Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File:                     5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier:          h4QLuKcwB1fcZM8dQFxKO64GcZvrxRAfMCsYozwZ8u0=
Subject key identifier:   36:82:22:34:6A:A6:C4:5D:34:7E:AD:A0:16:09:AF:0A:8A:1D:AB:2F
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer:       /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial:       019F8F47A11F4964DA663858FDB3E5777FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 14:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 14:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 14:01:03 +0000
Files and hashes:         1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
                          2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: P4+SVlRRrZ6mABJu6AALmGmc52S9Ic8/dLEbrcO1fmg=)
                          3: 6sd_k1RdUMYWXA26WfVTDEokc2M.roa (hash: 8hUqySg/rBZ3NT/ihAM6VBXGwvE0oaRfR5K9FgBx9sY=)
                          4: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:a1:1f:49:64:da:66:38:58:fd:b3:e5:77:7f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
        Validity
            Not Before: Jul 23 14:01:03 2026 GMT
            Not After : Jul 24 14:01:03 2026 GMT
        Subject: CN=368222346aa6c45d347eada01609af0a8a1dab2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ae:b7:c7:fb:1a:72:ec:3a:40:e2:28:ee:6d:
                    30:ac:11:07:96:8f:0b:af:7c:20:c1:b2:82:64:f4:
                    11:3b:72:7a:c8:22:71:08:1a:2e:92:13:cc:ff:2d:
                    d9:ec:c8:25:fa:d7:ab:b8:60:fb:9d:a9:79:46:5e:
                    22:b2:77:ce:76:ca:02:78:20:52:e8:3c:e1:36:ff:
                    5e:34:6a:68:bd:be:63:13:34:83:34:ed:15:68:91:
                    3d:94:4c:ba:48:cd:09:92:38:e9:6a:29:24:e6:7b:
                    92:f4:62:6b:1c:83:08:ca:32:9b:01:76:2a:35:ba:
                    5d:02:8c:54:b2:ed:59:2c:02:15:9d:d9:db:c6:aa:
                    b6:bf:23:65:a4:02:cd:15:0c:39:de:e9:23:d1:3b:
                    6e:8e:58:ee:09:f2:cd:f7:34:c9:5e:e0:0b:58:6e:
                    b2:fa:1b:1f:14:f6:2d:08:45:df:de:82:64:48:a6:
                    c1:32:09:79:30:76:2a:1b:5f:84:fb:f3:94:13:cc:
                    ef:bc:2e:bb:fc:db:70:31:f4:02:ab:24:9e:69:cd:
                    98:70:3e:ed:8d:3b:e9:88:1d:29:16:dc:c6:86:0e:
                    d6:61:fe:cd:a1:45:18:4b:55:ae:9c:b1:42:dd:4e:
                    27:ef:de:b2:89:e0:4e:42:70:f8:3e:fe:27:47:34:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:82:22:34:6A:A6:C4:5D:34:7E:AD:A0:16:09:AF:0A:8A:1D:AB:2F
            X509v3 Authority Key Identifier:
                keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:18:a6:11:63:06:4f:18:1f:64:1a:8c:e5:54:d3:be:9e:6f:
         d9:e5:96:54:8e:9c:91:6f:5a:97:97:fd:9b:2c:64:f2:44:59:
         2d:ef:3b:5b:dd:7f:4d:7e:dd:9f:9d:6b:d8:6f:1f:08:17:f1:
         e4:05:4f:de:b9:7c:65:95:0a:3c:e2:bc:61:f9:ab:65:80:d7:
         06:0f:9a:66:a2:01:1e:b6:68:bb:6c:eb:b4:3d:33:fa:4f:23:
         f8:af:06:2f:77:a3:19:c1:5a:9b:a5:bb:2d:c4:6e:af:cf:48:
         37:0b:a2:d0:f9:80:7a:5f:00:51:f7:84:4e:12:19:9e:c8:7e:
         b2:12:08:27:71:fe:df:9b:3d:94:be:b5:bb:06:03:29:9e:a4:
         a8:f9:a0:95:86:0d:78:bb:6c:02:8f:eb:19:68:d7:3f:f8:56:
         73:79:97:96:61:07:1d:ef:72:1b:08:90:94:63:25:de:60:ac:
         64:d7:49:9d:4b:36:f3:4b:06:44:e3:a0:b1:fd:91:1d:53:95:
         5f:8a:3c:39:2d:3f:28:e0:1f:c2:ba:08:6a:58:db:ce:c5:e9:
         4c:b9:c8:18:dc:50:c1:e2:55:1b:92:c0:1f:b1:45:bf:dd:63:
         38:2e:b4:d1:d0:d8:87:9a:5c:3c:e3:9e:91:14:69:80:4a:62:
         8e:f3:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:16 2026 by rpki-client