Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File:                     rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier:          8FsEnkluiuvpDxsn3pvyiph2YU2yc/0RLZpNJfmBFas=
Subject key identifier:   C1:E0:08:E8:37:32:B1:B1:A8:6F:F5:D7:76:5B:A8:C3:FC:9D:C8:34
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer:       /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial:       019F954AAEA17112E5AF18E36EC1397559A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number:          0D60
Signing time:             Fri 24 Jul 2026 18:02:07 +0000
Manifest this update:     Fri 24 Jul 2026 18:02:07 +0000
Manifest next update:     Sat 25 Jul 2026 18:02:07 +0000
Files and hashes:         1: UG6rGpMCRGYwc6M9y1VhChB7D-o.roa (hash: PZpY+UE6o2ohwLTnt0nTubnygJyEIP8h+jg+Dy/lOic=)
                          2: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: P5p+hnhxY99odArhQWHrpyNb/1ZCep5qQm7iHDUPckQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:ae:a1:71:12:e5:af:18:e3:6e:c1:39:75:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
        Validity
            Not Before: Jul 24 18:02:07 2026 GMT
            Not After : Jul 25 18:02:07 2026 GMT
        Subject: CN=c1e008e83732b1b1a86ff5d7765ba8c3fc9dc834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:ab:ef:b5:9b:c6:97:88:8e:29:c3:8f:ae:
                    ff:3b:05:2e:b4:ca:c4:b3:2c:e9:d9:ee:e4:6d:99:
                    e7:17:80:89:ad:9f:52:25:a5:4a:84:3f:ec:a2:ea:
                    2c:60:0d:d6:03:69:66:5f:52:e9:c1:09:20:8f:a0:
                    d9:57:46:9f:cb:5b:c9:e8:dd:c8:b7:29:14:74:d3:
                    85:10:52:d4:3a:3b:52:52:71:61:49:ec:fa:94:a5:
                    25:62:ad:bf:0a:60:a6:6a:95:43:df:5a:fc:bf:ca:
                    8d:7b:dc:c4:a1:ba:e6:4e:03:4e:0d:df:25:56:10:
                    60:1a:48:de:76:32:bd:f9:4b:48:63:eb:98:f3:40:
                    94:62:bb:45:5e:30:37:54:34:56:bf:20:30:78:cd:
                    bd:03:19:15:8b:a5:a2:91:1b:fd:d6:52:3f:43:b8:
                    03:43:6f:f2:86:6d:dc:61:d9:0b:a1:af:26:5d:11:
                    c6:a5:86:f3:9f:a0:e9:f1:ca:01:87:ed:92:d0:8f:
                    8e:78:ea:59:45:55:3d:1b:92:dc:d5:59:04:90:a3:
                    b7:2f:dc:5d:32:96:4c:d6:ce:f2:f1:77:97:d1:33:
                    08:91:4f:9a:8f:69:85:46:e7:a3:af:2b:fc:37:3c:
                    32:1f:b6:f0:e2:9a:47:9f:04:01:4b:28:37:59:87:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E0:08:E8:37:32:B1:B1:A8:6F:F5:D7:76:5B:A8:C3:FC:9D:C8:34
            X509v3 Authority Key Identifier:
                keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:34:6d:fc:b5:e5:13:3b:f9:13:6a:fe:71:57:9e:8e:48:
         50:9c:49:4c:0f:68:18:ac:f9:28:ba:83:5e:61:c2:49:cc:da:
         b3:9c:43:bb:6a:9e:3b:70:cb:ba:9e:82:f7:1a:41:ef:49:12:
         0b:b5:4e:96:26:ca:fd:83:21:c5:a4:6e:24:1e:91:18:59:91:
         b9:fc:62:8a:4a:c0:b0:b7:37:82:e7:f4:eb:22:6e:89:b3:dc:
         75:f5:06:87:2c:7c:b8:50:0d:53:44:21:b5:22:c4:2c:cd:24:
         a7:4b:61:45:c2:dd:e4:96:53:95:fa:21:fe:99:23:85:94:0a:
         a7:b1:04:2e:6f:25:6d:5f:8d:da:60:3d:aa:62:97:c4:b7:18:
         0b:ce:6c:03:42:3e:30:29:65:37:4f:25:f1:d8:90:3c:27:1a:
         2d:4b:4d:2d:c7:0a:0a:e5:e8:5d:10:19:c3:8e:ff:c0:53:3a:
         3b:79:93:47:7d:2c:ce:e4:8d:60:03:ae:1a:2f:55:29:6e:33:
         1e:e1:09:92:00:d8:83:74:00:9a:4c:73:78:33:a2:87:90:11:
         b0:75:83:11:44:00:05:9a:7c:23:a7:db:71:d7:dc:ee:46:b8:
         da:70:39:23:ce:93:c9:87:28:e3:6b:d7:b1:49:b6:d0:91:41:
         75:12:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:02 2026 by rpki-client