Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          Hi5u+ohFCCyoGroGk8rY6mvVBmBKqBqur5WSW+HeUQA=
Subject key identifier:   D4:9F:6A:3D:94:85:7E:1E:A5:E0:5E:E1:69:A6:60:06:3E:F6:2E:C2
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       019F91DB230E72E42729C38402750DB9DD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          12C7
Signing time:             Fri 24 Jul 2026 02:01:25 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:25 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:25 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: O+80oUXLwE3UQIyBkCVUePqn9ym6jFLJdz+z0TFmmz0=)
                          2: HCkHGxOIl0AvSluH6FDwE5YOqmY.roa (hash: ZodFEdt/PdT+m5KjweAMGEU2ve/bYXAovApfHVhI2mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:23:0e:72:e4:27:29:c3:84:02:75:0d:b9:dd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Jul 24 02:01:25 2026 GMT
            Not After : Jul 25 02:01:25 2026 GMT
        Subject: CN=d49f6a3d94857e1ea5e05ee169a660063ef62ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:e8:fe:c2:e1:d6:dc:b9:f7:d5:11:a8:47:
                    c3:f9:da:d6:02:67:0a:c5:f5:a1:45:9a:4f:1c:ed:
                    ec:88:f1:2e:49:b8:08:47:d5:30:b1:83:19:1f:ab:
                    57:24:1f:0d:6f:19:ef:be:f2:74:ff:32:09:0a:55:
                    94:0d:5d:cc:73:46:1f:76:ec:42:84:72:62:37:2e:
                    18:b4:ba:4f:33:bb:21:3f:53:6f:fe:7e:8c:d2:9b:
                    c2:ea:72:1e:20:99:9a:7f:7d:13:65:05:8c:06:d2:
                    9a:a5:7c:31:9d:3c:22:27:a1:3a:1d:2c:7a:db:6d:
                    89:9b:08:c5:6b:47:93:ed:b9:4d:7a:81:c4:82:3d:
                    ca:ed:58:44:6b:d1:61:5c:b3:41:a1:e9:28:b3:7d:
                    1c:3d:c2:da:1e:38:43:d5:33:f3:a5:41:18:48:52:
                    1f:84:eb:62:84:8f:00:f5:88:41:a2:f8:34:bd:7f:
                    92:bc:47:7a:e8:d9:49:43:fd:68:7e:a3:fa:33:84:
                    69:f0:ee:2c:f4:6a:9c:83:08:7d:01:b6:2b:fa:72:
                    c7:23:2d:06:da:6f:03:e7:a2:bb:0c:f8:b3:6f:e9:
                    cf:c1:09:64:58:aa:41:ec:b0:a6:b5:10:78:60:b4:
                    9d:cb:bc:c8:e1:ee:4b:d2:65:48:a0:5a:68:7d:13:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:6A:3D:94:85:7E:1E:A5:E0:5E:E1:69:A6:60:06:3E:F6:2E:C2
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c8:30:c5:67:8e:02:8e:60:83:33:5c:3d:4f:94:8f:84:f4:
         d3:9b:8e:25:f4:b2:73:c8:82:2c:5c:40:2e:45:b9:94:5c:e6:
         c9:de:a4:31:3c:e0:a4:6c:18:8e:32:17:21:d8:b2:21:d3:44:
         25:d0:07:ae:ed:73:1c:cf:43:61:50:83:ca:c8:b3:59:4a:91:
         d9:7a:86:e8:42:92:cc:1b:77:7a:1a:bc:08:06:0c:88:cf:e2:
         40:3b:94:2f:eb:e4:c8:76:b9:ef:b1:9b:16:45:9a:32:c7:0d:
         2b:af:90:b3:cd:0e:c9:49:3c:a5:32:95:22:b5:08:56:be:37:
         9c:31:b2:e7:8b:99:0f:f3:09:d5:b9:66:e0:0c:c8:04:22:3c:
         54:d6:cd:1c:5b:ee:93:2e:19:14:78:0b:a4:0d:6b:c2:bd:9c:
         3a:c2:b6:80:26:9b:e8:35:52:7f:05:ed:bd:81:a6:77:43:0e:
         d5:6e:8e:c0:dc:62:d6:a0:98:b4:cc:60:fb:de:d9:2d:55:16:
         c6:7a:2c:1b:0a:34:ec:ee:d6:80:18:bd:ce:1c:32:6b:2c:4a:
         99:83:3d:60:88:63:57:b6:1f:98:b5:c7:46:fc:db:2f:bf:27:
         55:7f:20:ab:7c:f0:b8:7e:e1:ce:9e:ff:81:a9:b7:1e:a4:6d:
         3a:ef:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:08 2026 by rpki-client