Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File:                     733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier:          YNTbpjshAqgE68sal0oiLwryYxCJKWlEp4J9R4w2KRA=
Subject key identifier:   0D:71:D8:2C:8B:BA:A8:37:C1:E3:8D:A8:30:FC:96:17:6E:F9:56:CD
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer:       /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial:       019F91A444CCC788B2FDFBC048BD1B7B60E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number:          1890
Signing time:             Fri 24 Jul 2026 01:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:29 +0000
Files and hashes:         1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: JrUUs8n5ZYgsGqFhE5s5KORTVrDiSKPrJnZMhgDzKhc=)
                          2: hTPnnRRGk0sclr6F2QfCiyXduQE.roa (hash: d3PjDDBu0PgL89VzwcTP4ys2SUqflMlRPDBwwnwxvfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:44:cc:c7:88:b2:fd:fb:c0:48:bd:1b:7b:60:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
        Validity
            Not Before: Jul 24 01:01:29 2026 GMT
            Not After : Jul 25 01:01:29 2026 GMT
        Subject: CN=0d71d82c8bbaa837c1e38da830fc96176ef956cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:8b:b2:e8:79:bd:d9:93:d8:58:40:31:a1:
                    2e:16:bd:99:30:d8:5f:72:dc:84:7f:e7:26:14:fc:
                    21:92:4d:cf:13:a8:4a:c6:9d:3b:48:31:f8:45:b6:
                    dc:34:b1:81:ff:75:a6:11:aa:d6:be:98:0a:d9:c6:
                    a7:ca:d4:b4:21:af:76:a0:18:76:26:0f:14:2e:9c:
                    9e:0c:27:5b:d5:62:c1:5a:cc:bc:99:56:5d:6c:48:
                    69:6d:b6:f3:96:12:38:a9:88:5e:84:8c:75:fe:fc:
                    1d:f9:f9:fc:58:46:ae:d5:33:e0:8c:6f:66:c5:c0:
                    56:b6:4b:05:c9:23:14:98:29:b2:55:4d:c4:d9:11:
                    bd:64:f1:81:94:d8:7e:c6:96:69:b7:9a:c0:fc:9a:
                    54:34:69:b4:26:12:f8:63:92:cc:28:25:d4:19:30:
                    6e:d8:47:c3:7a:b8:51:5b:b9:f6:5f:de:7a:57:ac:
                    b7:c6:b9:0a:db:c9:69:ce:12:0f:6b:26:15:ea:a4:
                    43:16:65:0e:df:8d:96:9c:48:10:9d:99:0e:7d:09:
                    e8:e5:76:49:72:65:4b:61:60:ca:f1:b8:48:94:47:
                    eb:ce:80:c9:1e:a7:e3:47:72:52:be:72:23:b8:0e:
                    7d:f3:37:40:1f:ee:75:44:cd:e5:e8:97:db:b7:a8:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:71:D8:2C:8B:BA:A8:37:C1:E3:8D:A8:30:FC:96:17:6E:F9:56:CD
            X509v3 Authority Key Identifier:
                keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:30:d6:83:1d:9d:70:15:6d:9f:65:20:d5:7d:95:32:58:32:
         d4:a8:9c:9d:c9:1c:e9:eb:89:82:a6:68:3d:51:bb:56:50:c8:
         a3:18:b3:bb:07:30:fe:dd:fa:c2:2b:36:4a:d0:74:e7:50:26:
         3c:d5:91:f7:56:c0:99:40:28:f1:27:14:1e:22:de:ea:f8:aa:
         20:34:b9:1b:b0:9e:81:15:bf:14:48:02:6c:9f:0a:a2:78:8c:
         d0:9a:b4:68:ae:15:40:98:65:44:a4:31:fa:75:91:fd:5b:74:
         23:c2:cc:60:9c:29:95:90:66:1b:db:8a:84:6a:c6:28:15:96:
         9a:1c:ae:dc:9a:5c:1b:30:c1:08:37:63:5d:f9:36:bb:a1:c8:
         b5:e5:30:12:fc:25:74:29:cf:48:e8:9b:dc:03:06:9c:c5:76:
         cf:20:5a:c6:88:7e:47:90:28:18:b1:e3:dc:c0:77:93:ff:10:
         e8:10:90:ea:9f:54:bf:2c:6b:88:44:23:a6:68:1b:69:55:53:
         95:9c:f6:5d:64:d3:76:2e:40:73:70:d0:89:9e:c6:6d:a5:3c:
         96:99:2b:e8:9c:1d:14:59:8d:51:ca:69:92:cb:e3:2b:68:97:
         be:88:75:ae:aa:8e:a2:d7:e2:62:c9:70:0b:af:9c:eb:17:a2:
         72:ca:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:37 2026 by rpki-client