Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File:                     5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier:          7jhfVUttmZTJ+dQbqQ1vjptK/AKgwKr+LqG8kLIG+sM=
Subject key identifier:   CC:77:84:DE:BB:AE:51:F8:CD:B6:B0:2B:71:1C:5B:DA:9C:65:7E:87
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer:       /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial:       019F905A50EE40AB16F8BE533AC5AA075ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number:          0E7B
Signing time:             Thu 23 Jul 2026 19:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:05 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:05 +0000
Files and hashes:         1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: tZUGIGttI7PvjbI1qWCXT5dCr9qBmWSmsjxekzPBBc8=)
                          2: 5IiWlb3vHBWlCp6tIVca2yVQHto.roa (hash: STYN3zexlvKSLuiZ3ZMU8hJ7HbklvtNxc22+hhIPD74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:50:ee:40:ab:16:f8:be:53:3a:c5:aa:07:5e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
        Validity
            Not Before: Jul 23 19:01:05 2026 GMT
            Not After : Jul 24 19:01:05 2026 GMT
        Subject: CN=cc7784debbae51f8cdb6b02b711c5bda9c657e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:d2:82:2a:0d:32:dc:e0:5f:c5:bb:a4:fd:
                    d0:46:57:eb:d0:3d:33:28:d3:c2:b4:53:5b:4c:3c:
                    c7:8b:78:f0:36:7c:a6:58:9e:95:07:e4:79:12:9a:
                    11:ce:09:2c:ae:f7:2b:83:38:f3:2e:70:50:3e:5a:
                    36:d2:09:67:9b:1d:18:e3:0c:5f:e6:fb:44:07:f4:
                    15:50:4c:12:f7:a1:1d:0b:86:4a:59:62:a7:88:cf:
                    e0:4a:6b:f7:ce:1f:b5:f2:21:f3:96:4a:ab:12:25:
                    df:ea:c8:62:96:d3:98:3a:29:62:6e:ce:4f:f8:2d:
                    9b:95:00:f9:99:87:0d:ad:96:49:5f:8c:61:0d:5a:
                    f8:b1:0b:cf:18:87:55:0b:85:8a:36:35:c7:e4:36:
                    86:c8:5e:c6:5c:e2:b5:d7:e5:54:cf:b3:de:a0:71:
                    65:b3:11:ce:ad:61:d7:cf:be:ab:72:75:03:a1:ec:
                    36:95:fe:63:de:c5:9a:7b:40:bc:49:76:ba:60:8f:
                    d2:0c:33:26:e7:b8:60:81:3a:fb:db:1c:2e:7c:02:
                    e0:69:1a:2b:9c:6b:30:d7:91:a9:ee:eb:ad:78:31:
                    95:b3:30:8f:e6:52:8d:00:0d:ff:bc:da:ec:eb:ee:
                    8f:20:7c:6e:3f:52:45:c9:5b:99:68:07:4a:62:47:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:77:84:DE:BB:AE:51:F8:CD:B6:B0:2B:71:1C:5B:DA:9C:65:7E:87
            X509v3 Authority Key Identifier:
                keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6a:f1:74:b5:7f:e4:ec:11:ed:37:0a:f3:59:e4:d7:69:55:
         98:19:be:40:50:7b:1b:dd:bb:5b:c1:fe:bf:a0:b2:92:92:34:
         49:26:37:1d:97:c7:fd:cd:1e:98:05:bb:c9:23:50:a9:ac:08:
         35:24:c1:87:c5:fc:fd:92:65:32:57:8f:b2:3c:f0:23:06:60:
         67:86:8f:b4:e6:7e:b0:80:f9:80:45:40:8a:cf:f9:06:d1:0b:
         b3:3d:fe:10:fb:45:de:ae:41:42:a3:4f:4c:eb:ee:78:2f:95:
         72:ed:5d:e4:a3:42:26:c3:d6:d1:db:76:7e:92:d8:72:2f:63:
         70:51:bb:ec:8e:cf:aa:4c:1d:36:0f:28:b7:b1:db:b3:a0:01:
         0d:3d:ea:19:c0:ba:28:ea:2b:68:da:98:09:fb:21:b3:ac:c5:
         ac:23:e5:1d:46:57:9e:af:a5:66:37:e0:3d:e4:30:0c:e9:65:
         37:64:3b:3d:65:4c:6b:3f:42:57:4a:d3:9f:79:d0:39:34:f8:
         d3:61:41:fc:e1:f6:5f:dc:c9:d0:88:d9:00:2c:ac:a8:4b:cf:
         be:b7:0d:88:75:92:2a:36:f5:cd:6a:de:5d:c0:ce:9f:ff:2e:
         71:75:46:91:9b:95:79:9e:94:34:31:65:44:16:73:e0:24:ec:
         d5:5b:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:29 2026 by rpki-client