Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File:                     5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier:          MCuISDqlmm3SA16to8AjGsakesym8FIRY5hqxp474a8=
Subject key identifier:   4B:37:83:EB:38:02:4F:05:39:C9:30:D0:1B:E8:79:98:51:8C:D0:04
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer:       /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial:       019F9091203A871DA0A9CECE36FD2429484E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number:          0372
Signing time:             Thu 23 Jul 2026 20:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:57 +0000
Files and hashes:         1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: WFn6OUNAJT0teABmqRL3P98U5aEx5lCYkmfyPlnBE84=)
                          2: C2kt_D4OC_bCATP96J0Lcecrh_Q.roa (hash: /GUtwL0d0bHUSEUzfz0h1Hs+05AAyT7TJrjMS7ynWWY=)
                          3: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:20:3a:87:1d:a0:a9:ce:ce:36:fd:24:29:48:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
        Validity
            Not Before: Jul 23 20:00:57 2026 GMT
            Not After : Jul 24 20:00:57 2026 GMT
        Subject: CN=4b3783eb38024f0539c930d01be87998518cd004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:f2:41:23:1a:36:09:5e:2c:ee:b2:51:a0:
                    d9:38:e6:da:53:e3:95:e1:68:fd:66:71:9e:9d:9d:
                    c8:33:ed:53:ab:de:8a:ca:20:6e:25:21:dc:3e:64:
                    fc:5b:11:e3:0f:7b:a6:b8:fe:c7:8c:ca:d9:9a:ed:
                    7a:d9:1b:df:1d:df:e6:ea:cf:50:56:62:9b:a7:6f:
                    0e:96:ab:45:d9:d3:43:f5:d6:31:e4:60:a2:8d:4f:
                    66:68:4d:cb:c0:8c:bd:2f:70:c8:09:ed:31:b6:1c:
                    b9:66:46:f5:71:b7:15:eb:57:b1:11:29:69:1e:69:
                    f5:e8:1e:14:eb:58:2b:8e:40:67:e2:6f:81:4f:ba:
                    1b:d1:c6:98:a5:6b:db:ba:46:36:9b:5f:c9:8d:77:
                    76:c6:d7:8c:63:d6:1c:92:9d:99:b8:95:c4:c6:b8:
                    ca:ab:42:4a:e7:e0:6d:c8:74:4e:3f:d7:82:f4:0a:
                    26:61:99:10:b3:32:3d:39:3d:86:0a:18:d3:12:2d:
                    7d:31:f6:ac:ea:48:11:f1:e8:01:0d:2f:a7:75:aa:
                    14:a4:b9:88:0f:6e:11:20:d5:e2:6a:ab:6c:62:c8:
                    c0:72:22:10:40:19:c7:c3:6a:02:85:d2:4a:66:76:
                    b4:c2:f2:f0:fc:24:b5:df:8e:44:ce:2b:00:28:6f:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:83:EB:38:02:4F:05:39:C9:30:D0:1B:E8:79:98:51:8C:D0:04
            X509v3 Authority Key Identifier:
                keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2b:11:6b:3b:1c:ec:dc:61:c9:e2:e1:67:b9:17:36:fb:99:
         ad:81:e1:b9:7d:91:db:66:c7:08:4b:8c:f2:98:da:c1:b1:cb:
         e1:c1:fa:9f:63:c7:ef:a2:41:b7:8a:c9:0a:29:20:6d:1d:2c:
         4a:58:7f:b5:5f:2f:42:ce:9c:df:6d:79:4f:92:cf:29:b4:9b:
         d7:f3:c6:2d:3e:ab:97:ad:c2:26:be:cd:2e:8c:37:3c:17:9d:
         58:c4:ec:1c:ed:7b:fd:d7:fa:bf:f7:96:00:46:e8:64:96:bb:
         04:71:59:f9:e8:e6:60:06:be:89:0e:9f:29:79:95:d2:76:06:
         d1:3e:07:44:82:b2:5c:71:ea:91:61:ab:93:29:29:a2:ce:24:
         6c:68:5e:0a:b8:8d:41:28:73:a4:ba:f5:86:92:81:08:01:be:
         9e:43:1b:3d:70:6c:17:c0:ce:b3:3a:c6:a0:77:ae:50:de:0f:
         28:8b:67:d1:43:d2:9d:8c:3c:e7:98:11:9d:67:fa:d2:ae:35:
         1a:26:0b:b8:96:ec:3d:39:6c:3e:dc:17:9d:4b:0d:a7:87:81:
         64:36:41:d6:86:e3:70:29:e3:f8:d1:8f:c1:75:f4:c6:04:bc:
         28:de:51:ed:f5:d9:2c:95:80:7f:64:33:72:f2:fd:6c:8a:2d:
         31:e1:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:36 2026 by rpki-client