Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
File:                     5hU_zqGfHUn68-R-mJ22v15v5ak.mft (raw, json)
Hash identifier:          niDuegqlqTHNweLKLqoaORUxSqa2JCdie4+9d9mpnmw=
Subject key identifier:   03:60:7A:C8:52:0E:41:58:F7:6D:8B:90:D3:37:72:B3:42:27:3A:6F
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Certificate issuer:       /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial:       019F9090F828F570C0BC2D6F8DB152BE8ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 20:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:47 +0000
Files and hashes:         1: 5hU_zqGfHUn68-R-mJ22v15v5ak.crl (hash: ZsSdRf4NbRS7tE3b/znk+AvOwbogd7+f/DPbtGTYn8E=)
                          2: wSyM0gz4zx6p84uHauOvtvDMKGs.roa (hash: WZ6TV+R46SR5wmwXRRLIlAJ/bQgYVkvtoX9ha3Mmbrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:f8:28:f5:70:c0:bc:2d:6f:8d:b1:52:be:8e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
        Validity
            Not Before: Jul 23 20:00:47 2026 GMT
            Not After : Jul 24 20:00:47 2026 GMT
        Subject: CN=03607ac8520e4158f76d8b90d33772b342273a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:98:eb:60:45:03:72:6d:6e:54:04:d7:ab:
                    4c:25:03:49:62:02:c5:3b:59:6f:ab:cb:1c:22:e3:
                    46:16:23:d8:13:05:1c:89:48:4a:52:bb:d2:86:a5:
                    db:24:ca:25:b9:02:0c:38:0a:56:e6:84:a2:99:fa:
                    0f:68:78:04:4d:84:e2:5d:ae:eb:f1:fb:bb:97:fb:
                    6f:b5:8f:cb:d0:98:06:35:ac:57:c6:6d:5d:f1:ba:
                    0b:a5:f2:9c:da:a0:2f:4a:dd:ab:29:9e:24:e1:a8:
                    47:85:ca:09:83:b1:8e:66:97:fe:ed:95:c3:8a:2a:
                    17:9b:d3:78:50:79:53:b2:9f:a6:c6:75:00:9a:9e:
                    76:22:5f:df:08:d8:85:13:bf:55:d7:90:46:34:c6:
                    a7:27:f5:99:af:60:f2:11:bf:db:ed:54:9c:1a:40:
                    3e:e0:52:25:b4:1f:1a:56:d5:9c:55:3a:26:16:d4:
                    b0:6c:2e:1f:39:cf:1a:7a:6d:65:12:73:80:0d:e0:
                    95:15:8d:31:bb:32:77:30:75:78:3e:9e:f7:d7:50:
                    cb:ee:b7:b2:0a:98:d3:01:61:a6:4d:50:51:79:98:
                    89:52:e6:7f:76:b0:30:12:f0:07:98:ee:af:c0:13:
                    a3:cd:72:23:25:35:8d:9b:30:d8:1b:6e:7d:f6:82:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:60:7A:C8:52:0E:41:58:F7:6D:8B:90:D3:37:72:B3:42:27:3A:6F
            X509v3 Authority Key Identifier:
                keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6b:35:e1:48:dc:26:12:07:df:1a:1a:ac:1d:17:50:91:36:
         51:78:af:e2:88:6e:99:f7:c1:bf:da:13:ad:e9:9f:1d:bb:f8:
         79:92:a7:48:c8:5d:46:0f:e1:4d:b1:7b:44:24:6b:c3:b2:98:
         60:8a:80:08:d8:9e:de:89:19:35:1c:6d:ac:6a:9b:d1:6f:38:
         fa:b0:37:5a:a6:5a:d2:08:f6:31:ab:bc:73:88:3b:25:3d:67:
         dd:81:5f:c4:5d:da:de:96:4f:68:af:5e:23:b2:f5:c1:55:fc:
         33:84:67:40:9c:86:fb:7c:f2:92:ab:c4:99:61:0e:70:f4:50:
         81:cd:75:1e:4e:c6:67:6a:7a:ef:7e:89:16:4b:cf:ab:a6:86:
         44:00:d6:35:2d:cb:2c:62:77:4a:3a:22:50:b6:8e:f9:13:2c:
         5b:4a:0a:81:c5:ea:04:6a:e5:80:93:36:7d:92:4e:2f:e4:20:
         cd:32:2b:7b:70:06:cd:09:47:df:49:75:88:21:b7:ae:0f:f8:
         73:ec:1f:c4:73:aa:f8:74:82:35:cd:b4:c8:8f:a8:07:0e:84:
         41:55:60:b8:a2:2c:7d:c7:3b:04:30:92:71:a3:13:42:fa:ac:
         a5:ac:3f:24:10:46:1a:75:10:3b:cf:b0:32:c3:1f:f9:ba:89:
         e9:27:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:08 2026 by rpki-client