Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
File:                     uH5a7bmaKXmvirMZP1RhzMEJk7s.mft (raw, json)
Hash identifier:          QYJRY0w1iwAl//65bbCLtjMn9s2n7/NSaJlWYHskOpk=
Subject key identifier:   05:4C:96:DA:D4:5B:A8:8F:CB:4C:9E:44:22:D0:9B:2E:45:3F:FB:6F
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Certificate issuer:       /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial:       019F954A07603583FA944B68ACC81399BCC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
Manifest number:          42
Signing time:             Fri 24 Jul 2026 18:01:24 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:24 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:24 +0000
Files and hashes:         1: PF8e_FHLHP2VjtFiiZZrvVvSsLI.roa (hash: e0MfoAAfwbq4ZZJ6qywKn5Vxfb/htSXVtX0d+TDmu3Q=)
                          2: R6M5qpYqqxyZqbcHLnctbf1Dg8M.roa (hash: RqgRuP5NzyvHUqZZDLI5gw5VV1GhQB+IWzarebNgEt0=)
                          3: havRenuAc3sWaFEp_ebH2dbYCIM.roa (hash: 3BZzhi4aYFSabiKQhAbLpfZdvk/co2C3Nc0BqHQrAGU=)
                          4: i8AN6geVF7hp5kMKRq_5tnIP6L0.roa (hash: oBfxy68KZXNPogj6PQRYfnFb/uYEC+FuyX64lWOc4jQ=)
                          5: uH5a7bmaKXmvirMZP1RhzMEJk7s.crl (hash: QfVa7Wt4PwxFapJlxoHcp1sLZaq3HZI95BeQfKMKpR4=)
                          6: xsv50bdrlhjVslC-d3EfouTes9E.roa (hash: qOUxvczcP9qEDQf8ITK1cqOoImWNAIXwxpiqhps+Npk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:07:60:35:83:fa:94:4b:68:ac:c8:13:99:bc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
        Validity
            Not Before: Jul 24 18:01:24 2026 GMT
            Not After : Jul 25 18:01:24 2026 GMT
        Subject: CN=054c96dad45ba88fcb4c9e4422d09b2e453ffb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:31:d4:f3:60:4f:75:16:1f:75:cc:5d:de:
                    42:c8:d6:df:a4:84:76:a5:91:c7:16:f4:4f:3a:44:
                    b7:45:c6:fa:91:ea:fc:9b:82:5f:13:e0:f7:42:cf:
                    3d:32:53:ef:32:d1:f5:fa:66:d2:0b:28:e3:5f:7c:
                    39:b5:29:6d:8c:ad:e4:c9:44:88:84:ff:48:cb:ac:
                    1f:c4:46:2c:cb:0b:ec:7f:04:6f:75:fb:66:4b:70:
                    41:5a:bb:2a:6b:60:db:3d:d5:86:53:ca:6b:ee:b0:
                    ac:80:39:08:c6:62:25:ce:00:63:9a:38:48:a7:69:
                    eb:32:13:b8:a2:2c:36:2b:3c:5b:f4:e3:63:d0:5f:
                    ee:2b:ff:c7:ae:e1:5b:39:62:15:58:9f:39:b5:f0:
                    8b:af:a7:2f:6b:ba:ce:be:dc:fa:13:1a:df:c0:5c:
                    64:a8:99:a6:f0:71:d5:1b:7e:9b:b6:1b:13:2c:33:
                    c9:40:ca:1c:aa:c6:77:41:03:9a:bc:63:d0:22:67:
                    fe:5e:0c:3c:3b:fc:f3:30:d0:56:36:29:a2:82:cc:
                    96:2f:83:90:26:f5:b0:0d:7a:b8:d2:da:27:90:36:
                    8a:17:59:01:6e:85:b4:2e:a9:44:17:a5:6c:4c:05:
                    21:28:6a:86:56:fb:e3:5b:57:44:da:b7:92:c6:2b:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4C:96:DA:D4:5B:A8:8F:CB:4C:9E:44:22:D0:9B:2E:45:3F:FB:6F
            X509v3 Authority Key Identifier:
                keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:a5:00:d2:16:70:ea:51:80:d4:24:10:bb:3e:ea:32:f5:
         ee:b3:94:f3:cd:9a:1c:6c:f0:86:d6:44:66:b8:7c:c9:9b:cf:
         97:66:4d:cc:94:74:aa:72:d9:38:21:e0:ca:4f:fc:0c:30:2e:
         ce:07:59:6d:f0:93:5e:fa:24:d0:24:2c:c4:22:71:d8:19:ec:
         86:e8:cf:f2:46:5e:e4:49:37:3e:26:f7:db:0c:eb:db:65:8c:
         9b:8e:c2:47:03:9b:70:ad:c1:c8:d1:31:cd:98:89:da:a1:f2:
         fc:24:fb:0e:9a:c4:ba:2b:f1:57:8c:90:39:c2:e2:5f:b7:17:
         a8:0d:ac:0c:f6:c8:88:c5:4e:07:57:72:1f:47:4a:6a:83:76:
         1d:71:21:ae:10:af:09:3d:e8:a1:32:fe:44:79:26:45:16:dc:
         e9:d0:ef:be:2f:1c:8c:bb:05:3d:52:37:18:db:6e:9e:35:78:
         ea:f7:4d:5f:f0:76:ef:7a:f0:ef:dd:07:d5:60:bf:2a:3c:3d:
         3b:c9:27:5d:60:aa:c4:d7:a3:d4:9c:b3:25:76:6d:e3:95:f9:
         33:be:f6:ce:86:b0:2b:be:a8:9b:c4:f8:db:5d:e6:c2:ef:ab:
         39:81:85:bc:3b:12:c0:81:4e:43:57:3a:f3:b3:5f:79:2f:db:
         d9:6e:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:27 2026 by rpki-client