Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File:                     5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier:          CMgE+ApCyVWUwxWSUwv0pjR9jNP68IWbTAAVOJp4WC8=
Subject key identifier:   FA:90:32:B0:24:76:5A:05:9A:F7:0F:B9:B6:42:53:64:A7:6E:C4:9D
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer:       /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial:       019F9059FCD8AFB8F1237CD341F9D3A32419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number:          0F18
Signing time:             Thu 23 Jul 2026 19:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:44 +0000
Files and hashes:         1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: vR19jWiQ3ean/msSH5eWTgBRSmnYNcHUouiaIZMPt6g=)
                          2: kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa (hash: cyrjAwqc3oU6K0wTg1ctpzSIWyDuDU/OKlnASWiAbYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:fc:d8:af:b8:f1:23:7c:d3:41:f9:d3:a3:24:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
        Validity
            Not Before: Jul 23 19:00:44 2026 GMT
            Not After : Jul 24 19:00:44 2026 GMT
        Subject: CN=fa9032b024765a059af70fb9b6425364a76ec49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:51:9d:2c:fe:c1:f0:2e:24:03:44:ed:d6:
                    55:11:6c:48:e5:8c:cf:ae:69:d7:06:5c:f8:59:35:
                    86:c1:38:b7:9b:e5:f4:cc:af:fa:9d:fe:ca:f6:d7:
                    c3:62:51:ee:e7:82:9a:68:e7:23:25:38:f3:6b:d0:
                    ca:59:cf:ec:79:f0:f0:f2:7c:e6:91:90:0e:73:6c:
                    76:36:37:47:63:46:d0:41:57:36:86:d7:37:d2:fa:
                    5a:28:3c:be:aa:63:de:72:3a:f8:5c:9d:12:4f:28:
                    c4:ee:98:83:80:b3:0c:9e:46:45:e6:91:d0:d6:09:
                    15:8f:b2:1a:b2:f9:22:aa:46:bb:8c:93:39:59:2b:
                    32:e6:19:b6:8c:6a:43:78:09:4f:a9:c2:60:e8:6e:
                    ec:a0:6c:35:47:9a:0d:e9:22:e2:f1:fc:9e:bb:c8:
                    e1:77:58:08:18:ec:f4:09:83:cc:2d:8e:16:e6:d8:
                    e6:c8:94:01:6a:35:e7:92:4f:e5:75:06:b9:62:d5:
                    5c:55:42:f7:1c:f5:77:f2:ce:86:2d:a2:14:40:87:
                    00:04:54:e9:be:38:cc:e7:4a:60:58:0a:d1:a8:3f:
                    cc:1c:52:11:3c:51:aa:09:a0:73:9b:03:65:4f:94:
                    80:46:7e:c0:5e:ff:7f:e1:97:34:d5:11:f4:f6:bc:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:90:32:B0:24:76:5A:05:9A:F7:0F:B9:B6:42:53:64:A7:6E:C4:9D
            X509v3 Authority Key Identifier:
                keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8b:99:08:07:3c:d9:61:24:f3:3c:6d:9c:ab:ea:d7:c1:7b:
         61:11:22:dc:61:7e:e7:85:38:91:b9:13:c2:3f:0a:b2:ef:9c:
         9a:50:4e:65:2d:83:d0:a7:e6:b5:1d:c0:7c:51:09:36:ff:6b:
         b9:64:89:93:6d:1b:ea:a5:31:e0:75:bd:06:e1:a6:e5:45:77:
         61:2c:04:f0:73:67:de:00:ab:b8:ab:85:b5:b5:7f:a2:5c:2a:
         49:0f:80:e4:94:2b:c3:c7:bd:b0:72:ab:b4:95:35:3d:ed:35:
         fb:c1:09:4a:c6:03:cd:0f:85:93:8a:57:89:51:eb:2a:55:f6:
         bc:2a:31:56:ff:1c:98:5f:8b:af:f8:15:cb:2a:a5:1d:89:81:
         3c:24:ce:59:94:4d:e1:07:bf:49:d3:2e:8e:e2:29:83:4a:f4:
         a4:14:11:38:4a:35:46:75:f4:0f:90:6d:7c:b7:cd:5c:5a:b8:
         a4:52:a1:9a:93:d6:a8:54:d5:cb:05:26:10:e7:c0:c5:38:02:
         a0:13:41:66:35:e1:56:41:0a:25:29:f4:48:e0:91:2a:e4:52:
         3e:bb:70:fd:7e:c5:72:54:34:28:bc:23:98:54:55:2c:51:64:
         e3:73:94:a2:26:93:e2:86:1b:47:cd:51:b4:1b:de:de:f1:f7:
         e3:e4:d2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:30 2026 by rpki-client