Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File:                     _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier:          94GIzLrH8F8RsgJvAxtEzexuN/nMNWuEqMz+fHzc7BI=
Subject key identifier:   36:F0:AC:CA:6B:C9:83:85:BD:1F:AC:2D:84:1F:FE:72:FE:77:9C:31
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer:       /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial:       019F94DC04B6DB2782ECD9A256A2E1E16E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number:          0859
Signing time:             Fri 24 Jul 2026 16:01:14 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:14 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:14 +0000
Files and hashes:         1: 2l3jy0ks1GMTVrjjYXvE6dhr2UM.roa (hash: L4oxBugG8SBzHeTSIckApzq3w111E1/nbM2VYS8YHuw=)
                          2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: nyrsUCzOMyN9exuG+PcfJhrmYjGHu2+DMkqWJI6XynY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:04:b6:db:27:82:ec:d9:a2:56:a2:e1:e1:6e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
        Validity
            Not Before: Jul 24 16:01:14 2026 GMT
            Not After : Jul 25 16:01:14 2026 GMT
        Subject: CN=36f0acca6bc98385bd1fac2d841ffe72fe779c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:dc:58:54:9d:4a:e9:ac:4a:c8:0a:e8:39:
                    db:ea:f2:fa:cd:af:05:b0:cd:f1:30:32:23:30:5f:
                    86:e2:33:32:52:3f:d7:be:c0:9e:e0:cc:ee:da:85:
                    f2:19:0f:99:2d:a9:27:a6:f6:de:af:1b:db:bd:63:
                    a9:2b:d0:8f:e0:29:1b:ec:22:9f:74:cc:fa:91:1c:
                    82:c8:b3:ed:ff:aa:57:ca:36:6c:60:f8:f1:d0:45:
                    42:3e:da:85:7f:77:d1:eb:50:03:76:9c:05:15:c3:
                    b9:ec:31:43:e6:ec:2d:c5:02:81:75:59:38:5a:da:
                    e5:cf:61:56:ac:c8:7c:38:a8:1c:16:1c:80:83:de:
                    a1:5e:2c:38:cb:98:ca:29:da:ea:47:4a:e3:5b:9d:
                    a3:03:cf:c3:60:21:55:7d:9b:25:28:dc:0e:5a:d9:
                    14:d1:49:ed:09:54:4a:d5:d7:01:a5:5e:a5:9e:47:
                    1d:14:9a:40:ea:8e:7b:52:d0:d7:df:82:1f:9f:c5:
                    6c:e6:d5:35:5a:fd:2c:4d:42:ab:5a:67:3e:e7:04:
                    93:5f:ba:c2:c1:e6:c4:80:f3:ba:24:97:af:0a:49:
                    98:9e:a3:27:a5:1e:0f:d1:06:0e:e7:75:3f:13:a4:
                    f7:3b:79:32:e8:61:f9:21:c9:ec:35:4e:08:72:a8:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F0:AC:CA:6B:C9:83:85:BD:1F:AC:2D:84:1F:FE:72:FE:77:9C:31
            X509v3 Authority Key Identifier:
                keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:fb:b2:6b:c2:bb:98:cc:9c:7d:66:e0:c3:49:a1:b1:ac:
         16:35:d3:0c:1b:b3:f4:3d:a3:60:3b:af:79:3c:65:a4:a3:59:
         aa:6d:9f:36:fe:00:39:1f:8b:cf:02:61:c3:1e:89:23:6b:a7:
         46:c0:ea:84:d9:2f:6b:51:43:c1:cb:31:fd:65:51:1a:ac:13:
         51:e0:34:cc:5d:5e:05:a5:69:25:a9:af:4a:bb:38:7f:0a:9e:
         17:9c:18:a8:52:54:9a:ed:ff:ec:70:12:93:b7:4f:0c:82:c5:
         ee:63:25:0d:7a:a7:01:d9:74:80:d9:10:b5:21:7d:b9:68:87:
         cd:96:eb:4d:3b:bf:67:74:d3:fe:75:a0:c8:a9:e8:c3:52:75:
         27:6d:5c:78:9a:66:4a:91:a0:dc:5c:f5:45:0f:3b:62:b0:f6:
         01:03:7b:70:e0:00:d7:76:93:92:d9:f0:2d:ab:c4:67:29:d4:
         fc:83:ea:c6:52:75:73:25:23:3e:7f:4f:29:9a:1a:b3:0a:b2:
         5e:94:50:38:b7:eb:7a:ad:cf:68:2e:76:f5:a9:91:56:97:b5:
         2a:99:fa:d9:c5:42:11:50:92:13:c1:c4:fc:7f:66:29:b5:90:
         38:3d:75:ab:c7:55:46:c4:f2:7c:79:84:98:f8:fc:7f:78:d0:
         26:ca:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:28 2026 by rpki-client