Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
File:                     5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft (raw, json)
Hash identifier:          ZekmbXfQ8DwMHlLasln3R6+d/+6l4vChUwLGZ++3BQU=
Subject key identifier:   1D:7E:27:A1:7E:02:83:06:2C:D2:59:D4:FA:92:DF:C9:CB:DF:B4:56
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Certificate issuer:       /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial:       019F90911906934C347E4EEA296788054DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
Manifest number:          128F
Signing time:             Thu 23 Jul 2026 20:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:55 +0000
Files and hashes:         1: 5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl (hash: b8V+tyDdGPdYq/H25q2S/o1i4FeQGBkqkD50i1AJH1U=)
                          2: AHMMR6EYDrQMxtQlnkSulO0X6jU.roa (hash: 3sv84sSITu71ClB0zVRpfx2vaESjgHX6LKDrGF5Yu28=)
                          3: NK2t1r1Hx48nJrLENS2eIndh_OI.roa (hash: cedqRcFG2bweZk21bnL20BmkgBj5cya2Q7JPY5R+njs=)
                          4: oVYqrlFhD7zcwh_F2ONVqQJ2mdQ.roa (hash: Yn6vN33kb9RjwKZiBCTU79r+CEwj1FzkLh9/leqQkWo=)
                          5: zrNA7EO-aqfQRhRNBG4VKp78FXg.roa (hash: t2kI/cFlrzrBr7Cb/Sn2KYFTTynlTaXh6qfK8ZN7nAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:19:06:93:4c:34:7e:4e:ea:29:67:88:05:4d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
        Validity
            Not Before: Jul 23 20:00:55 2026 GMT
            Not After : Jul 24 20:00:55 2026 GMT
        Subject: CN=1d7e27a17e0283062cd259d4fa92dfc9cbdfb456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:74:63:9c:60:93:27:47:5b:4c:32:60:7b:
                    b8:bf:34:e7:f2:75:c2:78:31:78:29:00:85:ea:5b:
                    ad:5d:23:e7:22:46:e1:3c:78:4e:15:41:0f:4e:d2:
                    fd:8e:c8:b0:8e:f5:20:93:01:87:0c:fd:47:65:7f:
                    e8:2f:ba:47:73:d8:6e:25:f4:52:8c:ec:50:96:be:
                    d9:46:03:78:7b:57:a0:b1:1e:60:0b:6a:10:c2:92:
                    14:c4:e0:52:65:55:3d:86:56:f8:c1:3d:07:38:81:
                    15:02:f2:bc:ef:dd:11:8b:8f:4e:b7:fa:67:7a:33:
                    33:a5:69:92:c6:32:d8:b2:04:d3:4a:f1:bf:a0:5a:
                    68:82:75:cd:c9:bb:8b:d3:6c:b0:de:fe:cb:9e:89:
                    99:3a:a9:bd:2d:68:33:a6:45:3c:97:6d:58:04:16:
                    01:19:69:04:0b:5a:2d:47:6a:e1:90:ce:f7:8f:6a:
                    75:d1:f0:91:ad:98:ae:5b:59:f8:a2:28:b8:d4:58:
                    cf:87:20:81:ca:3f:43:ba:4c:b3:3f:e9:2a:24:06:
                    4d:df:20:91:dd:28:0e:fa:52:2e:ed:a2:5d:28:cf:
                    58:08:93:32:70:df:c1:85:d9:bd:36:8b:7b:97:fe:
                    c0:37:17:8d:6f:2d:56:2b:c4:37:5c:00:7c:f5:d9:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7E:27:A1:7E:02:83:06:2C:D2:59:D4:FA:92:DF:C9:CB:DF:B4:56
            X509v3 Authority Key Identifier:
                keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:c2:00:86:b8:f6:66:ce:a9:a9:51:a9:25:cd:bc:56:0b:d2:
         26:d4:62:ff:34:35:2b:b2:26:66:e1:91:da:cf:e6:a2:e7:d6:
         7c:21:b2:1b:bf:60:5e:cf:36:68:c3:a2:dc:d2:b9:65:f8:4d:
         55:a9:29:08:26:1d:c5:e1:88:c4:7f:af:32:42:09:7a:7c:cf:
         de:c7:69:72:65:ae:19:19:b6:c2:8c:ef:d9:de:8e:ee:2b:a3:
         12:9e:ed:f6:01:c0:08:fd:96:e7:2d:b4:1b:a0:62:c5:63:42:
         6f:ca:da:9e:d7:38:42:28:b5:2e:97:f2:68:49:ff:2a:58:14:
         d9:2e:45:81:35:7a:9f:91:a0:8c:6f:e5:f3:0b:3d:be:ad:d1:
         da:de:20:5f:cf:a0:7a:99:c4:91:5e:ef:95:46:37:99:b6:fa:
         de:ff:93:a1:f9:27:3a:6a:8f:0a:8b:b1:41:3a:86:84:5f:bd:
         d2:e5:3a:9f:96:58:f2:ae:f1:d5:a7:18:49:87:c8:c2:61:cb:
         c9:95:4b:1c:2e:fc:65:bb:29:a9:ed:6b:6b:56:dc:7d:74:36:
         9a:1a:7c:09:0e:4c:b4:b6:0c:14:c8:8a:80:05:3c:6a:f8:57:
         bf:d3:62:f7:98:d1:8a:3e:d7:af:20:90:af:11:a4:09:0b:e4:
         92:dc:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:50:39 2026 by rpki-client