:dd:18:c3:
         33:df:ac:f1:b0:36:08:63:47:8a:ad:4a:f6:00:66:1d:19:66:
         59:2a:23:bb:cd:32:2f:fd:10:45:b3:21:08:a5:6e:1f:cb:e9:
         9f:42:f7:47:ff:91:06:2e:e5:f0:5e:8a:f8:3c:11:ea:e4:85:
         ad:ed:4f:5b:7b:0d:bf:9b:db:d8:68:14:e6:d3:fa:58:d6:80:
         6b:0b:89:f5:d2:5c:f3:bc:ca:33:d0:18:ef:0c:f7:95:a1:b5:
         97:a5:8f:37:8d:5a:e7:f5:af:13:ea:7f:a5:f7:26:29:91:e8:
         e6:71:8b:3f:b8:85:9d:f5:40:eb:26:ca:6a:4f:db:5b:57:12:
         4f:f2:8d:38:9c:20:77:4c:ed:ad:b4:a3:20:0c:61:0c:b6:04:
         7e:c9:88:37:09:88:c2:4c:74:dd:29:1d:96:36:a5:7e:4e:df:
         32:b7:0a:c1:1a:b8:af:c3:d8:6c:cf:c1:60:3a:aa:cf:8e:ed:
         80:23:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:24:04 2026 by rpki-client