Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File:                     p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier:          hn7Us9di6jcrWti8b8LWlJpefXuZ5br6QcEpmo6FPBI=
Subject key identifier:   F0:47:FF:7E:FB:A5:D8:C0:F6:8D:BB:5D:BC:62:6E:E7:F6:0A:96:DC
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer:       /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial:       019F91DA8DF41511CB8A1B3DE9036DE01293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number:          19E1
Signing time:             Fri 24 Jul 2026 02:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:46 +0000
Files and hashes:         1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
                          2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
                          3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: mn1KdroOWEx5c/J1uQ43qzi5vFB5bTpCEOj4peRzK2c=)
                          4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:8d:f4:15:11:cb:8a:1b:3d:e9:03:6d:e0:12:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
        Validity
            Not Before: Jul 24 02:00:46 2026 GMT
            Not After : Jul 25 02:00:46 2026 GMT
        Subject: CN=f047ff7efba5d8c0f68dbb5dbc626ee7f60a96dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:1d:1f:4b:ec:86:5e:75:d9:c0:1d:bf:37:
                    4c:ea:55:50:77:27:5a:7e:56:82:2a:4e:f8:50:0c:
                    48:4d:0c:e2:26:fb:6f:b9:08:a0:c9:94:f6:93:04:
                    60:a1:19:f4:c4:91:6f:cf:b6:d8:1a:9d:c4:60:a8:
                    fa:97:7a:ee:e9:16:7a:f8:02:89:c5:04:46:b6:d3:
                    16:96:4e:97:41:2c:d3:0a:78:a4:29:36:0e:ae:b9:
                    c9:09:38:88:03:65:b0:36:a4:91:cc:bf:75:dd:f9:
                    ba:e9:f5:ef:c2:9c:d8:37:69:aa:2b:fb:06:bc:7b:
                    82:78:c9:63:fe:62:29:2c:53:7b:58:c7:79:9a:40:
                    c3:8e:3f:4e:4e:0a:d2:98:fe:b8:b1:74:97:0c:2c:
                    20:9a:eb:95:65:56:fa:a3:24:8f:39:24:31:17:d8:
                    6c:e2:99:f3:60:e3:55:fa:b7:28:aa:a4:d0:77:a1:
                    ac:95:cc:2a:22:0b:a1:14:a7:da:a9:ee:9d:e5:43:
                    1f:c7:42:ef:71:18:ef:96:c5:0e:e4:e3:cf:ec:3e:
                    76:0e:07:02:58:5e:75:f3:98:ce:da:4d:e4:48:2f:
                    f5:84:67:46:c5:89:35:73:bd:fc:5a:aa:d2:76:b0:
                    d6:e2:20:dd:a6:94:fe:da:fd:56:75:94:c2:03:3f:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:47:FF:7E:FB:A5:D8:C0:F6:8D:BB:5D:BC:62:6E:E7:F6:0A:96:DC
            X509v3 Authority Key Identifier:
                keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:d6:6c:ed:7b:90:cb:6b:df:04:e7:b4:26:35:5d:aa:cc:
         1d:41:b7:11:96:0f:79:e7:a4:fe:bb:98:2e:07:eb:3e:c0:db:
         24:7c:29:2a:20:5e:43:77:52:27:73:e0:ab:51:81:e5:1a:b3:
         d1:fd:8c:a4:1b:cc:2a:0b:08:ed:62:99:bf:5e:5c:71:15:08:
         bd:82:48:4f:d7:d3:fb:6d:71:04:73:cd:4f:e1:d4:b0:90:d1:
         a1:de:a1:68:e9:57:85:52:0a:70:86:fb:c9:8c:ef:6a:09:45:
         35:e6:0c:9d:69:9d:e3:28:52:6c:95:b5:15:c5:e8:62:84:28:
         e0:23:58:fc:c9:e5:b2:b1:1a:33:33:f4:d0:c6:d0:21:ca:f2:
         21:f0:e2:22:fd:22:b2:b3:44:c8:b7:30:76:c4:37:77:9f:8c:
         bc:49:d2:47:0e:0a:0a:05:e8:9f:68:73:7a:90:20:ad:b7:5d:
         c8:6c:65:24:2d:8c:61:87:f2:88:3e:d5:1a:01:73:73:b5:26:
         f8:ea:64:f7:21:0b:bf:df:27:08:b8:c2:df:be:5c:a8:f9:a4:
         31:8b:41:fb:30:f5:32:e7:fe:75:d9:a6:d4:5b:cf:62:d4:8d:
         5a:0a:87:26:7c:b6:10:7e:0a:24:4b:a8:e3:4c:43:25:91:c3:
         e2:f2:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:39 2026 by rpki-client