Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
File:                     t1OsA5RSieGGvylzeyVhjTzNRDA.mft (raw, json)
Hash identifier:          +oNyFAgbuZRJCwOY65bqxmJLpXvMQ9JwggJDv/H9geE=
Subject key identifier:   5E:8F:16:9E:78:C9:2D:6E:5A:19:6F:E7:BF:A1:7E:3F:97:F9:EA:15
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Certificate issuer:       /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial:       019F916D0CB1024D973BD3D046159EE80418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:10 +0000
Files and hashes:         1: 1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa (hash: k8H40R+fMFH7wBdsLB91Y9l2eozFqsIfXqragAiM93E=)
                          2: ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa (hash: 6cSn8uzwyUxMJNcnfAeGMw+pCS/UoUALDhF7qixnWRg=)
                          3: fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa (hash: WDhKtqp/PbP0mGK261CVF4VxFxH7CTo0soaxOvLBySA=)
                          4: t1OsA5RSieGGvylzeyVhjTzNRDA.crl (hash: R2x4m7gjnt9EKfhvR9Sw4Lc06VJmlK4ZjlmCVX/MFT4=)
                          5: tr8FATLSUssLeZoYd6_aJnbXdq8.roa (hash: 7GIhmLkuSFB1irvbk3E504lE/D2UrFS2bjn5VxfkzOQ=)
                          6: wrNDqIGL46GbPFlLV3ftdAx_UK4.roa (hash: 5QK1F45BImfUqKNV131htGF5A+1+6XK2Skgx/nv8vZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:0c:b1:02:4d:97:3b:d3:d0:46:15:9e:e8:04:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
        Validity
            Not Before: Jul 24 00:01:10 2026 GMT
            Not After : Jul 25 00:01:10 2026 GMT
        Subject: CN=5e8f169e78c92d6e5a196fe7bfa17e3f97f9ea15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:eb:f0:3f:b4:8f:3f:ba:ec:91:77:ce:2b:
                    4c:9c:a9:db:7a:63:3b:5a:3e:8d:6c:0a:b4:4c:38:
                    55:fd:7c:d3:1a:a3:06:55:15:a6:2c:27:22:78:0c:
                    c3:bd:8b:a7:bf:de:55:37:3b:d3:7d:d6:5e:70:f6:
                    19:15:ff:69:f7:97:df:6d:6b:80:e8:c3:2c:c3:a8:
                    0c:77:0e:29:c3:3c:ab:5b:71:09:6d:c0:27:42:fd:
                    03:71:8a:89:67:da:e8:1a:b8:97:2f:fc:38:99:1e:
                    b4:5d:f9:10:a6:be:4f:13:61:a3:ed:25:50:73:bd:
                    e8:3a:7a:24:40:0c:b3:35:81:73:e5:24:96:66:ab:
                    53:d7:7e:16:12:9e:14:92:b6:a3:75:3d:a3:c1:35:
                    18:4f:47:ef:83:b4:fe:6f:3a:27:36:da:ea:c4:7a:
                    e2:3c:52:0a:57:d3:69:8b:56:f0:b6:50:56:66:3e:
                    7e:4d:5b:fe:3b:c3:7c:da:c7:b4:c4:68:38:5b:bc:
                    a2:ae:8d:a5:c4:07:d5:3b:4e:73:d8:0f:0d:75:5b:
                    4a:07:b5:7d:ff:4b:41:e6:c2:32:7d:39:b0:f8:d0:
                    e9:58:2d:60:71:ad:74:dd:ae:a5:49:4a:ec:24:c6:
                    cf:18:60:39:e8:c7:15:65:31:ae:e4:c9:7f:5a:37:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8F:16:9E:78:C9:2D:6E:5A:19:6F:E7:BF:A1:7E:3F:97:F9:EA:15
            X509v3 Authority Key Identifier:
                keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:94:4b:c9:ec:01:bd:74:ca:f5:53:b3:2b:f1:94:c8:34:25:
         c9:de:02:ed:db:05:95:36:cb:e3:2e:eb:34:68:77:2b:ea:65:
         da:bf:7e:6c:5e:8a:64:e3:93:1c:e3:99:3d:d7:97:25:d0:d6:
         47:95:5d:26:00:2f:90:2e:9f:c6:6c:9f:dc:81:7d:3c:47:c1:
         5c:6f:1e:31:c1:f5:38:e7:e5:5f:c6:c8:f4:e8:bb:d5:c2:1d:
         b8:5e:e6:a2:b2:8f:68:f2:d0:58:4d:06:47:f3:12:0e:74:ab:
         d2:c0:2b:88:b2:f5:89:4d:fc:c2:5c:9e:95:25:55:6c:1f:d0:
         34:a6:bc:33:a1:77:f7:28:15:ce:c4:b2:09:bc:b0:d7:d0:45:
         d4:ae:8a:75:fd:c5:ff:40:9c:5c:e2:5a:b7:1d:08:2a:3e:3b:
         7e:13:72:26:79:9b:9f:ca:ab:e6:7c:78:0d:84:71:8b:63:86:
         3e:a8:bc:16:2e:a1:f4:45:65:2b:21:4b:e8:3f:a6:74:dd:77:
         fc:2f:e4:25:00:b2:1d:5c:51:67:0a:0f:82:8f:ec:9f:d6:1c:
         96:a7:74:c2:71:cc:3d:9d:09:38:71:f1:84:34:14:b0:74:86:
         5e:e3:38:78:6d:7d:0a:47:80:5e:b0:b8:63:c4:85:cc:25:10:
         c7:e9:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:47 2026 by rpki-client