Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File:                     5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier:          g0AuTdvcHB9GvXO36cdQe/SYH7TwD3nXZnT/fhnPpwE=
Subject key identifier:   F6:E4:1A:B1:7E:26:DD:76:24:B2:56:A9:9D:EB:EF:0A:8C:14:D5:63
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       019F935AEC6975CD1F00A134ACD69EC4250F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number:          0B8B
Signing time:             Fri 24 Jul 2026 09:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:37 +0000
Files and hashes:         1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: kVYCZUBxbw8CTCZNhxZiSwag8eRrFH2PFQFmpP5k/74=)
                          2: nwkylzsl9GQOKn32orn5yakjbK0.roa (hash: /75YPo5s/Ms0uyukdFXeyU5GUYakwPsjdM3EpdWBr4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:ec:69:75:cd:1f:00:a1:34:ac:d6:9e:c4:25:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Jul 24 09:00:37 2026 GMT
            Not After : Jul 25 09:00:37 2026 GMT
        Subject: CN=f6e41ab17e26dd7624b256a99debef0a8c14d563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:58:5d:87:5b:ec:f7:81:26:77:67:87:cf:
                    fa:1f:42:97:4f:02:af:69:dc:c9:f4:f6:ec:d3:18:
                    85:bd:6e:02:94:fb:16:7f:ab:53:c2:96:63:cb:dc:
                    0e:8d:6f:50:e9:e9:e1:43:ae:3b:71:ee:67:66:c4:
                    66:32:8e:ca:01:bc:a1:c8:c5:97:59:9a:27:58:10:
                    2f:91:bb:c0:27:08:bc:28:ae:cd:2c:26:f0:a2:06:
                    e1:f6:25:71:c3:86:af:82:73:0f:37:d5:3b:99:72:
                    7b:9d:1b:a1:74:dd:9f:a9:ac:fc:27:b8:ff:c3:00:
                    82:90:92:87:54:e8:71:a1:0f:80:36:57:68:0d:d7:
                    af:1c:54:b2:76:f9:b9:fd:75:c9:1c:46:b6:5b:7d:
                    e4:07:8a:06:26:6c:54:a6:52:e1:15:1c:40:0e:d7:
                    44:7d:32:36:ec:26:75:d0:ab:d2:74:bf:43:50:f5:
                    46:b2:8f:6a:3e:d5:19:57:cd:77:76:58:3a:39:2f:
                    9a:0c:68:a7:6c:3c:a8:19:e7:10:28:48:2e:f4:30:
                    fe:6f:9a:7c:32:af:52:1a:92:6c:bd:34:ce:c3:0a:
                    f6:ac:e5:74:85:88:31:e1:4e:1e:a5:ad:50:06:a7:
                    c2:9c:c2:24:0d:29:cf:8a:18:76:d7:27:20:11:84:
                    b2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:1A:B1:7E:26:DD:76:24:B2:56:A9:9D:EB:EF:0A:8C:14:D5:63
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:ce:1f:e6:ed:33:87:43:27:7a:c9:f9:67:c7:7a:f5:0a:
         33:a2:2e:82:35:06:af:ff:bd:77:b4:f0:38:96:4a:50:48:9a:
         be:de:b1:78:cd:31:f2:c0:cf:a3:cd:16:af:ae:cf:95:0a:71:
         17:8b:6d:dc:66:5b:97:38:a9:7b:93:78:fd:9e:74:79:01:61:
         03:bf:92:fe:36:40:cb:63:3c:81:f3:44:32:92:79:27:74:16:
         10:e2:84:63:47:c2:04:e6:c3:27:61:1a:f6:dc:97:59:39:55:
         f9:09:be:b4:ed:8e:2a:11:f1:b0:4b:20:e1:cc:7c:a1:dc:27:
         9b:07:9d:32:56:a7:bb:56:2b:6e:9d:02:7a:cf:3d:ec:76:df:
         7b:c6:69:f3:ae:d2:c2:6a:49:33:ec:f1:bb:24:66:f8:fa:20:
         6e:5a:a2:e9:2c:1f:1d:0c:d5:7e:20:9e:3d:99:2f:3e:9a:4d:
         bb:fe:f0:a5:f1:b1:6a:77:13:75:af:4a:79:8f:29:5d:55:67:
         d4:88:62:ed:82:59:82:a1:43:0c:0d:9d:5f:3f:0d:5f:f2:d2:
         ca:f4:c0:49:12:28:c2:9a:cd:2f:24:36:c2:07:30:2f:ac:7b:
         0a:2a:3c:bc:e6:d0:98:29:9a:3b:4b:42:d0:a5:6c:de:c4:16:
         b9:99:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:05 2026 by rpki-client