Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          AjbshHCXhqi/zJaRuFt+VyVzeWRe+PB4yd7dSJChKJA=
Subject key identifier:   A8:55:99:0F:31:DA:8D:4E:28:5C:B5:D6:D7:85:4C:A5:1D:30:AC:CE
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       019F91DA62BFCA8814540AB9526039CA4786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          161B
Signing time:             Fri 24 Jul 2026 02:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:36 +0000
Files and hashes:         1: 8TnB_Z89mvNE4vBXTZiFEl23tYE.roa (hash: 2ClpJ+kajbpfZOtIDtzImmEyyO+3DqegmuU+x4tETNI=)
                          2: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: 8dFC+QWUVucRjivI+mCWy1WsO18+HgGda4PTt9taY0U=)
                          3: LZPVWazUJHKsVwXB0Q5QFOX_U4I.roa (hash: e8wyE9wUQVdgZv92jtZNgewyht9dy7i4a6DuplyRPmE=)
                          4: _LkpRRARlMX2HSdxwIO5dOZICSc.roa (hash: J2+f3Tq3pA1xUwTt3sMx5nZNmV2E6UloLE/wFxA+mpU=)
                          5: fg5DQWG7u5wnOMunM-jUQ-7qT2w.roa (hash: LM7RxWBrFS25rPx4UzRlTNuZ/VgoDeJ+Tu9Rzj/nASE=)
                          6: kDc0T-wYc_NGJ-Etnedce11jNMQ.roa (hash: Q1JN1Iy9aoT7dirXksooE/1wLbmA+C3mydNCksgN+aA=)
                          7: yw4JQH3GwSpr0HqMrPTktCoX9Yc.roa (hash: C5hf4s/QdWtojHyCQ9hOA8bfaE8MjslJ2kdsyGmhhwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:62:bf:ca:88:14:54:0a:b9:52:60:39:ca:47:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Jul 24 02:00:36 2026 GMT
            Not After : Jul 25 02:00:36 2026 GMT
        Subject: CN=a855990f31da8d4e285cb5d6d7854ca51d30acce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:0a:68:58:e2:9c:1a:e0:31:b6:fe:1c:fd:
                    b0:6b:86:b3:03:42:7c:a2:16:9b:c0:52:e0:8b:36:
                    e4:8a:76:55:90:0c:15:45:32:16:eb:82:df:6d:7c:
                    d3:ea:9a:98:d2:5c:15:2c:08:18:55:d8:43:35:ab:
                    ea:87:14:a5:39:06:8e:d2:22:a2:59:57:36:51:04:
                    e9:66:99:19:02:30:b3:25:8d:55:65:47:8e:2b:f5:
                    21:31:bf:e0:63:7f:f1:ba:a3:fd:0b:8d:dc:0d:e9:
                    3f:d3:70:fe:7b:bd:d4:12:05:d9:dc:03:e9:1d:a3:
                    f0:68:75:e3:90:68:2d:d6:21:05:ab:de:3b:55:5f:
                    f9:73:e8:b7:14:34:f9:a6:fe:a8:80:12:2e:23:a7:
                    76:f6:03:2a:ef:7f:e9:12:0a:10:37:23:47:06:29:
                    9d:ba:ab:e4:3c:43:68:18:ba:b9:ee:76:a7:ba:e3:
                    c5:a3:ad:43:b1:94:a6:93:ce:b3:f7:11:9b:80:d5:
                    7f:d3:59:64:0b:a8:85:60:50:51:28:89:b7:b7:40:
                    4b:28:01:d4:44:16:92:b8:d8:62:a9:e3:04:1b:3e:
                    96:d2:b8:da:21:ec:4a:d9:7e:a2:64:93:d7:8f:00:
                    05:a4:75:24:74:2e:9f:2c:d1:ef:81:26:8f:ad:e4:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:55:99:0F:31:DA:8D:4E:28:5C:B5:D6:D7:85:4C:A5:1D:30:AC:CE
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:f9:66:d9:07:4b:81:25:fd:58:af:ea:50:f2:c1:47:80:
         4e:cb:f2:00:5e:09:5e:d4:78:9c:e6:de:73:17:38:e8:c2:1b:
         b8:52:c8:50:76:5a:bc:e1:0d:6d:d8:ec:6e:b2:da:38:a8:8c:
         44:12:a2:0c:4a:2e:6b:b4:bb:4c:37:29:97:12:12:78:e3:c4:
         7e:e2:93:44:6e:b8:10:fd:17:00:79:cf:2e:f0:21:86:1c:f7:
         19:18:0a:11:ed:ea:86:d9:be:56:7e:6e:89:c0:e0:23:78:11:
         20:0d:68:1d:98:1d:03:26:5f:4b:24:6a:63:40:e8:a3:e0:45:
         71:47:d2:e8:6f:2b:c7:a8:89:4e:2e:20:49:ac:5d:81:f3:f5:
         91:06:f7:a8:52:1f:ab:ca:8b:2a:95:da:2b:c4:d0:d3:42:d2:
         a8:cd:24:1c:ac:69:63:99:5b:3f:b1:dd:62:af:19:86:62:a9:
         17:22:08:f1:93:2c:66:9b:fb:75:af:6d:53:33:cd:3b:22:b2:
         c8:5d:54:e5:a4:99:86:e3:a0:94:38:27:92:6d:f2:ff:c8:0a:
         2f:25:5f:38:de:f7:c2:8e:71:eb:6e:9d:34:f1:5c:34:2c:1d:
         06:e3:df:86:f3:25:b1:57:86:5d:c4:ec:68:79:06:9d:06:4a:
         d3:c7:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:00 2026 by rpki-client