Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File:                     5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier:          cSdHTmYWE9kPBMj4pypZa9fT5vol6bp+KSbi78Y7xWQ=
Subject key identifier:   0E:B0:F0:D6:5C:48:C1:D6:EE:BC:8F:D0:7D:BC:2C:EF:81:E8:A3:CF
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer:       /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial:       019F8FEC78F1CCEDEC3964BE53150B8BA893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number:          144A
Signing time:             Thu 23 Jul 2026 17:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:07 +0000
Files and hashes:         1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: vLI08YH7XHMP31GCebDNIVMTaG5dqBboTkGZVXuz5lE=)
                          2: 8aSgnBiee21nHnHdoWG0UhIValQ.roa (hash: YhuSs4FGn4TIHIwZ7BzCcCCzXr8oW9ygTIMAtZY8VYk=)
                          3: Pp2H3bThZ25FtqSAcHrrrq1QhOM.roa (hash: y6+Od+cDPN3tOCm1DH2AXWHd6equQ1v8StvCRb4Nogw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:78:f1:cc:ed:ec:39:64:be:53:15:0b:8b:a8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
        Validity
            Not Before: Jul 23 17:01:07 2026 GMT
            Not After : Jul 24 17:01:07 2026 GMT
        Subject: CN=0eb0f0d65c48c1d6eebc8fd07dbc2cef81e8a3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:46:d1:98:89:48:ff:90:91:b0:ab:2b:26:
                    ef:fc:75:1d:dc:ba:6b:ee:e2:e9:46:c7:dd:cb:24:
                    08:2f:5d:e8:9b:97:c8:89:4b:f7:b3:3d:bd:cd:1d:
                    69:2b:75:da:1c:7e:7a:4b:5d:8c:11:cb:67:1d:06:
                    3d:bc:1e:00:5b:11:5a:2e:d8:02:b0:a9:ee:18:72:
                    7b:87:5f:b7:fd:ec:33:c9:0a:96:b8:2a:6f:d3:76:
                    59:a3:2c:09:3d:66:79:2e:ea:d9:d1:f7:ec:76:85:
                    76:d1:54:55:2a:11:92:53:cf:bd:fa:b9:7d:6d:5e:
                    18:cf:05:cb:df:73:e5:23:1c:85:27:ed:31:31:c6:
                    68:05:ea:b6:9a:8f:1f:70:0b:57:ee:84:2d:c1:ec:
                    43:0f:4e:32:e5:52:44:ba:77:9b:c7:d3:b0:3a:5b:
                    69:dd:41:72:a5:d2:e0:d3:a1:f0:1d:39:21:5f:08:
                    e6:f5:e2:85:71:54:19:2c:2e:3a:d4:f9:c7:00:2a:
                    a9:1a:55:88:88:eb:b6:e5:be:c3:6b:60:58:56:a1:
                    f1:07:00:e0:d3:cb:8e:c9:6b:e8:d9:c6:37:e6:f9:
                    9f:8c:91:b9:17:ca:36:1e:de:a6:31:84:89:db:96:
                    e2:bf:4a:39:14:f6:ba:b1:7a:4c:3c:08:2b:cb:f7:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B0:F0:D6:5C:48:C1:D6:EE:BC:8F:D0:7D:BC:2C:EF:81:E8:A3:CF
            X509v3 Authority Key Identifier:
                keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:01:20:6d:1b:70:d9:56:1b:d2:4b:ad:2d:9a:ad:67:7d:23:
         3d:39:52:f5:21:8f:bf:b0:99:17:3e:db:15:15:bc:3a:d0:d2:
         ef:ce:6b:f9:5d:37:fd:c8:af:9c:fa:2c:fd:fd:11:e0:1c:fe:
         a7:bc:ca:b2:e9:2a:50:f1:7e:33:e7:f1:8f:d8:12:e6:5d:9d:
         00:37:f0:c8:b9:09:c8:4c:31:c2:e4:2c:f6:68:29:cf:41:ed:
         09:a8:bc:c4:36:a1:91:8e:5f:7c:96:ef:ae:c1:70:db:6a:10:
         7b:c3:95:05:68:bb:2a:a5:b6:34:a9:3f:bd:e9:3a:a0:cb:30:
         e8:84:ba:3f:82:c6:0c:92:75:da:72:b9:c5:4e:fb:aa:46:71:
         54:dc:25:52:97:b9:74:6b:10:c1:a5:39:fb:ae:9a:e1:ed:80:
         a7:66:f9:7f:08:b5:dd:bb:77:aa:e5:49:39:65:46:84:8d:74:
         e3:c6:50:c4:50:3c:54:2e:02:6c:04:34:5e:69:d2:50:63:f5:
         c3:a1:7c:c3:2a:d0:a5:ec:07:4f:c4:82:c8:94:45:af:2d:26:
         26:0f:c1:33:a4:15:58:7d:f1:ce:e8:38:78:99:be:33:a8:c9:
         b3:92:3e:e5:24:16:51:03:b2:67:70:80:d8:1c:24:76:ae:9b:
         c1:ff:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:18 2026 by rpki-client