Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          ytGqaV9wasy4QESf9C0G7walMjOhHrRLSSpDYeBIlU4=
Subject key identifier:   42:E9:92:2F:6B:6C:13:7D:12:F5:90:1E:03:03:00:06:EA:03:A1:2C
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       019F8F7E3F6AB1BA914DB1DAA3920D839419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          12B4
Signing time:             Thu 23 Jul 2026 15:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:43 +0000
Files and hashes:         1: 31__Ljvdh5fFWa-BF1FmCzwwDW4.roa (hash: N9hIOu5MLbrZZOjfnys+h1KWiRyVn1BnWX+ujPnZveQ=)
                          2: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: YbdQIWIUwP8dGwOqmFnb9QJcvOMoK5jEBgotM3coPyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:3f:6a:b1:ba:91:4d:b1:da:a3:92:0d:83:94:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Jul 23 15:00:43 2026 GMT
            Not After : Jul 24 15:00:43 2026 GMT
        Subject: CN=42e9922f6b6c137d12f5901e03030006ea03a12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:f1:83:78:f3:80:b2:80:a7:e9:c5:71:ec:
                    6e:e1:26:82:0e:1a:f5:e1:65:0f:b3:61:06:80:f0:
                    2b:2f:e8:a7:5c:51:72:01:86:b3:6b:d3:b1:99:09:
                    2a:1b:e7:8f:fc:40:50:8d:b5:ea:e2:74:50:5e:85:
                    b1:b7:f2:f1:c6:43:51:c2:b8:46:ff:a0:17:c6:9e:
                    b2:4b:9c:82:02:fe:7c:28:49:ee:69:90:89:1f:8e:
                    78:f9:98:f9:e1:fe:4e:3f:8d:9a:17:d4:ed:53:2d:
                    e5:5e:d0:fd:5e:45:a7:28:ed:d2:8f:7c:a7:f7:39:
                    b7:e4:1c:1b:21:c6:52:a3:89:63:ab:ae:f6:91:22:
                    19:8e:9e:11:c2:88:6c:fb:fd:ce:eb:fd:71:7f:d3:
                    83:c1:ce:95:a2:39:95:4d:ae:a5:2b:4d:86:dc:51:
                    3f:57:7d:48:19:5c:7b:6b:ab:94:9f:1e:ee:41:6d:
                    90:4f:69:a4:2b:d7:59:c4:56:8d:80:32:6d:7d:6b:
                    79:e5:15:82:8b:b4:35:2d:bf:49:9b:a6:9d:d5:67:
                    5c:59:4e:9c:19:65:95:7c:56:e2:27:e0:7e:84:d9:
                    89:de:7a:40:f8:29:2b:3b:d9:45:fd:ea:64:8e:d8:
                    81:7c:ab:02:75:ac:3c:29:38:01:c0:ce:39:49:ab:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E9:92:2F:6B:6C:13:7D:12:F5:90:1E:03:03:00:06:EA:03:A1:2C
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3a:87:54:6b:ad:0c:67:f1:31:78:ad:8d:dd:d5:7c:9a:63:
         6b:3e:9a:06:c1:77:93:7e:f0:9d:33:37:27:b8:83:48:5a:25:
         b2:b6:4e:8b:d8:21:0e:2d:eb:7b:0e:dc:6b:1e:de:4f:8f:e4:
         f4:bb:ad:f8:3b:1e:17:79:31:c8:5f:ae:8c:bc:ad:b0:6a:2d:
         51:4b:a3:f6:12:4d:5d:59:91:5b:63:15:9a:5d:18:ca:3d:a1:
         24:19:97:fa:2e:80:18:61:09:0b:5c:a4:75:52:44:1e:f3:11:
         c3:b1:5f:9f:c2:b3:31:4c:1f:1f:26:69:f0:cd:da:e5:db:3f:
         73:a5:df:d6:8b:57:ea:10:a2:80:23:cf:03:eb:0b:4d:41:ae:
         70:1e:60:1b:3e:fe:ee:41:41:ef:65:20:a1:90:f5:6f:ed:2a:
         1b:18:2a:88:b6:79:1f:14:d0:5a:e8:b5:16:9f:c9:51:9f:ed:
         ca:5b:e7:90:f0:94:34:7d:56:5a:97:e4:cf:31:30:8a:53:16:
         6b:99:86:ad:0f:36:36:73:63:21:99:f3:0c:e5:be:60:83:b4:
         a2:f9:fb:46:45:9d:67:2f:49:ee:96:15:18:20:f6:c0:c9:c7:
         b1:97:05:68:37:36:14:b6:25:dd:48:09:5b:09:e4:30:fc:4c:
         12:f5:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:39 2026 by rpki-client