Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File:                     _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier:          DZNeStNgfS7BOtNp1Z3NKAi4o3RlwVqUTpKLPSnB5AM=
Subject key identifier:   E0:D0:C1:95:89:6C:AF:B7:4B:06:18:28:63:AA:D1:A0:7B:AE:F7:F8
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer:       /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial:       019FAC0893CA77D83676F13E5B20661774C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number:          0865
Signing time:             Wed 29 Jul 2026 04:01:10 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:10 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:10 +0000
Files and hashes:         1: 2l3jy0ks1GMTVrjjYXvE6dhr2UM.roa (hash: L4oxBugG8SBzHeTSIckApzq3w111E1/nbM2VYS8YHuw=)
                          2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: r0gChqoRHBheQuS4yFyfWKxEGrNN6J9jfrSMAKPt1WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:93:ca:77:d8:36:76:f1:3e:5b:20:66:17:74:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
        Validity
            Not Before: Jul 29 04:01:10 2026 GMT
            Not After : Jul 30 04:01:10 2026 GMT
        Subject: CN=e0d0c195896cafb74b06182863aad1a07baef7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:23:35:71:36:b1:7e:9c:b2:51:03:90:3f:
                    44:67:73:75:fd:81:4c:db:05:d7:a2:ab:35:12:50:
                    b1:cc:7d:f5:db:eb:70:4c:f3:1f:50:be:e7:f6:6a:
                    6c:60:9a:dd:b9:ae:e6:0a:47:e3:b5:c8:7a:80:d0:
                    42:b5:a7:30:68:9e:2e:55:c9:e8:3a:4d:91:65:f6:
                    c3:b7:26:ce:9c:8f:3b:31:9a:9c:00:4f:6e:18:fb:
                    60:26:f0:9f:76:98:a4:12:a7:4e:92:90:9b:c7:cf:
                    1e:7a:07:2d:90:f5:c3:92:c5:14:aa:77:22:7b:a9:
                    72:e6:9d:e8:50:4f:29:a3:d7:d0:97:2f:39:4a:b0:
                    c1:47:ea:dd:d2:fe:b0:1f:f4:ff:3b:03:89:b7:fa:
                    9d:d7:f8:90:41:32:d3:bc:c6:bf:6a:03:76:04:3e:
                    d7:a2:45:b9:c9:11:37:47:c4:0c:28:1e:0e:2d:78:
                    66:92:63:f9:34:49:d7:81:88:d8:3b:98:c4:80:52:
                    37:f5:14:78:ba:d9:31:71:ed:21:dd:ec:1d:f8:f7:
                    9a:80:e0:4f:1f:af:22:24:53:af:ae:09:21:37:bf:
                    9c:f2:60:55:8c:cc:6d:14:ec:0a:21:a5:0b:53:0d:
                    68:ca:5c:6c:9e:ed:e0:0a:6e:bd:85:6d:3b:84:39:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D0:C1:95:89:6C:AF:B7:4B:06:18:28:63:AA:D1:A0:7B:AE:F7:F8
            X509v3 Authority Key Identifier:
                keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:48:15:9a:fe:f4:6a:be:5a:ac:98:39:0a:fa:37:1d:9c:fe:
         b0:07:57:25:ae:26:06:e2:de:05:58:e8:d5:4e:12:f4:aa:e9:
         57:25:da:73:19:ab:4a:19:06:bf:43:61:6d:44:4a:e8:69:1f:
         ec:1e:c9:85:bb:4a:5c:76:b4:cc:b2:31:3a:4b:73:06:63:e4:
         cc:42:a8:bc:23:07:ee:58:ad:b2:58:5a:53:0d:a5:d0:65:30:
         b9:73:36:27:da:a9:da:bb:ce:3b:bb:d9:a9:14:5f:18:7c:34:
         d4:5b:cb:81:07:84:3c:e5:9c:7e:45:77:07:6d:87:9f:1f:f8:
         24:bd:61:2f:a0:70:8d:04:f3:35:b7:b0:71:b4:62:08:c1:b8:
         42:42:38:bb:ff:b0:f2:58:43:9e:96:43:6f:65:24:15:20:ce:
         d3:11:98:a1:57:bb:70:04:f4:b7:58:b6:55:42:2d:13:14:4a:
         1c:70:ff:8a:0d:8e:3b:f6:bb:27:d2:f7:8e:65:22:84:e6:33:
         f0:6c:c1:b5:0f:24:86:6b:d3:71:5d:f9:e4:0e:5f:d8:af:0c:
         19:2e:1b:87:47:a5:09:bc:46:13:e8:00:db:ac:5d:69:70:fb:
         09:31:71:40:bc:a0:32:6e:ba:c1:9c:44:ad:25:b4:2b:fd:62:
         ec:3f:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:35 2026 by rpki-client