Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          1hNs+FXZnBJ1QTSXYnZCAGWL7D1PxjLFowwhucZERyg=
Subject key identifier:   46:84:43:E1:3A:F0:83:5B:22:85:E8:D3:A6:B5:B4:FD:AE:67:B4:2C
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       019F90FEF5EC584EE2CEFDB141770C14A3B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          19D4
Signing time:             Thu 23 Jul 2026 22:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:55 +0000
Files and hashes:         1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
                          2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
                          3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
                          4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: jENMdGYbmRpYQ7BnNd03QCc1ePpQ4iNO7wjISy20BdY=)
                          5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
                          6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
                          7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:f5:ec:58:4e:e2:ce:fd:b1:41:77:0c:14:a3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Jul 23 22:00:55 2026 GMT
            Not After : Jul 24 22:00:55 2026 GMT
        Subject: CN=468443e13af0835b2285e8d3a6b5b4fdae67b42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:46:69:69:38:90:c4:af:af:8b:6b:17:e7:
                    31:83:bd:b6:b4:ee:e2:ec:87:38:61:8a:5d:36:9b:
                    1a:bb:8a:60:9b:39:0d:ae:1c:5f:94:fe:9d:7b:ba:
                    ef:b7:f8:d8:3c:09:5a:8d:37:b2:33:bb:bd:d7:20:
                    d9:a6:5a:1e:d3:5c:65:1a:58:0e:f2:f3:6e:b0:64:
                    37:96:85:9e:b3:29:02:9d:9b:24:b3:b2:ad:2f:74:
                    89:38:83:90:bd:5b:22:18:f9:bf:74:75:33:90:d1:
                    1d:80:d5:3f:e3:83:88:4f:25:ff:ad:97:ca:f4:61:
                    48:0a:66:6a:e4:40:9c:e8:2d:35:c8:4b:8a:04:2d:
                    43:11:34:be:99:8d:bb:51:8f:5a:46:66:a4:78:32:
                    69:a7:06:05:07:1e:af:0c:ae:ff:d8:a6:3d:ee:c1:
                    a4:be:7f:20:f6:c7:fb:d8:cd:69:b0:09:4f:aa:91:
                    b5:b3:6e:57:e1:d2:18:ba:cf:c4:ae:4c:b6:36:08:
                    66:65:0e:f9:3e:41:b4:55:ca:92:b7:93:a4:8b:83:
                    5a:57:6c:76:78:e2:5d:78:a4:71:7d:d1:6e:1f:49:
                    98:72:e2:da:0b:dd:59:b9:1b:4f:9b:80:24:cd:15:
                    7c:b4:35:1a:29:64:2d:f7:cd:b7:8d:e3:98:cf:da:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:43:E1:3A:F0:83:5B:22:85:E8:D3:A6:B5:B4:FD:AE:67:B4:2C
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:36:5a:fb:18:e6:f3:b9:2f:31:8e:cd:82:6b:60:14:9a:65:
         64:ee:85:b8:41:25:2b:e9:35:94:fc:8c:74:73:a4:38:d1:0d:
         36:97:93:bc:2d:87:3d:bf:9d:c1:4c:fd:58:24:87:f8:a1:eb:
         11:75:a2:3b:a1:7c:68:6d:07:23:3d:46:c6:5d:6f:15:23:9b:
         97:74:a8:ba:47:ac:b3:00:97:ab:17:4a:47:0d:05:d6:48:f6:
         60:e1:a1:db:8a:ac:61:bb:1d:c3:e5:71:7a:69:d6:2f:10:1f:
         1d:4d:39:47:4a:91:49:cf:0d:55:54:3f:a7:46:ae:ff:56:a2:
         7f:20:cd:c2:4e:8c:d6:ca:ac:9d:0d:f2:40:c7:ff:fd:5b:79:
         e5:34:ac:44:32:86:ce:a3:05:fd:a4:75:50:92:f8:49:75:7f:
         76:78:c6:dc:ac:49:ae:e4:26:91:9a:7f:a3:01:5d:b2:65:53:
         8f:41:90:8f:f2:95:5f:aa:b8:36:58:7f:f4:14:f8:1d:d8:04:
         ea:39:15:17:cf:7f:ca:da:00:9c:16:5e:5d:a9:2a:0a:53:46:
         a3:1c:fb:b1:02:d4:7e:e5:a3:22:a9:b2:2e:39:03:52:66:7f:
         c6:c6:4d:ee:4e:de:56:72:9a:d0:ae:23:b5:f3:fb:4b:bd:b4:
         40:d3:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:03:54 2026 by rpki-client