Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          NOljqwwzj7X65+ZLEi2jcgk9nfWrkD6RGXOmg4F60u4=
Subject key identifier:   5A:77:12:1A:F6:43:E0:82:D4:F7:84:33:7E:1B:1E:09:E5:BD:86:70
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       019F8F7EC0CC6C5C44F9F9E252A9F02384B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0E13
Signing time:             Thu 23 Jul 2026 15:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:16 +0000
Files and hashes:         1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: c0+Eb4ZK40bysrkk6i0ZQfsSwW6B665/VhbOgE55JB4=)
                          2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:c0:cc:6c:5c:44:f9:f9:e2:52:a9:f0:23:84:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Jul 23 15:01:16 2026 GMT
            Not After : Jul 24 15:01:16 2026 GMT
        Subject: CN=5a77121af643e082d4f784337e1b1e09e5bd8670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:cc:5c:f2:3d:51:7a:4e:91:56:16:39:87:
                    5a:e2:b2:e3:ca:62:2e:5f:50:db:cb:d3:a6:05:42:
                    71:dc:2f:9a:81:ec:8c:52:af:69:e6:a2:2c:19:d5:
                    8d:5f:f4:6c:4e:e9:19:5c:ee:35:a8:94:fa:d6:65:
                    3d:1b:c1:89:da:e8:fe:c4:0f:09:41:75:52:84:4e:
                    c0:5a:25:3c:54:5e:cd:c7:b2:9a:bf:a4:27:22:6e:
                    2c:b3:60:a6:63:f9:84:ff:20:1b:41:c2:36:3f:cb:
                    6f:e2:43:1b:bf:c2:92:ff:08:7c:6a:5e:e2:6d:6d:
                    37:3a:be:eb:8b:6f:19:bd:80:57:fc:3a:79:17:63:
                    44:eb:95:cc:b0:3a:a9:53:ed:ab:ba:cc:ab:70:20:
                    16:b4:b7:b8:50:34:8d:74:86:c2:f6:42:d0:40:1d:
                    ab:ee:fb:e4:32:d6:12:58:74:ab:8a:6e:5a:17:b4:
                    82:2c:f2:bb:36:59:4b:d1:23:aa:65:b0:9a:07:04:
                    ec:48:3d:07:bd:47:c9:29:39:f9:21:41:34:27:d5:
                    a5:8a:eb:60:43:db:28:55:64:6a:54:af:33:30:62:
                    91:68:4a:7c:be:92:1e:8a:2f:e1:ad:a8:ef:ad:32:
                    6f:cf:04:0d:53:8e:45:ef:2a:38:86:df:8d:1d:ef:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:77:12:1A:F6:43:E0:82:D4:F7:84:33:7E:1B:1E:09:E5:BD:86:70
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f3:5d:76:96:24:1e:ac:bf:8f:57:46:6e:68:49:54:f7:ab:
         57:e5:83:38:ef:be:41:61:9d:9e:d0:49:a8:c6:aa:dd:7a:61:
         9a:94:1e:7b:3c:7a:cf:63:ba:c3:f3:47:ea:27:a6:f3:89:e3:
         20:9b:36:91:c4:39:0d:d6:5c:68:5e:64:6d:65:5e:94:93:a7:
         52:0e:23:c6:67:43:dc:9d:a3:27:a3:77:b7:d3:43:51:8a:72:
         50:08:77:42:c4:3e:15:f5:2f:44:03:d2:d1:92:9b:c6:a2:5f:
         59:f4:4b:8c:62:9a:7a:f1:f0:fc:9b:91:f1:0b:83:ab:40:27:
         f7:72:e7:6c:d6:96:d2:67:ee:63:7e:d7:65:f2:88:3e:09:94:
         23:9d:3f:3b:65:60:7d:73:ae:e1:9c:e2:53:44:a0:a8:c5:a0:
         b6:24:cd:1d:49:3a:f3:c4:c9:16:20:29:9f:ee:47:aa:12:b7:
         90:a6:f0:c7:91:3b:de:85:f4:12:ec:02:80:6e:28:34:28:94:
         ed:8d:f5:4a:5d:bf:9e:15:2b:40:19:47:30:03:ab:47:f3:78:
         69:2a:94:d9:24:03:43:59:11:62:51:ce:30:d3:f7:28:f8:85:
         41:9a:23:2c:12:2a:d7:71:45:bf:60:bf:f6:0a:a5:55:a1:7f:
         77:4b:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:04 2026 by rpki-client