Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          D5rjRMpk91/9WlJqKcmPKvLqc5XgltwEBwPRIk8ajXk=
Subject key identifier:   50:07:4C:BE:98:85:2F:B0:33:F4:4D:A4:7B:57:1F:33:58:A1:A2:BE
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       019F8FB545CF5FACF5CD099734D96E910729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 16:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:49 +0000
Files and hashes:         1: Gr2HNFebnqweKA8qaD2IyszWQgI.roa (hash: RegbgViGMcDrxCenuREVm4TdvOmQvNdOjtPl4uk6fVU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: piCzJcNv4a8hoa8TXnU4AaRwJbwtIF1ZZxQ8hgmfsFI=)
                          3: wCh-pphXrFlnVedivymKoSdB-PQ.roa (hash: RWZ4wkHC1VRgI9WF5HxhbBtNjKgc6U0S8oWX6yGUEvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:45:cf:5f:ac:f5:cd:09:97:34:d9:6e:91:07:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Jul 23 16:00:49 2026 GMT
            Not After : Jul 24 16:00:49 2026 GMT
        Subject: CN=50074cbe98852fb033f44da47b571f3358a1a2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:0d:57:2b:c8:a1:5d:0c:2c:88:5c:70:bf:
                    29:ab:20:ad:07:c5:fb:ca:7b:5d:48:f9:b3:71:b9:
                    b2:3f:53:f9:34:0f:63:39:83:4b:82:c7:b6:87:d8:
                    aa:57:b0:76:9c:9d:ab:45:8b:ca:c7:14:f3:3c:f3:
                    4e:34:98:61:11:cd:7c:22:ed:f6:d9:a0:17:c9:1b:
                    f7:87:8f:0e:4d:80:a1:48:d0:e1:f6:71:bd:18:fb:
                    ca:1c:9a:e2:be:29:35:e6:e6:3b:fc:99:b2:6e:c8:
                    23:a7:7f:5a:9b:c7:ee:17:75:c4:ea:41:1c:a1:cd:
                    c8:d8:79:13:ce:f8:5e:ca:ea:e4:11:ba:4d:b3:ea:
                    23:b5:a9:8a:d5:1e:24:ad:fc:b5:d2:31:bd:c1:32:
                    bf:38:2d:70:cc:91:58:ea:8e:5c:91:8d:5f:1b:e2:
                    a3:9a:73:01:92:52:b9:f3:5e:e7:9a:b3:80:38:c7:
                    c4:c8:7a:4f:51:d4:74:e2:13:04:da:bf:d6:cf:c3:
                    b9:6f:4d:20:44:72:0c:97:d8:a5:14:5d:2b:c9:b1:
                    44:62:08:8e:d3:8f:d1:22:9b:ba:10:ca:d1:8e:6a:
                    a8:36:c1:85:d5:77:a2:ed:be:14:4c:a3:91:5e:34:
                    48:22:42:e5:17:b1:88:e1:9f:3d:e0:2b:44:82:23:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:4C:BE:98:85:2F:B0:33:F4:4D:A4:7B:57:1F:33:58:A1:A2:BE
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:20:1b:9e:f9:02:c8:2c:e2:48:f4:b2:2e:1e:a9:0f:b2:
         b8:65:cb:b8:1d:20:c0:98:aa:fe:b1:5a:dd:2d:2a:84:d2:29:
         96:04:60:c1:c9:fc:76:00:a8:30:9a:00:46:27:07:f0:fe:4f:
         43:03:8c:49:c0:f0:6b:fe:f2:f4:9a:86:d4:64:12:d3:1d:b5:
         a1:fd:85:c5:ed:40:ea:97:8e:96:1b:98:ac:54:a6:3d:1d:13:
         0d:90:a0:80:c1:3f:91:18:49:ab:e5:de:13:8d:65:3a:a3:d0:
         ba:12:8f:7a:b7:1d:1b:51:22:da:47:66:c5:cc:65:86:63:76:
         d5:99:6f:62:cd:5e:2d:91:07:fe:27:6a:66:69:f9:0c:d8:cf:
         ee:a8:62:5b:cc:3c:18:a6:cb:3f:35:2a:ef:08:aa:dc:21:7f:
         15:71:cf:71:b3:32:6b:01:08:bb:4a:35:c3:ec:de:73:fb:f5:
         d3:e0:60:76:2f:72:c2:d7:b6:57:49:84:74:f5:4e:90:b9:5f:
         84:df:f0:df:15:03:38:69:00:28:c9:24:4d:d7:8c:8e:ba:1d:
         8a:08:a5:54:36:d1:d1:26:fb:0c:ca:df:67:63:a2:4c:f3:5a:
         7b:a0:a1:39:59:69:5c:84:55:dd:45:30:ef:d6:74:38:c8:71:
         25:28:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:44 2026 by rpki-client