Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
File:                     e0iUW51xbNR_veKGDYEA_NqYdJY.mft (raw, json)
Hash identifier:          aQMrjmyfc+uO/OGWympd8yGQlGQSrTP6tB7ayT55/qo=
Subject key identifier:   51:44:77:30:DF:2A:CE:D5:6C:AF:C4:38:2C:B8:B5:6B:9C:B9:D5:38
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Certificate issuer:       /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial:       019F943727DF2E52A85682AE85EFFA7FB2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
Manifest number:          148A
Signing time:             Fri 24 Jul 2026 13:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:10 +0000
Files and hashes:         1: I61e7xKM0b3HBMfOem1GkjpTt5g.roa (hash: FaXgX3Dd98HNPMZ5o0IJyCmUY3cwUhM+A2iDauz1zgs=)
                          2: LrcTICqDd3A4btEGTO4KHwQ42Y8.roa (hash: +DrfBRSbHtT1BFSdkrhh5RaN1YT4vBx8ggIQEd7CIdM=)
                          3: e0iUW51xbNR_veKGDYEA_NqYdJY.crl (hash: OV3DlFupUwi8uLOhKK1iqjSsu0NbR1TvKx0F1JIOhtM=)
                          4: gFSeIE8RfD29-XeFVWV7LZwgaBs.roa (hash: mJAnl2luIMfyFCce8fHzBb1+b8q7GBI6xpdUtTEqAdo=)
                          5: u3lR19hKAM5d_t8wpiV3PJkk-cw.roa (hash: thQW4SgnjYBzd+hCCC/UI6jU949759F9VL501xnOoQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:27:df:2e:52:a8:56:82:ae:85:ef:fa:7f:b2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
        Validity
            Not Before: Jul 24 13:01:10 2026 GMT
            Not After : Jul 25 13:01:10 2026 GMT
        Subject: CN=51447730df2aced56cafc4382cb8b56b9cb9d538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f4:23:eb:72:5a:b2:ca:33:a5:74:c3:59:a8:
                    48:b0:48:cf:e4:37:ad:1f:aa:71:a5:60:6d:bf:ac:
                    fe:e1:e7:b2:d4:03:c0:05:e3:93:48:a7:37:e2:74:
                    f0:22:ac:bf:d5:cc:fa:e8:c5:18:22:22:ed:0f:a1:
                    64:7c:35:9a:69:cf:24:59:b0:55:1d:3d:1d:a2:52:
                    6d:07:19:3d:a3:60:be:c4:2e:f0:d2:9a:a2:56:46:
                    95:85:78:ba:97:d0:f4:25:47:b1:e2:3f:00:79:cb:
                    e2:e5:4b:be:88:8b:17:a1:16:55:b0:a5:aa:36:42:
                    dc:15:6a:28:b4:b3:35:38:63:43:ef:9a:bf:e0:7a:
                    92:32:1a:13:07:5b:7d:66:2c:f7:1a:c0:b1:c1:f5:
                    62:ae:1d:77:41:3d:19:8d:aa:dc:14:e8:d9:f5:3a:
                    36:27:bb:d7:94:0d:bc:72:b6:5c:d6:dd:ba:75:d5:
                    1f:78:a6:28:b0:b6:9c:2a:a9:49:0a:6a:e5:58:e7:
                    58:af:14:a1:3b:c9:6a:88:19:8d:b0:ca:df:d4:96:
                    ea:33:31:33:fd:9f:46:17:d7:6b:ab:72:26:f0:a2:
                    7f:22:9c:46:d4:8b:0c:c5:8a:23:bd:b9:3b:32:7b:
                    a4:ab:64:88:99:8a:5b:0c:e6:57:cd:6e:ae:e1:ce:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:44:77:30:DF:2A:CE:D5:6C:AF:C4:38:2C:B8:B5:6B:9C:B9:D5:38
            X509v3 Authority Key Identifier:
                keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:83:8e:0c:fc:24:1a:f7:d5:98:69:c9:f3:92:17:bf:3d:4c:
         17:80:50:de:d3:dc:b7:6a:cd:ff:57:21:fc:26:1e:7c:e3:e0:
         8a:56:d3:c5:f0:ec:41:73:a0:b0:86:49:a1:38:46:d3:59:22:
         48:21:fb:4f:b9:e7:f2:ac:6e:62:c8:b2:ce:47:02:25:f9:ff:
         e6:c1:a7:79:d8:6e:8b:02:13:ce:07:e5:ec:28:26:90:b5:1a:
         7f:6d:53:37:72:db:da:9d:41:3a:1b:3b:ff:0a:dc:c1:6d:4b:
         44:f6:bb:81:c0:6f:d7:47:b7:e8:aa:98:21:f4:1c:83:ca:d9:
         b3:f5:9d:de:1d:3b:73:5c:10:58:7d:80:bc:79:99:f1:48:fa:
         b0:67:ff:c2:09:19:9e:63:56:52:3f:dd:ff:10:97:bb:55:13:
         cd:e0:bb:ba:38:28:5e:1c:a4:fc:05:5c:5a:81:8c:47:84:d1:
         70:6f:cd:ed:86:39:9d:28:9d:dc:d1:bc:b2:03:81:48:80:2e:
         07:ee:a7:0b:b3:02:8b:ef:c2:d9:71:52:da:6f:b1:fa:c1:f3:
         91:50:e2:12:0b:71:e5:49:f1:1e:dc:85:57:df:31:c0:6d:b0:
         ae:5f:b4:77:83:7d:f4:c0:a2:61:b7:64:5e:1e:73:dc:12:e3:
         1a:1d:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:17 2026 by rpki-client