Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File:                     s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier:          5t8c37lG4nRLrH9H4czkFl0QcYisSBEDTRNgA4NlPz4=
Subject key identifier:   88:A5:D1:CC:9F:37:C7:FA:88:E6:A4:17:3C:9B:87:42:D8:89:6F:30
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       019F921173164DFF0AC1BC22988950B1BDF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 03:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:44 +0000
Files and hashes:         1: 4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (hash: SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=)
                          2: eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa (hash: EZHtgyXuVhoKYg4ldCwReKSDjf4sa7sqciiJnV/pNsU=)
                          3: gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa (hash: MTngT7ag+SmUmwcOQxAC0+9glcY1SoAbKgViBkJyexI=)
                          4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: EfUUhxTAODo404AWeIP5Mrc2jmY4nHWCZRsA5v0y97k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:73:16:4d:ff:0a:c1:bc:22:98:89:50:b1:bd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Jul 24 03:00:44 2026 GMT
            Not After : Jul 25 03:00:44 2026 GMT
        Subject: CN=88a5d1cc9f37c7fa88e6a4173c9b8742d8896f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:0d:c8:b4:07:c0:7b:5d:5a:a5:f7:e8:43:
                    31:5e:cd:df:7b:a4:35:88:df:91:43:0c:39:27:36:
                    99:39:a9:16:38:40:21:2a:2d:c5:44:e2:3b:7d:b9:
                    51:d6:11:e8:78:e4:3a:39:e4:ab:c0:da:e9:47:bb:
                    ed:5f:d8:78:ae:6b:41:eb:7e:36:be:2b:db:03:63:
                    c8:ee:f4:75:89:fc:d8:45:fe:ce:51:af:f8:8c:9d:
                    89:4f:7f:24:61:74:59:f3:38:a4:48:58:50:a1:b4:
                    53:bd:09:12:2d:46:ab:d7:ff:66:ea:29:0c:2a:5b:
                    6f:64:5a:69:fc:37:ad:57:e9:a1:03:ca:e0:4f:9a:
                    1c:f8:56:9d:3a:da:f1:42:1a:24:d2:19:af:c0:45:
                    d1:03:7d:3c:d0:9d:94:11:0d:22:38:e1:bd:54:85:
                    7e:66:09:3a:ab:ce:0c:2e:26:de:cb:db:6b:9e:27:
                    0b:8b:89:f3:73:02:c0:f9:d0:e6:e2:4b:80:51:4a:
                    77:d8:89:e6:de:74:8f:dc:d0:7d:de:df:47:41:c3:
                    28:d9:9d:a9:26:56:5a:cc:26:f6:f1:ef:48:3f:25:
                    6d:1f:92:36:40:8e:9f:fc:e6:6a:db:46:31:af:51:
                    4f:bc:c8:52:eb:a3:dc:63:ea:62:b5:c8:28:67:c7:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:D1:CC:9F:37:C7:FA:88:E6:A4:17:3C:9B:87:42:D8:89:6F:30
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c2:99:62:10:98:0f:fe:a2:f7:e8:d4:52:6a:3d:87:99:42:
         52:80:04:1f:b8:52:18:00:96:3e:73:48:f3:3e:f7:d8:69:7b:
         0f:e2:37:01:d3:df:03:49:42:05:14:8d:60:81:df:c1:d4:de:
         54:4c:5b:ec:ae:87:1e:bd:f4:d0:60:71:b6:3e:f6:78:df:5b:
         f6:38:f6:43:55:e1:c1:3c:8f:9f:35:bd:5f:0e:5e:7b:f3:22:
         48:64:c7:72:43:7d:a9:e8:b6:cd:5e:b5:9f:25:9b:25:0c:3d:
         63:ed:95:52:51:ff:94:76:45:1c:76:3a:39:2c:e7:6d:a3:8f:
         2f:49:0e:f3:cb:8e:7f:8f:e4:c7:1a:9b:fa:55:5d:7f:f7:74:
         f7:2d:ab:ba:35:5e:55:7d:5f:7a:3f:23:ac:0a:43:76:9b:1d:
         1d:d0:ec:45:0e:6c:33:31:16:76:00:01:39:e8:23:fb:e6:57:
         a3:f8:82:e9:91:d5:8a:10:f7:e3:e2:39:17:86:4b:96:37:7c:
         74:ae:e6:bb:fd:75:0b:d0:fd:ad:80:88:5e:5c:13:d1:21:40:
         a8:aa:9d:83:3e:67:8f:e2:27:1c:67:35:95:c4:9c:c0:cf:40:
         a3:a2:33:64:7a:8c:b0:af:4a:a5:4f:aa:17:7c:bf:3b:df:c4:
         4f:a9:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:21 2026 by rpki-client