Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
File:                     5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json)
Hash identifier:          S7nkcujJ7WhnOe/3CbCxdwnMjs+aetz/wFsfghLlyqI=
Subject key identifier:   00:D9:AE:1A:8F:CB:E5:B9:8A:A4:A5:3E:3D:95:58:A0:30:95:43:06
Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
Certificate issuer:       /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Certificate serial:       019F8F7E68298632775AE7FB581439AE7E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 15:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:53 +0000
Files and hashes:         1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: PDC/0vkvBQ+OCCOhxfUgXO5d2MEVpV4hNsDmplv8A9Y=)
                          2: hHUeXEtpbVkoe8mRwdFZ7Npu46s.roa (hash: miQnkWv8mirrfM7hx7qM+NHg3ouKJ2L8VE2wiL5w/Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:68:29:86:32:77:5a:e7:fb:58:14:39:ae:7e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
        Validity
            Not Before: Jul 23 15:00:53 2026 GMT
            Not After : Jul 24 15:00:53 2026 GMT
        Subject: CN=00d9ae1a8fcbe5b98aa4a53e3d9558a030954306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:b9:6f:59:d8:60:58:27:7a:c4:ba:13:80:
                    59:d7:87:1f:94:66:cc:02:a9:a0:3e:5f:df:7d:e9:
                    72:d2:ee:18:e4:cf:35:55:1c:76:16:ec:b7:1b:59:
                    47:54:bf:68:82:f3:27:e8:83:a5:f4:0c:96:8d:fb:
                    cf:3c:da:f4:6c:80:0e:57:ce:28:e2:4d:c2:b7:79:
                    04:92:fd:eb:ae:8f:c7:8b:9a:39:d0:7b:b3:fa:9b:
                    52:cb:75:ea:62:af:d1:5d:18:cc:d3:33:c4:34:8e:
                    23:a9:ff:09:cd:c7:e9:63:52:fe:eb:a5:47:c6:74:
                    a3:08:05:e5:84:61:ef:6b:be:97:ec:2d:ac:5b:23:
                    f3:06:fe:eb:a6:43:4d:d8:12:c6:3f:fa:73:ad:60:
                    8c:e7:90:c7:f3:f3:61:b6:dc:fd:c2:6c:69:18:27:
                    f3:46:0b:c5:08:d8:dc:16:f5:58:50:39:4a:94:d1:
                    54:75:c6:9c:10:13:83:45:c8:78:05:cd:21:84:45:
                    f4:f7:cb:93:fc:5d:f5:1c:dd:2b:38:cf:40:ed:af:
                    72:a4:8c:a7:ee:d9:9d:a9:c2:80:ae:84:31:e4:b9:
                    35:f0:0a:0e:31:8e:3c:bf:4f:19:36:db:11:8c:43:
                    d5:5a:0f:e9:e9:48:8b:af:55:6b:50:fd:90:26:70:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D9:AE:1A:8F:CB:E5:B9:8A:A4:A5:3E:3D:95:58:A0:30:95:43:06
            X509v3 Authority Key Identifier:
                keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c5:70:3c:6d:12:04:81:4d:4d:ec:10:b3:25:38:09:99:e0:
         c5:ab:da:c3:61:3d:ca:cb:0d:98:69:34:e6:e9:54:d7:b0:75:
         74:49:79:b3:82:0e:bc:5e:00:39:48:73:ec:19:e2:d7:d9:3c:
         7b:2f:cd:20:97:a1:a7:de:66:70:16:18:e0:97:84:25:80:85:
         0d:97:21:13:6e:41:ef:ca:1b:6b:f9:2d:6a:08:aa:04:02:ab:
         05:ad:70:be:21:ba:c5:53:fd:4c:f2:91:48:65:ff:37:d9:db:
         06:cb:85:8a:3a:94:7f:60:3a:6b:8a:b2:a9:67:16:e6:ac:c3:
         ca:df:e2:52:86:c7:57:f3:58:a0:55:21:0f:ad:fc:a7:eb:fa:
         1f:74:f6:64:1f:93:fa:f3:15:49:2b:a0:f9:b0:5a:ca:41:d5:
         46:8a:d7:b5:0a:58:42:d2:1a:1b:0e:73:2e:e5:c8:a3:02:da:
         1c:24:37:b5:1b:bc:aa:0d:a6:49:71:19:69:1d:28:ef:1a:e6:
         3e:4a:08:61:1e:2b:a9:b8:8d:71:2b:a5:8c:8d:d8:0c:df:e3:
         77:0c:c5:39:5e:e6:5c:62:79:1f:4c:f4:f8:bc:6a:db:b4:c6:
         26:e7:2f:90:06:93:67:f4:b4:a3:45:0a:ee:d7:2c:bc:11:e3:
         aa:e8:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:19 2026 by rpki-client