Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
File:                     thPokOXEBwqIMnayyfd3sQYjxvk.mft (raw, json)
Hash identifier:          5TIOgVFTjaIL4yzyKlnSa4DuW6ctJ/e7YUcxF4hO0GY=
Subject key identifier:   83:EB:8D:8F:D0:8D:1D:1B:9E:DD:E0:64:A9:AF:C4:18:92:4C:F2:49
Authority key identifier: B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
Certificate issuer:       /CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Certificate serial:       019F916D43584B1D7B5005E0ACBBDEF0307F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
Manifest number:          5B
Signing time:             Fri 24 Jul 2026 00:01:24 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:24 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:24 +0000
Files and hashes:         1: iSTwcsDq44xmj4bDTIa6k6RLQKI.roa (hash: qWNdY8B5/pf+1M3HkKeiYMgI3P7SCbr9CH/em0VTbyE=)
                          2: thPokOXEBwqIMnayyfd3sQYjxvk.crl (hash: C5vkoXMImjKp+pUH7QyPKeP6DBxFY2qHgK5X8xllq8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:43:58:4b:1d:7b:50:05:e0:ac:bb:de:f0:30:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b613e890e5c4070a883276b2c9f777b10623c6f9
        Validity
            Not Before: Jul 24 00:01:24 2026 GMT
            Not After : Jul 25 00:01:24 2026 GMT
        Subject: CN=83eb8d8fd08d1d1b9edde064a9afc418924cf249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:32:d3:10:2c:c6:27:1f:c2:61:43:01:12:
                    04:66:b2:a6:b7:0a:12:07:fb:0e:90:1f:82:8b:90:
                    b4:8f:5a:6c:b7:72:e1:7b:24:e4:e7:ce:cb:aa:fc:
                    11:35:61:8f:ec:b1:97:a7:8a:58:1e:12:7d:8a:8a:
                    ea:ba:55:4d:06:d1:9e:45:1e:ab:30:a6:43:6b:dd:
                    aa:2f:53:21:02:1c:d4:37:87:1b:c2:1e:45:f9:c3:
                    64:56:7a:e0:9b:92:bb:84:bf:3c:0e:6e:99:14:56:
                    fc:6d:57:40:18:ed:c8:05:94:80:78:e2:45:27:40:
                    c8:72:64:fe:ee:e0:7c:cd:63:c7:bf:05:e2:3a:e1:
                    45:9a:77:c8:63:74:f1:7d:89:fc:44:5a:28:0c:5c:
                    a6:78:82:25:5e:1e:7e:71:59:0f:7a:0c:98:f0:88:
                    7f:f9:da:df:be:4b:55:66:fe:21:7e:6d:88:2a:48:
                    b1:13:1a:e3:f6:31:04:ca:06:f3:78:17:24:60:20:
                    87:3e:4e:a5:a7:2e:ec:96:68:53:df:f2:8d:02:fc:
                    91:0e:f9:37:90:2c:45:34:5e:2d:19:f7:b4:e6:f9:
                    92:e5:0d:2b:ec:b1:11:b5:25:6f:9e:3a:bf:94:b2:
                    4d:7b:74:44:5f:51:46:e6:b0:6b:34:1f:dc:17:31:
                    15:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EB:8D:8F:D0:8D:1D:1B:9E:DD:E0:64:A9:AF:C4:18:92:4C:F2:49
            X509v3 Authority Key Identifier:
                keyid:B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:29:dd:b1:83:e3:91:6c:39:08:49:41:64:f0:23:30:7e:
         20:1c:a1:38:1e:6c:3e:e3:65:29:aa:c6:58:d8:78:73:ee:2c:
         31:f1:84:95:43:fb:76:9c:83:a3:48:3b:1f:d9:f2:de:e0:05:
         6c:55:9f:10:41:c0:57:66:51:1f:c9:2d:48:2e:62:eb:20:e6:
         81:16:41:1c:99:ac:33:26:70:8f:7e:b3:70:b6:70:d8:47:9c:
         cd:e5:49:56:69:08:c8:64:ab:f3:ee:d9:79:5b:81:2f:4e:88:
         5b:a1:84:e1:0c:b4:86:8f:6d:c7:db:32:c3:c4:13:13:a5:31:
         83:34:5e:28:78:f5:be:ad:5e:2b:b0:01:fb:88:11:a7:a7:d9:
         f9:21:e2:16:1b:8a:78:66:01:84:8a:17:98:96:e1:50:bb:89:
         ce:62:b3:0f:8f:e7:9f:72:23:94:d9:24:72:a3:4e:38:8b:de:
         cf:8f:fa:78:c3:6b:b5:46:e7:f0:2d:47:c3:65:fb:04:e8:f4:
         15:33:06:e3:cc:72:42:72:5f:64:ee:28:ca:8b:d8:0c:6e:29:
         2a:28:96:2c:9b:68:1d:74:38:9a:ef:18:a1:6a:b2:95:8a:66:
         42:aa:d4:28:ed:4b:47:58:30:0a:f3:56:e9:45:f8:eb:16:f1:
         5b:32:bd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:43 2026 by rpki-client