Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          TM9La1J8G2X7Pg5LoWxCGebQ9IqB8Veb/YPkPfjBJqU=
Subject key identifier:   36:4A:D9:FE:E8:7F:1E:59:D7:BD:8E:F6:4D:4E:E4:F2:76:34:78:14
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       019F916D05822E3235D879CB2BDD0639B2F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0E14
Signing time:             Fri 24 Jul 2026 00:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:08 +0000
Files and hashes:         1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: u5AD1FkekJsOrjwWKDRZm4OOvwwDxnk5+pA0m6BSnos=)
                          2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:05:82:2e:32:35:d8:79:cb:2b:dd:06:39:b2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Jul 24 00:01:08 2026 GMT
            Not After : Jul 25 00:01:08 2026 GMT
        Subject: CN=364ad9fee87f1e59d7bd8ef64d4ee4f276347814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:5f:0a:b1:84:a5:1c:00:8d:5a:2b:f3:33:
                    ef:49:90:5c:f0:43:a2:78:0f:4c:65:c6:ea:9d:0f:
                    b5:1e:aa:8e:90:30:39:f3:55:31:c2:ac:bc:8f:b6:
                    04:8e:6d:77:20:03:28:50:f3:e9:e7:2c:6b:23:63:
                    49:33:f1:82:78:05:79:05:5f:e1:f6:54:a8:09:b8:
                    da:3b:f2:5f:a1:84:d2:d6:9e:04:73:8c:b1:6d:31:
                    05:5f:f0:17:f0:1e:aa:24:52:72:ec:9e:e2:9e:0b:
                    f1:22:08:bf:3f:22:51:05:79:e4:30:11:51:cd:e4:
                    72:2a:79:b4:34:b9:e1:a4:bf:5f:bd:00:dc:6d:db:
                    e7:c7:85:b7:ba:15:44:a7:f5:57:6d:45:12:ca:2a:
                    bf:3c:1b:52:75:f0:ad:65:ff:ec:fb:e3:32:5a:87:
                    e6:20:ca:66:c3:22:b1:f1:31:6d:42:55:ed:fb:2c:
                    b3:b0:cc:9f:d5:2b:89:50:06:d1:06:a9:a5:16:13:
                    61:a2:c8:c4:44:e4:32:bd:8d:71:49:4e:c4:29:78:
                    b0:44:e4:d3:3a:fc:81:bd:49:75:44:96:24:0d:97:
                    55:85:2b:68:bc:71:ae:57:50:8f:80:c5:60:ba:95:
                    85:28:14:14:11:5a:9a:58:d1:89:9d:57:50:4f:58:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4A:D9:FE:E8:7F:1E:59:D7:BD:8E:F6:4D:4E:E4:F2:76:34:78:14
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:b3:3b:d5:59:f1:bf:9d:d2:c9:85:b9:99:10:5c:b8:97:
         65:73:a5:99:18:2b:e7:fe:13:5d:47:c2:ef:ac:38:e7:a8:c6:
         e7:62:c8:d1:61:e7:7e:2d:dc:dd:ad:85:40:aa:a7:9a:7c:7e:
         80:3c:76:58:57:5e:48:ee:f0:22:c7:5d:a8:d2:c6:61:cd:d3:
         eb:6e:72:ec:48:e8:05:ce:e7:a9:a0:8a:a3:b7:ae:23:8a:ee:
         87:51:51:fd:9d:5a:95:2e:cf:16:b3:20:5a:1f:9e:2d:1f:57:
         94:2a:26:40:a8:15:43:e9:df:19:1b:13:7e:da:1b:30:68:61:
         9d:fe:a4:ca:96:93:e7:37:2e:36:47:32:40:21:52:27:98:6d:
         1e:33:77:bc:70:af:5a:d0:e2:7e:70:3a:ff:55:51:35:53:6a:
         ab:96:7a:79:27:15:cc:de:17:30:c6:62:d2:02:aa:ab:a2:6c:
         74:7e:86:c0:6a:36:b1:aa:e9:8c:a9:e3:7a:60:bf:ce:92:dc:
         67:35:fb:54:2e:90:66:e3:52:88:2e:bf:43:f2:98:27:31:d3:
         1a:09:e9:75:2d:93:f5:58:bb:19:e0:0c:2d:ac:1e:b1:fd:82:
         a9:25:ea:5b:f2:6b:09:7e:9e:37:83:e9:a2:d0:39:33:1f:63:
         9e:cd:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:07 2026 by rpki-client