Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File:                     h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier:          r8BtUXwehMRjeVlH93vbhapZm4BEXlM2uYOjRoX9WGQ=
Subject key identifier:   5E:D6:25:0C:52:F3:C1:1E:E1:E5:5D:3A:87:6B:1B:DD:BD:98:62:19
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer:       /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial:       019F946D6320250A253BA7D77F398640275E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 14:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:24 +0000
Files and hashes:         1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: VO4gmZQI5rQOALgzK7pAY4t7X3b9zGaEr/MF42PUS7Y=)
                          2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
                          3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:63:20:25:0a:25:3b:a7:d7:7f:39:86:40:27:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
        Validity
            Not Before: Jul 24 14:00:24 2026 GMT
            Not After : Jul 25 14:00:24 2026 GMT
        Subject: CN=5ed6250c52f3c11ee1e55d3a876b1bddbd986219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:aa:82:c7:4a:00:a4:d8:17:92:b2:79:8e:
                    9e:50:43:68:39:83:f2:22:e9:f2:3b:3a:7a:1b:cc:
                    08:84:07:e9:3e:79:87:df:be:24:02:ad:b0:a3:dc:
                    14:18:d3:ff:4a:ac:0d:d6:97:9d:e6:f9:33:c7:2a:
                    bc:0a:4b:f2:a5:1c:e3:21:6e:96:75:37:1d:32:87:
                    b5:0a:35:1d:7b:db:3f:ca:d7:d9:ab:34:2a:dc:cf:
                    12:e9:c0:f6:81:95:2d:c6:3b:a6:49:82:c1:b1:d2:
                    3b:b9:a3:0e:b7:56:58:03:22:03:bf:1f:58:81:24:
                    a3:3d:4e:48:68:6a:89:a1:8a:83:ee:ab:d5:ed:29:
                    49:55:d6:40:1f:2f:d8:92:0a:34:79:b4:6c:7d:e5:
                    0b:50:98:b7:b4:d5:c4:49:09:b7:d5:43:14:d5:91:
                    fb:86:49:7c:b1:45:55:72:0d:34:71:0f:79:d3:53:
                    1e:fd:4a:47:30:33:52:aa:f3:be:79:e4:6e:a1:62:
                    9f:0b:07:ff:e0:60:6f:28:54:51:f3:84:12:9a:0f:
                    e9:10:26:26:cb:56:e3:03:10:b5:7f:4c:fb:15:88:
                    c6:bb:c0:a7:5f:97:c1:7a:0f:0f:b6:5e:4f:a9:83:
                    64:26:7a:f9:ec:b8:9b:3a:f9:bc:bc:d1:07:a6:36:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D6:25:0C:52:F3:C1:1E:E1:E5:5D:3A:87:6B:1B:DD:BD:98:62:19
            X509v3 Authority Key Identifier:
                keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:ce:e4:13:93:ea:a2:f6:bd:06:5b:76:a2:0b:c5:e7:5e:
         03:06:cc:05:3c:03:5b:21:7b:99:36:88:bd:3b:87:37:64:03:
         11:18:04:3f:33:b1:96:05:c9:28:87:52:f5:26:c3:ae:c8:c2:
         ab:a7:18:d6:98:8b:d9:3f:42:98:4d:46:26:f5:66:f0:e5:1f:
         85:26:cb:41:1f:24:c1:9c:9a:14:5f:55:c3:13:cc:cc:7f:61:
         3e:37:43:c0:a1:21:10:d7:fc:76:f4:54:35:41:70:96:2b:c1:
         d4:31:80:15:d1:11:e6:cd:1d:3c:9c:f3:1f:ab:72:05:23:a7:
         7c:21:62:a1:7c:2f:39:1a:38:47:fe:9f:eb:c9:59:6d:32:3f:
         d3:42:6d:37:f0:64:cd:fe:93:48:4d:47:a6:2e:88:7a:e8:5b:
         d4:ff:16:08:ae:51:26:a1:d1:d7:8d:ff:76:47:26:44:42:9a:
         64:df:5e:72:bf:e4:0b:b0:33:8a:4e:71:74:85:22:df:6f:14:
         b3:8c:56:89:14:5f:b6:cb:7b:f8:67:01:00:54:d2:c5:4e:99:
         dd:46:47:51:c3:69:51:f0:9e:82:35:0c:9e:5d:46:03:61:83:
         e5:4e:f5:5d:6d:42:a5:b2:7d:5b:b5:1e:41:af:8f:11:41:99:
         e3:44:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:18 2026 by rpki-client