Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File:                     5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier:          8DE9V87ywHXZORZ+cCwZk0Tq2ps0mSu4O0euHD18qpo=
Subject key identifier:   C3:15:E7:CF:5F:41:19:5A:C2:C0:B5:F3:D0:43:1C:25:01:0F:1E:2B
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer:       /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial:       019F905991A795BFCCC48FE705BEF0A6E4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number:          1959
Signing time:             Thu 23 Jul 2026 19:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:16 +0000
Files and hashes:         1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: vnkxw3VXutYkvEd7b8fBNd4gR89jywoBtf83p9Ivh1A=)
                          2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:91:a7:95:bf:cc:c4:8f:e7:05:be:f0:a6:e4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
        Validity
            Not Before: Jul 23 19:00:16 2026 GMT
            Not After : Jul 24 19:00:16 2026 GMT
        Subject: CN=c315e7cf5f41195ac2c0b5f3d0431c25010f1e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:f0:49:f5:2b:ba:93:c4:41:65:79:6b:5f:
                    38:d1:f0:7c:20:9a:f8:b9:02:04:1b:89:2e:ba:68:
                    47:9b:73:f6:18:e2:71:df:29:27:f0:df:a6:b2:39:
                    dc:1b:e9:78:ce:a4:29:72:7d:bb:f6:38:0d:ad:63:
                    66:48:bc:e2:60:a2:63:c9:0f:fb:61:40:25:23:69:
                    f6:62:34:7e:f8:f7:99:eb:34:f1:31:da:2a:aa:6d:
                    98:a4:a4:88:87:5b:52:a4:22:a6:18:c5:fe:fd:9b:
                    2c:b0:77:61:e4:7c:dc:6b:1e:8f:f7:91:94:03:38:
                    77:c5:3b:0c:67:fd:7d:da:5e:2a:80:ae:01:23:ac:
                    db:75:cb:ba:3f:4e:3c:9e:7a:74:7e:66:8c:8a:d8:
                    ac:4f:86:3e:63:8a:0f:09:06:80:56:13:7c:09:45:
                    0b:ed:f5:5f:ed:4e:56:54:a0:c4:c7:2b:e9:1a:44:
                    e0:f7:2c:88:3e:77:af:3c:e2:8f:73:70:43:6c:08:
                    30:ef:2d:e4:e5:f0:cf:a3:98:68:73:72:07:27:ee:
                    a6:d4:3e:9e:0e:4d:ee:9c:9c:2b:4b:80:ef:5e:70:
                    42:fa:37:3f:bd:c2:59:61:d5:41:38:82:f8:16:8b:
                    12:0b:72:f2:3b:33:83:c9:5c:48:41:aa:31:e3:55:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:15:E7:CF:5F:41:19:5A:C2:C0:B5:F3:D0:43:1C:25:01:0F:1E:2B
            X509v3 Authority Key Identifier:
                keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:02:4b:4a:ef:77:30:0a:96:cc:83:36:16:29:32:05:07:95:
         8a:49:bc:13:fd:e3:92:6d:32:de:d2:0e:ee:e0:cf:d3:44:bd:
         e7:3b:9f:37:87:2f:aa:b0:9b:c5:3a:7d:b8:90:f3:6b:3a:f4:
         66:28:21:22:85:38:23:88:2b:58:2f:46:2b:eb:47:ed:19:7f:
         87:71:6f:71:2b:fe:cd:5d:de:11:c4:22:1f:12:60:0a:ba:fc:
         64:d1:56:b5:0e:a8:2c:a1:6d:21:24:04:80:e1:b8:70:a7:46:
         63:69:8a:e3:bf:2a:4a:e9:2a:32:a8:88:74:cf:96:e1:07:9f:
         75:db:2a:5d:66:bf:5f:0e:31:d5:ba:3e:af:8d:d9:3e:09:b4:
         54:82:fa:01:08:01:8a:d5:1c:50:60:29:2e:28:e1:51:cc:8a:
         33:97:f0:8e:a3:54:85:f6:cd:07:47:ca:07:c4:25:fd:2c:81:
         3c:4d:0e:90:68:e4:f9:c8:cd:4b:e3:72:63:39:3d:aa:62:e6:
         c9:ba:26:c3:18:5d:45:59:a3:4b:ab:18:e8:a2:0b:c9:52:37:
         6c:23:c3:1e:15:22:1b:1f:d7:ec:e7:d8:87:bb:f6:f0:dd:3a:
         ab:fd:a1:6f:e0:e9:59:a1:cd:ed:a6:14:8f:75:b2:4b:ee:de:
         1c:97:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:03 2026 by rpki-client