Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File:                     5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier:          NCmhuWGwTv1V0EUPFE4aDz558EOw/f4CAzA4I7XAn2M=
Subject key identifier:   24:93:70:2A:A5:34:DE:2C:5A:F5:06:8E:12:4E:05:D8:57:76:2F:CD
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer:       /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial:       019F90FF9DB65622CC6F5DE4939D9DA6DCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 22:01:38 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:38 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:38 +0000
Files and hashes:         1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: 19pNZpFVkv0emTxT9FJcJ7Hu7g7xUGOoID+JW+xYNZY=)
                          2: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (hash: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:9d:b6:56:22:cc:6f:5d:e4:93:9d:9d:a6:dc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
        Validity
            Not Before: Jul 23 22:01:38 2026 GMT
            Not After : Jul 24 22:01:38 2026 GMT
        Subject: CN=2493702aa534de2c5af5068e124e05d857762fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:f8:6f:78:af:90:d4:ca:03:0f:7c:c7:7e:
                    34:f5:13:d1:07:f0:94:22:02:9e:c7:48:61:5c:26:
                    08:9c:d8:c2:4d:1e:df:7f:0d:0f:08:55:f9:4e:86:
                    74:2a:88:54:e2:26:c9:d3:e2:25:5d:ba:50:d9:ad:
                    bb:59:02:64:cb:30:b2:84:bd:62:3d:95:24:8a:1e:
                    8a:ec:86:f1:c8:d4:c9:0d:6b:1d:fd:21:f2:be:2a:
                    83:b4:d2:3c:cf:dc:73:8e:b2:da:85:2b:32:fd:d7:
                    3e:c1:b6:a6:70:e6:e3:83:b1:e9:3b:8d:0b:ed:b9:
                    58:83:73:7a:20:77:ba:63:60:32:ef:f6:b1:26:63:
                    90:3d:7e:47:1c:c5:73:9b:01:68:e9:1a:e8:16:ac:
                    4b:b2:2b:56:a8:ee:fb:67:98:58:9d:8c:5e:ec:cc:
                    79:9b:f3:68:14:f8:2a:0f:16:a7:60:54:45:33:9e:
                    7a:b4:8e:be:a5:a2:2d:2c:53:44:29:e5:fd:84:38:
                    da:eb:ef:62:1b:28:a7:72:6a:d3:45:52:bb:f4:c3:
                    18:19:f4:4a:2f:1f:35:39:8a:33:40:3b:8e:f5:84:
                    15:b9:09:9a:8a:fa:77:8e:41:0c:73:54:a9:f0:e2:
                    55:f5:d6:99:9c:e5:dd:41:15:09:85:f6:35:29:0a:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:70:2A:A5:34:DE:2C:5A:F5:06:8E:12:4E:05:D8:57:76:2F:CD
            X509v3 Authority Key Identifier:
                keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:bd:b7:60:29:35:87:fb:4a:c0:94:55:7a:63:8c:95:cd:
         58:ee:26:7b:55:0e:d2:dd:e1:21:bd:0e:f5:4b:5d:e7:0d:26:
         a2:06:00:64:d1:2e:c2:f9:0a:72:83:a4:78:57:50:e6:ce:ce:
         c7:3d:b9:ec:9e:9d:81:99:d0:c8:06:86:1b:ed:66:22:28:0d:
         f5:99:03:16:a9:25:2b:db:ae:b8:88:1c:56:78:d3:24:63:d6:
         f3:b3:63:f3:34:54:1a:3c:f2:17:fc:b4:76:22:d3:87:da:d0:
         0f:6e:7f:18:57:c2:61:86:be:e3:a6:42:b1:0d:57:7a:8f:7d:
         64:f4:fc:9b:1e:6d:9b:c6:51:2c:d5:89:eb:76:13:a3:24:3b:
         cd:c4:3d:57:3d:0c:83:af:09:bf:14:84:4b:fc:5e:32:d0:09:
         af:f1:cf:dd:e6:30:99:14:7f:ef:26:9b:67:df:37:0c:fd:69:
         5f:15:67:99:84:3a:86:36:33:be:dc:ca:18:73:28:e4:1c:b9:
         72:ae:3e:cf:bc:aa:57:30:a3:8e:82:24:73:20:8d:e4:5e:31:
         c1:96:7a:8f:03:fd:21:13:10:f6:76:00:c9:1f:81:88:9c:4b:
         72:da:75:e7:6a:06:ce:f8:fc:87:15:9a:eb:c6:e3:0e:f2:65:
         57:35:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:38 2026 by rpki-client