Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
File:                     s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json)
Hash identifier:          pDNGNgIKsHsC/cM88Iki7M0xCFnyb4PE7eTerJEui6w=
Subject key identifier:   D6:77:2B:7B:6B:5A:90:48:75:84:2C:0C:03:47:01:10:69:05:AF:59
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Certificate issuer:       /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial:       019F8FB543EB71753867D904FD1B2499D886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
Manifest number:          01E8
Signing time:             Thu 23 Jul 2026 16:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:48 +0000
Files and hashes:         1: 0mX3Kr0b0UFBMsJtVZn5yf2lhTM.asa (hash: t3G1NkXWHK4wGViktIA9e/IpeSePFuwm4DhV5QXwwUE=)
                          2: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: 9XOQcf3R6zp5iOaNtM2M1+lrfQ85n38zWMfB3qYCVAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:43:eb:71:75:38:67:d9:04:fd:1b:24:99:d8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
        Validity
            Not Before: Jul 23 16:00:48 2026 GMT
            Not After : Jul 24 16:00:48 2026 GMT
        Subject: CN=d6772b7b6b5a904875842c0c034701106905af59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:53:3f:0c:2b:3b:67:10:71:6c:89:5a:86:
                    41:28:3f:25:cc:ab:f7:b8:ee:2c:b0:64:1c:37:6c:
                    60:a2:a9:a6:6b:74:85:79:73:82:d9:d5:b9:01:2c:
                    a9:7b:0f:8a:04:40:78:75:ea:fd:1d:05:3c:24:59:
                    ce:b6:42:fa:9f:6b:eb:40:a4:52:93:8c:01:1c:3f:
                    d5:24:86:be:82:76:fe:67:97:a7:67:cc:aa:01:52:
                    70:06:61:a6:a3:89:3f:97:77:66:3d:51:f3:9f:fd:
                    74:59:3a:be:68:9c:09:3f:fb:b4:15:ad:f9:cc:6b:
                    8c:a1:68:ce:8d:27:09:78:c1:8e:0a:36:5d:ea:a8:
                    1c:a8:b0:7a:8b:6e:36:7d:78:c8:a6:39:4e:b6:6c:
                    48:1e:de:f3:ac:de:9d:f4:e6:f5:70:b3:69:d3:d3:
                    a2:ee:99:34:97:04:68:c6:7f:94:ae:1e:20:c6:7c:
                    0b:de:d1:a7:97:5d:e3:46:22:af:0b:de:c5:0f:fd:
                    ae:d5:74:3f:9e:60:8c:e0:66:19:78:c9:11:74:33:
                    3b:a0:7a:e5:89:02:ea:c8:d1:6c:4b:36:60:5c:5d:
                    5a:0a:02:9e:91:71:61:f8:91:8a:39:93:d9:d8:3b:
                    39:60:6a:25:89:32:2e:37:7c:75:dd:3e:d3:05:0d:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:77:2B:7B:6B:5A:90:48:75:84:2C:0C:03:47:01:10:69:05:AF:59
            X509v3 Authority Key Identifier:
                keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e4:0c:02:9d:16:af:f3:d9:62:d2:2e:61:7a:d9:b8:dd:f5:
         94:9f:5b:36:db:54:a4:94:9a:42:7f:e2:e2:13:04:83:e6:b6:
         cb:17:81:29:7b:a9:d0:14:c6:18:36:12:d0:7d:44:44:88:62:
         d2:e2:ee:3b:9f:46:4e:65:fc:9e:7a:7c:15:d5:f3:48:b7:e1:
         8c:18:f6:43:80:8d:45:69:d1:7b:ec:43:4b:34:a4:5a:46:7b:
         21:cf:e6:b4:07:7a:ba:24:51:0a:5f:28:f8:ef:48:1a:eb:6a:
         71:6d:3a:34:72:fe:31:72:fc:84:9f:04:57:6e:ec:b0:56:a3:
         88:de:52:c1:9d:ba:4c:02:9a:ab:63:cd:56:62:6b:b4:31:4b:
         21:37:f0:8b:a8:16:f0:82:cf:96:ce:ac:97:90:e4:b1:18:1e:
         82:ee:b5:c6:b0:f1:0c:0c:be:da:ae:7a:72:01:0a:fe:73:44:
         93:fd:69:2f:d3:17:fc:50:95:94:9e:61:46:cf:75:1a:73:5a:
         df:d8:66:33:d5:c5:80:76:91:3e:2f:3a:0c:6a:9a:f4:f9:4d:
         69:06:80:e3:1b:38:6f:04:f4:ea:0b:96:30:b1:ff:50:68:3b:
         d5:c4:d4:54:83:39:7f:6e:72:23:dc:d0:d6:d6:fc:73:2f:4b:
         5f:bd:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:18 2026 by rpki-client