Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File:                     5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier:          NT0BnROfxOLu7pNgNJf2E8eWls18Z7uJFzWYFaYYle0=
Subject key identifier:   2B:89:51:CC:F4:31:22:E2:95:8C:27:AD:09:26:01:9F:80:DA:D4:C1
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer:       /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial:       019FAA50D16768081E6E7F74366C173FD14D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number:          0886
Signing time:             Tue 28 Jul 2026 20:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:50 +0000
Files and hashes:         1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: D4V0H/SFNkSFjFeKDXDtCDwiqVAdk7Q67Ot5vOZVuYs=)
                          2: vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa (hash: Ft3k1GMH35DD813n5Ke6tEuRDCxpQCa27sS+PQPuKK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:d1:67:68:08:1e:6e:7f:74:36:6c:17:3f:d1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
        Validity
            Not Before: Jul 28 20:00:50 2026 GMT
            Not After : Jul 29 20:00:50 2026 GMT
        Subject: CN=2b8951ccf43122e2958c27ad0926019f80dad4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:75:c7:5c:27:58:af:fb:8a:18:c3:80:ce:
                    9f:24:25:9e:a7:57:13:a7:cd:a5:64:ff:07:62:60:
                    1d:1d:22:33:e3:31:e0:cd:25:77:26:f5:9b:09:8a:
                    44:a3:98:35:12:1b:90:9f:73:80:b2:c4:98:99:0b:
                    c2:9b:27:88:eb:c8:78:49:4c:03:5a:93:4e:d2:d6:
                    2b:b1:09:4f:08:18:e4:18:c2:a2:de:d7:60:d0:df:
                    e9:44:ee:87:54:d1:41:d2:9b:0a:30:6e:2c:0d:cf:
                    86:d8:dd:45:4e:f8:e3:43:5e:4a:fe:f2:8f:92:5c:
                    2a:6e:e6:f1:73:f5:1a:21:bf:c4:ac:4a:07:f1:8b:
                    4e:68:ee:8b:33:61:a6:75:f6:a1:a7:d8:73:04:ed:
                    76:be:ab:dd:95:b2:1f:b7:06:5b:de:9a:7a:15:87:
                    95:a9:64:ec:55:0d:5e:6b:77:00:58:78:4c:1c:8a:
                    44:b7:52:b0:5d:a2:53:97:88:60:fc:de:8d:8f:4c:
                    a1:1f:b1:3f:e5:4c:0a:a5:99:81:fc:b2:ab:c1:a5:
                    ec:85:01:8b:26:55:aa:82:fc:cd:d9:98:8d:83:8f:
                    f6:f8:20:ba:db:27:fb:76:6f:de:09:dd:02:7f:fd:
                    28:81:d1:75:88:cd:06:c5:df:04:6f:28:ad:b3:39:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:89:51:CC:F4:31:22:E2:95:8C:27:AD:09:26:01:9F:80:DA:D4:C1
            X509v3 Authority Key Identifier:
                keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:47:df:b2:ac:dc:c9:86:6f:7a:46:08:29:97:60:72:eb:f6:
         67:d2:eb:7f:c2:06:07:97:9f:fd:70:35:7c:42:87:81:ff:bd:
         2e:46:a1:41:a5:d6:9c:85:9a:e1:9f:16:ef:9a:c7:0f:4e:84:
         08:19:c6:25:2b:8f:81:20:71:1c:24:ed:7b:1a:87:01:bc:89:
         b0:cd:36:50:09:38:c5:01:24:f3:91:cc:ed:b3:f6:f3:ca:3e:
         01:f8:61:cb:8c:c8:a2:8b:9b:fe:1f:54:22:92:ee:b2:08:97:
         42:e4:93:a7:eb:b9:0a:9f:22:59:ca:40:28:4c:67:63:f1:1f:
         c9:e4:25:4d:f2:39:5d:09:a4:5e:06:ae:3b:8f:aa:fa:5b:c0:
         76:c8:30:d2:ee:22:fa:3f:b4:07:1a:45:74:6e:1f:2a:2a:3f:
         6d:db:85:e4:38:1d:a7:44:a9:6d:71:2d:8f:e5:81:24:90:06:
         f2:07:20:68:24:b9:06:3e:f2:bc:49:ca:ad:11:31:e8:1d:e1:
         e0:87:ad:ee:19:54:ed:d9:1b:25:70:68:88:96:f1:df:ab:d5:
         1d:c3:b9:de:ab:1a:8a:44:59:04:46:eb:db:c1:a9:a9:f1:28:
         d4:92:97:e7:46:1b:5c:f1:59:20:b5:cd:37:c0:db:a5:16:4e:
         2a:fe:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:52 2026 by rpki-client