Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          o02QtpS0W0zOMl1iBDiZeD02tfkMWtkW102OHNDPfEo=
Subject key identifier:   D1:A9:59:C4:43:0E:6A:A4:87:D2:6F:8B:8D:AF:5F:DD:74:5B:24:68
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       019F90FE71CF797D4AEB8D6DE5270B50C41A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          1944
Signing time:             Thu 23 Jul 2026 22:00:22 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:22 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:22 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: 6oTVnAoP0eGmRdVHgqlyKIMahhGzDOFQcBXA79nnNVQ=)
                          2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:71:cf:79:7d:4a:eb:8d:6d:e5:27:0b:50:c4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Jul 23 22:00:22 2026 GMT
            Not After : Jul 24 22:00:22 2026 GMT
        Subject: CN=d1a959c4430e6aa487d26f8b8daf5fdd745b2468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:cf:89:97:f9:b8:20:a1:2f:fd:e2:5f:d2:
                    ab:e4:fa:3f:04:83:9b:7f:93:8c:92:da:58:80:21:
                    41:69:20:39:6b:2f:3a:d8:3c:df:6c:91:f9:5b:be:
                    0b:18:e2:b3:63:3d:93:3e:d8:cd:94:77:eb:bd:de:
                    3f:be:1c:47:e7:11:8c:78:8f:95:e8:fc:96:40:40:
                    0d:ea:a6:c1:54:fe:73:61:f0:19:26:fa:83:65:7a:
                    2e:a2:45:98:db:5c:b4:71:09:c4:19:a8:76:7b:42:
                    86:72:76:4b:6c:3c:54:d7:66:ea:76:50:8e:8b:c6:
                    7a:e5:b5:a0:89:5f:01:c2:1e:44:ee:53:d5:e7:33:
                    9f:a8:0c:43:e5:c3:89:15:12:6a:00:08:9d:02:4f:
                    cd:d2:fb:2d:d2:14:e7:82:66:2b:86:39:f8:2a:a1:
                    ba:50:6a:3f:29:53:57:2e:ce:2d:68:72:51:a0:50:
                    05:17:21:96:53:c9:6e:5b:46:4d:3c:16:4d:41:89:
                    e0:59:2d:79:f3:10:f8:20:d7:89:60:88:29:1d:4d:
                    e8:91:dc:79:53:10:b6:84:99:82:d4:ec:ea:3b:59:
                    bf:d0:27:62:f2:79:4d:e8:db:0b:f8:b3:b8:cd:5f:
                    56:a1:3f:b4:af:6f:c2:88:95:30:d0:31:47:5f:23:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A9:59:C4:43:0E:6A:A4:87:D2:6F:8B:8D:AF:5F:DD:74:5B:24:68
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d4:eb:de:1b:3c:be:c1:9e:a3:4e:f2:59:ce:83:82:ff:cb:
         bd:c2:eb:29:0c:df:a0:a5:30:52:90:59:05:ad:ba:59:14:a9:
         2c:f0:7d:70:c4:33:f3:ad:44:50:dc:8b:ae:cb:fd:f1:1c:80:
         75:18:da:78:90:0e:c2:85:64:a5:c5:b0:c9:96:a8:b7:e7:7f:
         8e:51:a5:7e:4f:0d:e8:98:86:fa:ff:2c:a5:91:5c:84:e1:c1:
         a8:5b:1b:3e:a4:22:e5:b8:91:f2:f6:f6:45:bf:6c:f0:cb:b7:
         0f:d0:f6:39:a9:6e:23:d5:49:e5:98:18:5e:c1:b2:07:62:f4:
         2d:91:0d:23:38:a2:d8:8f:35:eb:7e:5f:bf:0d:7c:bf:95:e0:
         08:9d:d9:92:ad:1e:50:e7:55:5a:22:82:3d:8a:b4:26:e2:db:
         05:f4:35:a7:9c:17:78:31:4e:99:0d:24:6f:95:0d:4c:36:3c:
         14:c9:4d:6f:82:1f:5b:c6:0c:97:ee:31:fa:4b:0e:44:83:a1:
         e9:ec:1e:76:e0:57:aa:6c:ec:c1:43:62:18:02:95:fa:05:ce:
         d0:b4:25:50:57:4c:8b:8b:f0:52:c5:f7:c4:eb:0e:b1:c9:43:
         57:1c:c1:ec:f5:0c:be:00:a3:5d:c8:1f:47:b2:6a:ce:95:f8:
         bc:5b:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:12 2026 by rpki-client