Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File:                     rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier:          fhRj7exr/g4ozlOCBmjhwNnm2s5epWM8/7i2P6PmwgE=
Subject key identifier:   5E:36:6C:D5:A8:86:B3:6F:0A:96:3D:F1:82:C6:54:48:32:6D:64:81
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer:       /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial:       019F954952AFEC2919C92567ADAA7F8EADC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number:          05EB
Signing time:             Fri 24 Jul 2026 18:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:38 +0000
Files and hashes:         1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
                          2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: uta+RN/3PWof8nUprBHMdopqoKMKv4pwUOROqvNc9wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:52:af:ec:29:19:c9:25:67:ad:aa:7f:8e:ad:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
        Validity
            Not Before: Jul 24 18:00:38 2026 GMT
            Not After : Jul 25 18:00:38 2026 GMT
        Subject: CN=5e366cd5a886b36f0a963df182c65448326d6481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b3:fb:08:cf:39:66:bd:b3:a3:1b:35:1a:d5:
                    2a:06:b7:f4:53:06:06:f7:87:a4:63:f1:12:b0:53:
                    b0:75:18:46:c4:90:1a:f3:c5:42:2e:8f:ba:28:82:
                    0d:e4:f9:6d:07:b5:7e:25:ab:05:27:39:35:0f:db:
                    d1:f7:bf:f9:dd:55:40:64:41:16:c6:f7:4e:3a:0e:
                    d5:a1:14:da:7f:d4:9f:cf:26:0e:ae:0c:f4:f5:a2:
                    7d:97:69:50:90:8a:db:20:cd:23:db:aa:e4:ea:61:
                    8b:42:12:f8:1e:4c:bc:56:fc:6c:8f:9c:68:d5:d7:
                    f8:06:f3:66:95:b4:07:69:6a:b4:1e:36:80:ea:7a:
                    fa:1c:52:76:0d:3b:a8:85:84:91:99:5c:bd:b5:16:
                    66:ca:a2:ff:e1:ef:20:fa:75:ed:c8:ae:00:76:8f:
                    78:88:cb:fb:18:b3:c1:a7:84:b8:8b:43:40:f2:ea:
                    7a:e5:17:92:fa:b1:84:98:48:31:29:d7:49:cc:31:
                    25:2b:23:7c:2e:80:e4:98:84:8d:9c:9f:b9:17:3a:
                    17:4b:66:fa:b5:f4:c0:57:6a:e4:ca:74:68:8d:c6:
                    73:5f:76:61:99:5d:04:08:3b:ca:2c:32:76:36:e9:
                    34:27:3f:fb:54:6e:61:58:1f:2e:56:60:c5:5d:43:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:36:6C:D5:A8:86:B3:6F:0A:96:3D:F1:82:C6:54:48:32:6D:64:81
            X509v3 Authority Key Identifier:
                keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a6:46:b0:2d:7b:b2:b3:ee:2e:68:a6:65:5c:93:8d:ae:88:
         7d:a0:80:5d:67:db:71:22:10:9c:b5:99:03:23:50:45:e3:5e:
         a4:f1:b9:bb:5e:df:23:55:8d:39:13:76:70:4d:ac:21:83:dd:
         e4:df:df:82:2f:43:dc:9a:01:ff:ef:09:cb:40:38:4a:67:ed:
         53:39:19:d4:4a:ce:1a:4b:7d:ec:ad:ef:b6:e1:a8:9f:40:78:
         84:a3:7d:3b:65:19:52:cd:45:a9:7f:bc:59:30:9d:a1:ed:2c:
         7d:e1:20:a9:8f:02:0f:b5:30:11:5d:93:01:5a:e5:a6:f4:e8:
         0c:f9:21:6c:3e:e3:e9:b2:ce:15:54:64:78:bb:89:2f:d8:f5:
         08:0b:a4:b9:c9:28:2c:5c:0a:8e:03:4a:95:49:24:77:dd:90:
         f3:0e:5a:06:b3:19:2f:42:b0:5e:0b:7f:e8:8c:42:58:8c:82:
         dc:13:70:3d:98:08:00:13:79:f3:20:22:d4:f1:e2:8f:32:7f:
         57:10:3f:8d:ce:fb:07:3e:ea:e7:a8:44:84:2c:48:6f:c4:78:
         9d:01:74:ec:d9:7e:1d:3d:0d:ef:fd:95:e7:b6:5d:b2:5d:9d:
         5a:15:da:1c:f1:ce:73:9c:d9:9f:72:67:1b:71:36:af:ee:79:
         c6:87:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:11 2026 by rpki-client