Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File:                     5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier:          QX227eWS2adqNd7l0loRp7IFx746GXgycqu6zfeLJ/A=
Subject key identifier:   83:11:63:96:D6:40:31:DF:E1:1A:BA:B3:E4:E3:A3:0C:3D:41:73:AF
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer:       /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial:       019F8F47A23EAA062E95E954331425676798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number:          1967
Signing time:             Thu 23 Jul 2026 14:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 14:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 14:01:04 +0000
Files and hashes:         1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: IlQYum1VoTGMgHsTW1sFFOPd8jQMxZ2wIcBL9DLbH5c=)
                          2: zL-LWx-Rz7OMaI1EPMJkxLg31_M.roa (hash: cgNfkZmen0X8xi6X3N5ufjIJZAx+Um78IAgsseJM+y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:a2:3e:aa:06:2e:95:e9:54:33:14:25:67:67:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
        Validity
            Not Before: Jul 23 14:01:04 2026 GMT
            Not After : Jul 24 14:01:04 2026 GMT
        Subject: CN=83116396d64031dfe11abab3e4e3a30c3d4173af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:72:57:f4:84:91:a9:c4:4d:cc:5e:a3:fc:
                    a8:52:24:89:40:f3:4b:9f:9a:2c:d5:e5:6f:49:ae:
                    f6:30:4d:65:4a:1a:05:80:11:55:12:d7:1b:dc:d9:
                    73:bf:76:e1:12:e4:44:8a:3f:b5:a3:56:2d:c8:e1:
                    f8:f5:8c:67:fd:ad:ae:e5:ac:aa:e3:ea:00:4f:d9:
                    29:79:55:f0:46:d4:e1:52:55:72:6d:7b:85:b0:c0:
                    88:e2:49:57:58:d7:06:15:49:ea:22:cb:60:3d:c8:
                    cd:44:2e:dd:29:fd:82:c9:8b:8a:0b:61:da:3a:40:
                    0a:a5:a0:c3:11:5f:77:57:b7:30:3c:0f:72:1d:e7:
                    2b:32:85:8b:e8:bc:d9:07:26:08:8e:63:28:23:73:
                    f6:12:45:bd:6a:99:2d:86:e3:7d:49:16:a9:45:c5:
                    83:48:dc:8b:c1:19:d0:91:65:61:f3:8a:70:dd:a6:
                    11:45:92:23:38:b0:63:07:88:d1:cb:81:1a:13:a4:
                    28:04:cf:78:f3:4d:f3:7b:13:67:a4:d4:d3:f9:0f:
                    ad:44:f8:9f:32:bb:77:7c:7d:b6:1f:80:e4:8e:42:
                    fe:ce:d7:bd:64:03:5c:f9:f4:26:c3:bc:c3:76:e3:
                    9b:2c:41:51:e3:7e:d2:9d:cf:4b:51:81:bb:e6:ab:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:11:63:96:D6:40:31:DF:E1:1A:BA:B3:E4:E3:A3:0C:3D:41:73:AF
            X509v3 Authority Key Identifier:
                keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ec:60:cf:eb:03:0b:f6:12:a4:1c:ed:26:5b:56:7d:3c:06:
         8f:24:8b:c9:42:1b:7c:a1:4f:46:98:88:99:11:30:85:57:4c:
         a1:87:1c:42:89:8c:3f:e7:4c:f6:b6:a5:97:3f:fd:99:e0:d0:
         9d:40:45:a4:83:49:dd:2e:4a:50:86:25:2f:bf:9a:11:67:de:
         02:01:7b:88:c8:af:3a:5a:4a:66:e3:ce:05:0d:60:de:52:38:
         04:98:56:9c:3a:50:0f:64:a3:88:18:00:d0:64:ec:19:f7:62:
         77:10:bf:35:a9:a2:47:c5:6e:08:b5:cb:73:54:88:ab:10:3a:
         a3:67:4f:e9:f4:61:05:d4:c3:f2:70:7e:25:ab:74:7d:96:44:
         d2:32:f9:02:96:42:23:6e:7e:e2:ad:c1:db:8e:1f:42:e7:7f:
         73:53:44:dc:9b:9b:10:95:18:51:86:e9:60:04:35:d7:f6:a9:
         2a:32:b5:03:a6:79:a7:47:ee:1a:22:89:98:ff:68:16:86:86:
         43:e1:bb:24:f6:23:2b:f4:cc:05:c5:cb:64:a6:e0:2d:e3:90:
         34:e4:db:76:fe:1b:7a:57:bd:83:3c:92:29:c5:9c:64:ff:87:
         b8:a8:2c:57:28:0c:8a:3d:01:fc:b7:1b:3a:14:8b:50:b2:61:
         11:ff:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:08 2026 by rpki-client