Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File:                     5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier:          vP+Ez5ZxIXHewDDAg8wUah4SP4y2pwf5LVLexBrMwpg=
Subject key identifier:   E9:4F:E8:9F:7F:A5:98:18:EF:0C:CE:9F:4E:44:F2:CA:46:27:99:03
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer:       /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial:       019F913601DDAD24AF384D32574F86E83A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number:          0879
Signing time:             Thu 23 Jul 2026 23:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:03 +0000
Files and hashes:         1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: y3BH35rx7u6JTNIj4vCxS2s8p6W1EvXMJn7SyQYHNIE=)
                          2: vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa (hash: Ft3k1GMH35DD813n5Ke6tEuRDCxpQCa27sS+PQPuKK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:36:01:dd:ad:24:af:38:4d:32:57:4f:86:e8:3a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
        Validity
            Not Before: Jul 23 23:01:03 2026 GMT
            Not After : Jul 24 23:01:03 2026 GMT
        Subject: CN=e94fe89f7fa59818ef0cce9f4e44f2ca46279903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:72:b7:77:fc:b1:8b:e7:f1:8c:ca:4d:5f:
                    a0:10:af:3c:0d:5e:34:fa:e1:d7:08:41:80:49:97:
                    3c:67:87:21:42:08:a0:e5:01:fa:70:e9:6e:b5:ed:
                    15:23:07:58:75:48:f7:e3:85:ff:17:7e:35:60:be:
                    50:f7:8e:d7:67:d9:2b:fe:fd:be:3d:44:01:57:f7:
                    9c:76:fc:86:65:20:7b:a9:91:12:43:32:dc:13:67:
                    49:e6:15:5f:87:3c:0f:cc:07:a8:eb:d1:cb:c6:3c:
                    77:b3:34:a8:02:92:42:12:9b:e5:21:31:01:cc:fd:
                    06:f2:70:95:ec:a9:75:a0:3f:76:3b:b2:8b:51:75:
                    94:80:a3:67:8d:5b:29:ed:f1:43:7e:26:ce:f2:2f:
                    7d:e2:64:6d:d3:b2:39:c8:24:ee:c3:b7:59:48:58:
                    5b:ce:0d:2b:7e:91:ef:cc:68:7d:e9:70:e9:63:39:
                    d3:10:ba:0a:db:16:97:98:76:91:92:24:bc:b5:9e:
                    8b:16:f6:3a:9c:bf:08:12:91:49:18:95:3c:2f:df:
                    d1:f4:b7:a7:1a:76:04:d9:c3:b6:49:4a:9a:bf:32:
                    fc:7e:56:b5:ac:97:19:ab:d8:1e:d3:af:36:5a:f9:
                    dc:ad:b0:93:71:0d:89:21:8d:cb:14:83:e3:ef:27:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4F:E8:9F:7F:A5:98:18:EF:0C:CE:9F:4E:44:F2:CA:46:27:99:03
            X509v3 Authority Key Identifier:
                keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8f:bd:75:f3:60:15:6b:74:11:27:47:c3:91:72:32:0c:e6:
         99:e3:dc:21:fa:8b:1c:92:8b:cd:96:a0:bc:2f:8c:b1:a3:b9:
         86:8c:ff:dc:80:22:69:6d:36:9c:e0:fc:76:26:ad:fa:b3:6a:
         4d:f2:b3:86:28:6d:41:ca:57:8c:14:3a:cc:58:15:d6:1f:58:
         02:7b:41:eb:3a:3b:cd:d4:50:02:f1:2a:28:52:e0:53:1d:5b:
         80:67:7b:a3:cb:95:6e:26:dc:89:c1:ce:d3:b0:45:7b:bb:1b:
         f3:0e:71:71:a1:48:f8:08:01:4b:8e:62:b5:f7:17:2f:00:11:
         16:f4:58:60:56:06:12:fb:42:38:ce:ea:e9:cb:76:a9:91:d4:
         11:30:1e:a4:52:0b:cd:cb:3d:92:09:6f:df:17:41:2e:d7:f8:
         65:6e:de:8e:00:4c:63:03:c7:84:6b:00:d6:fc:2e:09:0f:8c:
         62:46:ec:84:bc:5f:ed:7d:61:96:a0:19:f0:37:7e:7d:c3:33:
         73:99:c9:f4:13:6e:67:d1:80:80:87:2b:ae:48:8d:f3:e3:70:
         3a:0a:83:ef:54:1b:57:01:5d:fa:99:d8:a1:e3:9c:7e:cd:6e:
         08:c7:e2:35:a2:46:ef:f0:d6:d8:89:76:72:d4:26:7f:46:fe:
         93:9a:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:03 2026 by rpki-client