Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
File:                     5uitxyAU5Xp04wROsWbnYJaPI5U.mft (raw, json)
Hash identifier:          mBeJuH93Lyfs2C2azJRQ5/beJoXzlRIpOIoOlhBdwX4=
Subject key identifier:   F3:CD:10:59:C9:88:62:65:F8:22:B7:B9:87:C7:80:24:DC:A3:1B:B6
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Certificate issuer:       /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial:       019F90914A7E3C2E96E27BD9139AF8E77474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
Manifest number:          0F97
Signing time:             Thu 23 Jul 2026 20:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:08 +0000
Files and hashes:         1: 5uitxyAU5Xp04wROsWbnYJaPI5U.crl (hash: Yt6wj5WYACFhWoZtlthGlhAk9b9bOVudDiMx/yRFxvg=)
                          2: vPg4rxX1m6skDbDCiDcsAk0EFcs.roa (hash: YJ2se2VyY3agIp8kMLK7ttHHu7VzNPvUoX36Tb1G48Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:4a:7e:3c:2e:96:e2:7b:d9:13:9a:f8:e7:74:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
        Validity
            Not Before: Jul 23 20:01:08 2026 GMT
            Not After : Jul 24 20:01:08 2026 GMT
        Subject: CN=f3cd1059c9886265f822b7b987c78024dca31bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:bd:78:4f:27:46:b9:01:ef:4d:04:a2:d7:
                    b2:e4:98:0d:57:10:6d:4a:09:a3:84:4e:62:d5:b6:
                    c8:59:37:d7:d3:28:38:88:42:d0:c4:bd:de:a4:42:
                    f2:08:02:ac:a9:6b:70:62:86:55:da:ed:13:5c:a2:
                    69:ee:29:80:d7:91:a8:a2:35:20:92:1e:f5:ab:0b:
                    5c:f0:d8:de:f0:5c:b1:d8:07:ff:b7:98:d1:e5:c1:
                    59:68:51:c3:7b:b5:68:df:49:e1:09:d0:f9:a4:e4:
                    9f:f3:da:8a:fd:4d:4c:d0:19:41:7f:42:62:3c:59:
                    f2:e3:e4:31:a2:0a:b4:d1:50:5d:85:95:09:6a:42:
                    73:f9:3f:73:17:7b:94:13:9c:b6:8d:fb:5c:dd:29:
                    c6:6c:be:89:72:51:fa:60:15:67:33:72:98:b1:e2:
                    e4:81:20:c8:1b:83:26:e2:b7:78:a8:de:12:84:76:
                    4a:82:c2:c3:4d:b9:8e:9b:cd:84:df:fd:c0:a5:94:
                    52:b9:67:18:5e:13:26:e2:75:41:2e:8e:78:53:77:
                    35:3d:bd:bf:e6:26:dc:a4:2b:0a:92:eb:60:63:c6:
                    e2:77:9e:58:c3:63:db:cd:ee:f7:3d:06:40:62:a2:
                    ac:2b:f5:45:c1:8f:1b:db:67:30:f3:fb:4b:3b:1f:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CD:10:59:C9:88:62:65:F8:22:B7:B9:87:C7:80:24:DC:A3:1B:B6
            X509v3 Authority Key Identifier:
                keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:d0:5b:2f:a4:d4:d6:c4:02:05:53:8d:ea:4a:59:31:e2:
         c0:37:23:01:b9:0a:ac:5e:8f:c7:08:7f:b6:17:a0:26:f2:b9:
         7e:5f:a7:11:ea:ed:ff:cc:6a:1f:75:b6:24:df:97:0e:7b:f5:
         6e:7f:59:8d:d6:d9:87:58:ef:d0:91:3b:a5:d0:9a:97:ab:96:
         82:35:48:37:fa:6c:d2:0b:5b:ba:dc:42:cb:c7:86:0d:33:93:
         a2:98:c7:90:31:9d:58:9a:f0:7b:5d:2a:d3:47:c9:78:1c:76:
         01:a4:91:fe:f4:50:fe:b5:ee:dd:19:18:ce:5e:d2:fb:17:c2:
         f3:b1:67:e7:b0:6f:a1:95:3c:e1:83:df:8a:8b:20:cb:df:b0:
         07:d9:9e:d0:2f:02:dc:5a:d6:a9:42:68:40:ad:a3:a3:fa:47:
         ab:fa:3f:f2:df:e9:61:48:8e:a8:a7:66:82:3f:76:61:1c:f7:
         d6:b3:e7:73:e6:96:ce:c0:d1:fb:12:52:6b:0f:45:7b:d9:26:
         6d:d1:73:8e:60:a4:e8:67:01:22:ea:1c:ca:c0:4d:2d:71:23:
         99:7f:63:f9:93:82:05:ec:64:ea:be:70:ca:ef:30:71:2b:35:
         77:71:1e:0a:5a:89:7e:07:a2:6d:8c:6c:e8:44:7e:d4:df:dc:
         dc:14:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:20 2026 by rpki-client