Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File:                     5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier:          21Y4MKJKZDoe55a/jjOdDtTyEE4TAb16eEWCM0zpgDI=
Subject key identifier:   FB:6E:EB:61:CE:92:61:09:C1:33:40:24:F6:B3:A8:C1:03:18:6E:46
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer:       /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial:       019F8ED91BC3BF749EA96E3ED3D44886E6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 12:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 12:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:20 +0000
Files and hashes:         1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: iLWpE1mSmI2qcy00yszSGNWmqQkM7H/r5XUyIFldIpY=)
                          2: DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa (hash: FTS7rWAdFS8UyAMp19YH0zdu88+Df8yK+Znwjqplx54=)
                          3: sA6Qf2_ToIyGcsbWCFpl1ww3zYM.roa (hash: wfbilCSxn7pd6CKUaeLQcmM0OSGs3jIpHSCViiEgaxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:1b:c3:bf:74:9e:a9:6e:3e:d3:d4:48:86:e6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
        Validity
            Not Before: Jul 23 12:00:20 2026 GMT
            Not After : Jul 24 12:00:20 2026 GMT
        Subject: CN=fb6eeb61ce926109c1334024f6b3a8c103186e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:35:72:99:25:ba:44:31:91:a0:34:30:9a:
                    36:43:c9:87:f0:6b:5b:f1:0d:20:5a:c0:3b:5b:6f:
                    6b:79:0c:52:83:c2:ca:0d:da:52:cf:4b:3e:30:ff:
                    6e:17:df:45:7a:8e:38:65:e2:ba:f5:97:07:74:00:
                    be:58:38:07:7c:fc:10:60:c5:3d:e5:17:44:fb:e2:
                    8a:5e:c1:31:1c:58:7d:e9:c2:1a:f7:88:33:3b:c7:
                    c4:d1:d9:d1:9f:5a:f9:a3:fe:74:60:8b:93:92:37:
                    be:84:03:05:56:6c:f2:02:44:ef:c1:d0:d8:77:67:
                    fb:33:19:8a:fa:6c:c4:28:b6:1d:74:f4:44:90:17:
                    aa:1c:83:db:1e:c6:89:0f:c7:ed:e5:a7:50:e9:ed:
                    49:53:c9:89:fa:be:3e:79:a6:33:88:3c:33:1e:c7:
                    b0:07:a8:05:a8:1c:43:11:df:5b:4e:dd:b5:0a:cb:
                    7e:4d:58:1f:bc:64:41:95:16:8a:83:24:11:65:95:
                    cc:94:d5:72:52:08:ec:06:1d:50:f3:62:21:12:5a:
                    6d:e4:28:e0:f4:f5:65:cf:de:d3:81:16:a8:46:26:
                    a2:ef:25:b1:78:78:83:62:4b:ae:05:b5:7e:6c:67:
                    03:95:f1:f7:09:d4:b0:5d:99:d1:58:17:4e:c8:8d:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6E:EB:61:CE:92:61:09:C1:33:40:24:F6:B3:A8:C1:03:18:6E:46
            X509v3 Authority Key Identifier:
                keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:bd:85:e5:00:e6:cb:41:4e:88:20:b7:6e:57:3d:53:21:
         e9:fd:62:6a:f9:a9:78:bf:87:c6:43:3f:a1:12:48:37:94:ab:
         c5:de:d3:d5:59:81:68:b0:64:6b:5b:e7:fb:93:77:5a:14:29:
         d1:d7:f9:db:d7:4a:5a:bf:10:e8:4e:fc:84:8c:7a:3a:b3:9d:
         06:83:a6:91:be:16:7c:08:08:77:38:8e:1d:f9:92:f0:98:7a:
         a4:b0:42:b5:8d:ff:03:98:60:a2:39:3e:ac:6b:7a:31:d5:fd:
         40:24:2d:50:37:46:f1:4a:0a:52:ad:01:96:5b:98:09:6b:57:
         c7:77:97:54:d7:49:b8:37:6c:da:99:23:ec:7f:dd:2f:d8:57:
         a2:b8:af:ff:d3:74:a0:76:e6:8d:86:74:4e:9a:90:39:3a:2f:
         f4:d9:0c:51:64:f6:24:2c:37:39:1b:ad:f2:88:75:8e:5b:da:
         b6:04:35:9e:6c:69:1c:dc:75:3d:df:50:b7:d6:ad:46:15:48:
         d1:0a:43:cf:44:0b:fd:7c:d3:4d:6e:b0:06:91:04:f0:01:15:
         18:43:b8:ca:96:3b:9a:40:8a:51:f8:7b:f8:5d:62:44:6b:6d:
         e9:b1:64:f7:0d:b9:70:0e:c7:76:84:20:d7:a8:66:47:f9:7a:
         07:19:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:22 2026 by rpki-client