Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
File:                     uH5a7bmaKXmvirMZP1RhzMEJk7s.mft (raw, json)
Hash identifier:          za4fVtEndCM9QT0VoAnwE7FSL9FUneg9LmUIak3Q3JU=
Subject key identifier:   60:BC:FB:98:E9:53:21:DA:C7:35:16:3A:FE:EC:D0:FD:1C:BC:E9:22
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Certificate issuer:       /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial:       019FAC75E547E84095B49E39E7F93F8753C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:35 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:35 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:35 +0000
Files and hashes:         1: PF8e_FHLHP2VjtFiiZZrvVvSsLI.roa (hash: e0MfoAAfwbq4ZZJ6qywKn5Vxfb/htSXVtX0d+TDmu3Q=)
                          2: R6M5qpYqqxyZqbcHLnctbf1Dg8M.roa (hash: RqgRuP5NzyvHUqZZDLI5gw5VV1GhQB+IWzarebNgEt0=)
                          3: havRenuAc3sWaFEp_ebH2dbYCIM.roa (hash: 3BZzhi4aYFSabiKQhAbLpfZdvk/co2C3Nc0BqHQrAGU=)
                          4: i8AN6geVF7hp5kMKRq_5tnIP6L0.roa (hash: oBfxy68KZXNPogj6PQRYfnFb/uYEC+FuyX64lWOc4jQ=)
                          5: uH5a7bmaKXmvirMZP1RhzMEJk7s.crl (hash: L/txdb4fecHJnbVx59nKvbcCbrd2YyhuE7dxdt+khxc=)
                          6: xsv50bdrlhjVslC-d3EfouTes9E.roa (hash: qOUxvczcP9qEDQf8ITK1cqOoImWNAIXwxpiqhps+Npk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:e5:47:e8:40:95:b4:9e:39:e7:f9:3f:87:53:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
        Validity
            Not Before: Jul 29 06:00:35 2026 GMT
            Not After : Jul 30 06:00:35 2026 GMT
        Subject: CN=60bcfb98e95321dac735163afeecd0fd1cbce922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:87:23:b3:d1:29:2d:94:02:c6:a6:82:cd:
                    ab:69:39:ee:8c:c8:f7:2f:53:7f:0d:f8:de:ec:5f:
                    2c:8e:90:57:07:16:36:4c:e5:00:09:15:c4:c7:78:
                    2a:c1:bc:42:03:15:89:22:63:11:fc:92:25:3e:e8:
                    8e:b7:3e:1e:99:2f:28:44:50:6a:ff:35:f6:80:c2:
                    19:c8:ff:8c:f1:24:5b:c5:73:93:1c:be:3b:6b:05:
                    74:6b:8f:ec:72:83:1b:ff:13:54:70:28:51:ee:66:
                    f9:00:07:41:9c:dc:4b:33:43:34:24:c5:19:cb:1c:
                    27:83:6a:c7:35:f8:aa:7a:e3:b9:df:48:b2:74:b4:
                    0b:29:df:74:fd:a4:f1:fc:07:a4:28:ad:60:68:89:
                    31:65:f1:dd:e3:2b:15:17:96:a1:00:99:80:ce:cd:
                    5b:02:ba:97:38:66:95:54:8a:ce:86:d7:37:d1:ae:
                    1f:16:2f:25:10:7a:a8:2e:6f:9f:cb:5e:82:7f:d5:
                    fa:29:6d:00:7e:5d:9d:bb:59:16:26:07:27:45:b0:
                    23:df:ca:91:03:36:61:b3:36:1c:59:05:36:89:d5:
                    38:02:df:09:16:e7:83:20:e6:03:73:3f:4b:c9:af:
                    4f:b1:a4:d6:05:46:53:13:a7:1a:d3:e6:e4:95:cd:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BC:FB:98:E9:53:21:DA:C7:35:16:3A:FE:EC:D0:FD:1C:BC:E9:22
            X509v3 Authority Key Identifier:
                keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:af:f7:86:09:16:39:c4:40:8e:6a:e2:1b:b2:90:34:de:
         f8:28:63:7e:fd:af:4b:94:08:0a:38:5d:63:df:d2:3e:21:ff:
         68:ed:73:7f:c9:aa:14:6e:ed:76:25:36:55:1a:4c:4e:7b:c5:
         09:bb:72:82:b4:46:4f:dd:43:22:81:0b:d0:72:7a:ff:40:e3:
         98:49:35:3c:bc:33:1b:3f:56:f7:e7:d0:df:9b:c2:22:89:e3:
         d5:4f:83:0c:9f:63:36:06:d3:d0:f0:05:f1:94:76:e9:0a:b9:
         a3:23:71:06:d3:27:a1:12:da:7b:26:f8:d0:69:b4:bd:23:20:
         ad:55:bc:cd:9c:30:36:83:b6:b7:6c:2c:13:dc:68:8e:bc:67:
         13:31:37:32:4c:4b:32:04:ca:e8:d6:e5:d6:3b:2c:64:56:2d:
         f0:18:ba:20:32:88:d8:d8:18:05:95:79:ce:ae:aa:9c:22:db:
         ba:af:f4:b3:b1:9e:3b:5a:81:6f:93:5a:16:36:f8:1c:f5:68:
         60:4a:c3:fd:63:43:e5:de:19:73:de:1c:0e:ab:ee:1f:bb:4c:
         0a:11:89:5c:bf:36:fc:56:e6:06:64:14:15:a9:e0:58:ce:ae:
         46:1c:54:10:4d:94:fd:63:c9:c8:f4:8c:18:34:7f:c0:1f:26:
         c4:51:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:42:25 2026 by rpki-client