Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
File:                     5D_0Mpxm5bDVELjy6viwfn1ce0A.mft (raw, json)
Hash identifier:          WlOwaqHsg0xNYwCQEoQ+o6RJ7pXMSsXMLz6b+2rosb8=
Subject key identifier:   04:1E:7D:1B:62:A4:01:30:0E:38:0A:80:E8:E5:1B:F3:5C:71:2D:4F
Authority key identifier: E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
Certificate issuer:       /CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Certificate serial:       019F8F7F52780870C9940D20B6AD86206266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:53 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:53 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:53 +0000
Files and hashes:         1: 5D_0Mpxm5bDVELjy6viwfn1ce0A.crl (hash: UK0ULTref6LLRGuh9HrCz5W5S7pR4+HsPkd8SG//v5s=)
                          2: vMzqrHDtZQseD1IfDrA-iShDNwk.roa (hash: cIZbKSavouxTcPZPOTmND0k51VrW5LYVlRN+D9j5W+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:52:78:08:70:c9:94:0d:20:b6:ad:86:20:62:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
        Validity
            Not Before: Jul 23 15:01:53 2026 GMT
            Not After : Jul 24 15:01:53 2026 GMT
        Subject: CN=041e7d1b62a401300e380a80e8e51bf35c712d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:b7:02:4c:f4:50:05:b1:56:fd:fc:9f:1b:
                    b3:cc:8a:48:f9:21:40:19:e9:a7:ad:e6:a8:22:a9:
                    06:49:7a:2a:3d:ea:77:7c:b4:34:42:1b:09:ab:cf:
                    9f:6f:17:06:52:8f:be:b2:1a:32:46:1a:bb:ab:84:
                    b5:06:26:ef:56:bd:18:32:0e:72:dd:77:46:a1:43:
                    2d:ad:68:e3:f3:b2:8a:40:7d:c5:fd:f4:d0:b9:d0:
                    34:06:90:da:9d:67:28:06:9e:72:90:a2:af:ed:bc:
                    74:87:c8:f5:65:a5:45:74:16:76:15:18:08:75:2d:
                    c1:ab:f3:3d:41:41:a8:4e:3d:c1:60:e1:e6:7a:53:
                    82:fa:60:4c:cb:4a:25:d2:65:36:0d:5a:1f:8e:1c:
                    08:25:00:ca:cd:2d:ae:51:57:b4:9d:fd:bb:77:43:
                    5a:b8:8c:eb:b1:4b:17:b9:e6:df:4e:5e:75:0f:3f:
                    63:12:93:93:02:66:ad:f8:1a:39:4b:e2:7d:3a:08:
                    1a:a6:72:4d:25:7a:38:b1:a3:b0:d3:df:34:67:f5:
                    54:61:b0:9c:e6:c3:19:dc:b0:52:d9:76:fc:02:1c:
                    b5:a6:30:37:27:22:7f:9c:fa:50:cf:25:93:7a:9d:
                    a7:80:ff:5f:8c:7f:37:5f:19:ed:eb:6a:0a:3b:c5:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:7D:1B:62:A4:01:30:0E:38:0A:80:E8:E5:1B:F3:5C:71:2D:4F
            X509v3 Authority Key Identifier:
                keyid:E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:e8:f3:54:0e:55:fe:b8:af:3e:9a:53:39:00:57:d7:0e:
         00:3a:40:5c:69:87:4f:a5:be:c9:c9:d0:f7:1e:ef:af:9f:51:
         ab:3a:d2:b9:d8:f3:31:32:84:cd:51:1a:ed:1e:4a:e0:b0:39:
         99:7c:a6:fb:9f:bc:45:3f:61:a0:c7:08:35:c9:27:48:16:0a:
         95:30:01:a1:da:04:e9:7f:38:7a:6d:74:29:e3:0f:7e:a0:e5:
         be:b9:56:cb:b6:2a:77:1b:ae:7a:12:c8:1b:8e:d0:07:cf:8d:
         1b:be:67:1f:fd:88:9b:5c:82:32:32:6b:5b:91:56:cc:16:1b:
         b7:18:fb:b9:6d:ff:2d:12:51:56:ad:e6:08:46:4b:dd:f6:d1:
         bc:6f:1b:f5:ff:70:d1:23:b5:02:6b:d8:9c:ea:ce:18:2f:0a:
         f9:b8:54:ce:22:15:77:ce:63:18:80:bf:ea:54:83:30:a1:58:
         5f:85:2a:f0:60:20:63:57:f0:c4:f1:10:75:15:12:00:05:c3:
         98:b0:9f:79:76:67:1f:5b:71:f2:cb:a3:b3:3d:ca:19:3e:88:
         d4:ae:80:17:fa:d6:57:24:69:11:0e:56:35:02:39:9a:1e:ab:
         5f:11:d9:7e:cd:9a:ff:7b:a4:5d:f7:f5:c4:15:1f:c2:c0:00:
         65:d1:fc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:26 2026 by rpki-client