Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File:                     5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier:          sOv+UO0/l2NnEtxA9V4aVTP4hRNF+TLR4pVigNciei4=
Subject key identifier:   DA:96:D1:D3:15:22:3B:13:52:63:35:4C:7C:39:8A:22:5A:62:F5:56
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer:       /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial:       019F9211A91B571B0B999C59CBAB4DE531F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number:          0305
Signing time:             Fri 24 Jul 2026 03:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:58 +0000
Files and hashes:         1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
                          2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
                          3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: CDXYW8dmk+93YESKjNj5focgRjp7M93Yoxq0QO8CheM=)
                          4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:a9:1b:57:1b:0b:99:9c:59:cb:ab:4d:e5:31:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
        Validity
            Not Before: Jul 24 03:00:58 2026 GMT
            Not After : Jul 25 03:00:58 2026 GMT
        Subject: CN=da96d1d315223b135263354c7c398a225a62f556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:74:66:a7:18:fd:4a:d0:dc:0e:cf:46:87:
                    a1:5a:a6:47:b4:3d:09:a2:4e:4b:97:b1:46:73:37:
                    12:58:54:4f:9f:98:c4:04:44:df:bc:7d:ba:99:bd:
                    45:91:cb:66:c1:d1:0d:bf:59:41:13:54:ca:40:ee:
                    7b:f9:3a:9c:f9:49:e8:2a:fb:88:42:0e:54:3e:4f:
                    c1:17:d4:f1:cc:fc:e8:ad:7d:b6:6a:f3:cb:1a:fb:
                    a9:0c:e6:fa:54:d8:60:cf:b6:73:93:d4:99:4f:aa:
                    45:a6:a6:65:c3:1c:93:bb:43:4a:88:1e:3c:7b:a3:
                    45:6f:ed:7c:d7:b0:8d:05:ab:b6:09:8f:11:c1:d9:
                    68:cd:62:d9:e9:57:fe:76:28:57:f5:c4:07:cd:a1:
                    f9:55:95:5c:22:f4:cb:68:b2:bd:50:a1:2c:a3:35:
                    16:4c:0c:00:23:ea:86:b7:5a:e1:b6:91:f1:69:14:
                    d2:c4:14:d7:a6:ba:e3:10:2f:9e:62:52:0f:d5:a9:
                    8a:94:c3:d5:ab:ba:fd:b4:09:5c:98:a3:21:16:5a:
                    ba:41:5e:d1:14:34:84:ac:13:1d:ee:ee:48:db:e8:
                    a6:bc:2d:62:8a:d6:d4:bb:e9:ef:b4:f1:45:0b:8e:
                    12:b1:ee:b8:cc:76:e2:b0:c4:f1:4f:b7:3d:78:b4:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:96:D1:D3:15:22:3B:13:52:63:35:4C:7C:39:8A:22:5A:62:F5:56
            X509v3 Authority Key Identifier:
                keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:9d:d2:d5:6d:e1:85:83:ff:ed:44:7b:59:5c:cd:8c:b7:
         b7:9e:06:b8:11:fa:58:05:3c:b0:93:32:71:8c:28:18:cc:34:
         d8:28:0f:83:17:2d:7e:8d:2a:ed:22:ff:3b:54:7e:0f:f8:0c:
         82:83:c8:7a:65:35:cf:a0:87:84:11:e4:92:52:6c:f9:11:d5:
         d0:47:62:5c:f0:e7:54:29:13:fa:cf:1f:5e:9d:b5:3c:5d:a3:
         53:94:8e:f5:6a:6d:23:f2:68:a3:70:84:3f:87:bc:48:9a:88:
         0d:c7:ee:32:ee:e3:55:01:50:25:b8:5e:1c:14:ba:1d:4f:45:
         89:51:3b:25:bd:5a:93:c7:c2:4f:ff:9e:d9:b7:26:e5:d2:3d:
         67:75:c8:84:f0:bd:1c:da:fc:d3:0c:78:1f:74:b0:06:bd:c4:
         2f:cc:81:92:5e:4a:71:c7:ab:0d:50:ed:f0:af:f2:bb:b3:d0:
         8d:ff:78:b3:01:2b:70:18:b2:10:b7:cb:dd:16:9f:e3:3d:de:
         24:cf:2b:87:68:e4:89:e4:22:69:9a:c9:e2:0d:65:a3:6b:c0:
         2b:2d:65:91:30:82:29:d8:a9:86:fc:af:df:91:93:c8:84:1a:
         e4:36:78:16:58:2d:81:6a:c3:ee:03:15:61:13:d4:e0:85:39:
         b6:55:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:34 2026 by rpki-client