Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File:                     T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier:          HtETmiv5YexZiPt7ztVOm7PmCMRRSlLswh92mB1CjsA=
Subject key identifier:   4B:88:8F:89:AA:40:D7:47:6D:3D:71:0D:95:ED:B5:5F:DA:F4:C3:49
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer:       /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial:       019F93FF5EC1876499BAE6C6CE934578F785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number:          053B
Signing time:             Fri 24 Jul 2026 12:00:14 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:14 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:14 +0000
Files and hashes:         1: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: oWpTIfwOrdtCPAf6RE7jKBWqKAtXzVQDJfi/hLXqNSw=)
                          2: rcLAbqWbscU0-zedseFFQJGt_wI.roa (hash: ksy9iE6IRNGp1O9iSJlmzmpx+QDptXJv7zwnwiulq0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:5e:c1:87:64:99:ba:e6:c6:ce:93:45:78:f7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
        Validity
            Not Before: Jul 24 12:00:14 2026 GMT
            Not After : Jul 25 12:00:14 2026 GMT
        Subject: CN=4b888f89aa40d7476d3d710d95edb55fdaf4c349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:79:03:c8:86:2f:1a:66:fd:bf:2f:90:8a:
                    fc:ec:bd:96:00:72:3c:46:1e:68:de:2d:7e:0c:0d:
                    a1:b5:8c:bc:fe:ef:a0:91:65:05:aa:f7:b2:27:6a:
                    04:7e:f1:c8:50:4f:7c:9a:44:a7:cb:b6:14:4c:93:
                    38:b0:29:19:31:08:16:3a:99:cc:eb:ba:21:21:19:
                    81:a5:d6:cb:ed:cd:f6:7f:1d:7d:1b:4c:e3:66:f0:
                    be:42:17:ba:6e:c0:fd:b9:2c:59:ac:65:8d:ab:02:
                    51:ac:f8:29:d0:06:d8:1b:ba:17:ff:57:a1:fd:a1:
                    1d:10:97:bf:f3:b8:fe:c1:82:a2:00:f1:3d:00:c8:
                    f8:b5:4e:ec:b6:b5:5f:42:dc:a9:44:a1:43:bc:26:
                    ab:b1:ce:07:8a:72:0e:87:e5:46:9c:bf:40:5b:1e:
                    4a:16:1d:da:4a:84:de:17:4a:ea:3c:df:07:42:93:
                    26:b4:de:6d:36:57:e9:4e:29:97:9b:8c:69:58:28:
                    4b:bf:7e:0d:3a:b2:4d:50:7f:db:51:53:0c:2a:06:
                    81:b5:06:06:8e:2b:59:5a:18:91:2d:bd:73:ae:a3:
                    20:35:3c:06:10:f3:86:0e:f9:1e:9b:8c:10:22:dc:
                    ee:6d:f4:90:cf:d8:a2:e1:af:a5:81:b4:70:22:89:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:88:8F:89:AA:40:D7:47:6D:3D:71:0D:95:ED:B5:5F:DA:F4:C3:49
            X509v3 Authority Key Identifier:
                keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f3:a9:12:af:4f:29:b5:1e:a3:39:16:40:d6:b4:e0:31:d4:
         85:aa:d3:6b:22:d6:3f:93:00:a7:53:41:75:a8:27:d8:5c:2d:
         5a:8e:59:28:31:51:1e:73:cb:a2:66:fb:4e:d5:f9:e1:75:65:
         e7:70:1d:ad:e6:21:cb:14:be:b1:c1:20:2f:08:45:ca:ab:c0:
         70:bc:6b:1e:6c:c0:df:60:21:d8:11:72:1b:ae:7d:73:1d:7d:
         a6:b3:da:b8:d1:da:f4:ed:0c:b2:98:2e:95:22:aa:82:25:74:
         40:1c:b4:8a:d8:f5:11:05:cb:75:52:b6:39:73:2b:c9:5c:4c:
         7c:49:ad:c3:8f:a1:4f:0a:75:0a:86:99:be:9d:23:8e:ea:a2:
         fa:2c:4c:1e:26:e7:41:f7:d3:51:6d:ca:90:db:6d:fb:ee:e6:
         9a:d0:7d:c6:7a:23:3a:eb:2a:83:8d:c7:46:bf:84:3c:3c:01:
         f6:89:44:6c:19:56:d6:af:46:ac:3d:b3:3d:be:b2:9d:39:58:
         7f:8f:57:26:7c:4e:3c:28:f1:07:eb:c6:08:9a:41:cf:8b:b7:
         f1:04:fd:bb:28:e9:a3:83:ac:4b:d6:2f:ef:71:7a:90:2d:43:
         c8:24:14:c0:d2:a2:28:3e:20:c6:b3:d3:5b:5b:e0:80:78:fb:
         1b:27:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:30 2026 by rpki-client