Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File:                     5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier:          OXvU+ASX0ULqMkxen75j4QQxIIGXFGQexXH2HNFvYfs=
Subject key identifier:   0E:B5:D8:46:F0:2B:03:8A:F8:CB:FA:7C:7C:4A:92:9A:83:A0:65:ED
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer:       /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial:       019F921156315BB1017C454F6D8A1A77806A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 03:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:37 +0000
Files and hashes:         1: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: 6uCvXTRSMU2GIZineCcqWwOPsnOhZMTDXIyJU02kcHk=)
                          2: Ir27xg9dLc2jCmst038CD7aSTUE.roa (hash: oSA2uezGmOSkDFovORRhwQlbzwF4ltfNZW/lvc676ZY=)
                          3: WDTYJfU4GmC_Z6SmZBDA6liuL48.roa (hash: FJHas3EZqiie/GgKCvyAh7bXL6nc+V2NXzO+Cw5KyLA=)
                          4: pwYTinLuDu67XvmsuR-F4t51_KA.roa (hash: eNI+YaNU/hzM1s49lx5C1dDOoIT3b4beF5vq3z+7/TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:56:31:5b:b1:01:7c:45:4f:6d:8a:1a:77:80:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
        Validity
            Not Before: Jul 24 03:00:37 2026 GMT
            Not After : Jul 25 03:00:37 2026 GMT
        Subject: CN=0eb5d846f02b038af8cbfa7c7c4a929a83a065ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:c3:b8:72:c3:46:0e:d6:f0:51:7f:d8:4a:
                    df:e9:01:22:6c:7f:4d:33:be:69:db:28:44:2c:bc:
                    02:f7:ed:0c:27:d5:85:6c:ff:ee:bb:fb:a8:ef:71:
                    64:ea:5c:35:13:36:64:ff:87:46:88:5e:21:17:20:
                    38:12:fc:7a:da:83:0e:c3:aa:11:73:49:e4:ba:f7:
                    9e:eb:8b:c5:04:05:c2:dc:5c:ae:b3:25:67:6b:9b:
                    37:96:77:3d:f4:5c:5c:8f:98:cb:42:c9:df:cd:04:
                    ce:bc:e0:0e:40:f5:7a:51:f3:24:3b:bb:42:6f:f0:
                    33:04:e3:0f:31:8a:5e:e0:50:0e:b3:44:d3:6c:d0:
                    ba:1c:27:26:ee:bc:55:ec:90:32:88:8f:82:c9:11:
                    07:f8:d9:8c:77:b6:5f:64:f2:f3:56:4c:17:fc:03:
                    e8:6d:8b:af:d2:69:8c:67:fd:86:af:a6:ba:8c:3d:
                    38:7e:b7:74:fa:98:80:bb:c4:38:cd:a7:dd:af:79:
                    46:6a:bf:12:19:43:49:b8:12:0a:e2:6f:63:6a:df:
                    c9:d1:c7:bb:77:46:88:f8:9b:20:ac:5b:3e:e0:d7:
                    48:fb:8d:54:11:4c:59:17:60:58:80:24:0b:6b:69:
                    7a:20:c0:43:10:4b:bb:12:73:ca:58:6b:f6:87:d0:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:D8:46:F0:2B:03:8A:F8:CB:FA:7C:7C:4A:92:9A:83:A0:65:ED
            X509v3 Authority Key Identifier:
                keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0f:38:4b:8f:c4:67:29:a1:f8:68:0d:58:82:28:71:f9:84:
         be:c0:dc:09:25:4e:4f:25:01:2d:d7:41:13:00:ea:fa:b6:3f:
         c3:35:f8:30:17:42:f9:ff:e5:7b:68:46:a2:53:90:d8:f5:4b:
         59:69:a4:2b:bd:68:33:18:6f:fe:ec:1d:a4:99:8a:67:25:51:
         d3:13:33:1f:de:92:6d:a2:4a:98:dc:53:0c:fa:4c:0f:7e:95:
         49:c2:47:69:f2:c8:5a:8c:6f:b9:24:eb:ee:cc:ee:5a:74:82:
         d5:b2:85:56:11:8a:39:d5:00:d8:7a:96:9b:8e:bf:c2:4c:49:
         13:56:9a:79:10:92:92:2e:e0:07:84:26:3c:b5:aa:c1:fb:ed:
         f5:9d:39:61:30:4c:c3:df:16:e2:bf:2f:e8:e8:0a:5f:19:c6:
         e9:b0:30:10:d2:45:1e:18:e0:9c:d8:14:fe:cf:cf:1c:4b:36:
         21:60:39:84:9e:33:19:9d:45:ff:3b:a4:75:59:6f:1b:c8:b5:
         98:41:b8:73:91:98:5f:89:1c:23:bb:ab:0a:a9:38:65:b6:92:
         fa:16:f0:d0:3a:60:ff:35:e3:a5:49:bd:56:26:aa:7f:e5:e1:
         60:a0:1e:a5:cf:0c:ea:42:dc:92:cc:23:60:54:a8:70:81:40:
         d1:b8:0a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEVYxW7EBfEVPbYoad4BqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2YyM2Q2ODkzNzQ5NDI4OGRmY2M3YTBlZmUxZmU3NGEy
MDM2ZTEwHhcNMjYwNzI0MDMwMDM3WhcNMjYwNzI1MDMwMDM3WjAzMTEwLwYDVQQD
EygwZWI1ZDg0NmYwMmIwMzhhZjhjYmZhN2M3YzRhOTI5YTgzYTA2NWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXnDuHLDRg7W8FF/2Erf6QEibH9N
M75p2yhELLwC9+0MJ9WFbP/uu/uo73Fk6lw1EzZk/4dGiF4hFyA4Evx62oMOw6oR
c0nkuvee64vFBAXC3FyusyVna5s3lnc99Fxcj5jLQsnfzQTOvOAOQPV6UfMkO7tC
b/AzBOMPMYpe4FAOs0TTbNC6HCcm7rxV7JAyiI+CyREH+NmMd7ZfZPLzVkwX/APo
bYuv0mmMZ/2Gr6a6jD04frd0+piAu8Q4zafdr3lGar8SGUNJuBIK4m9jat/J0ce7
d0aI+JsgrFs+4NdI+41UEUxZF2BYgCQLa2l6IMBDEEu7EnPKWGv2h9DCjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA612EbwKwOK+Mv6fHxKkpqDoGXtMB8GA1UdIwQY
MBaAFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMt
OWQxODVmNzM4MjExLzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMtOWQxODVmNzM4MjEx
LzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjw84S4/E
Zymh+GgNWIIocfmEvsDcCSVOTyUBLddBEwDq+rY/wzX4MBdC+f/le2hGolOQ2PVL
WWmkK71oMxhv/uwdpJmKZyVR0xMzH96SbaJKmNxTDPpMD36VScJHafLIWoxvuSTr
7szuWnSC1bKFVhGKOdUA2HqWm46/wkxJE1aaeRCSki7gB4QmPLWqwfvt9Z05YTBM
w98W4r8v6OgKXxnG6bAwENJFHhjgnNgU/s/PHEs2IWA5hJ4zGZ1F/zukdVlvG8i1
mEG4c5GYX4kcI7urCqk4ZbaS+hbw0Dpg/zXjpUm9Viaqf+XhYKAepc8M6kLckswj
YFSocIFA0bgK2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:36 2026 by rpki-client