Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File:                     5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier:          TZSN/9xUFaXCtlsEoyof4uDM5m9l8CPWBsiGUNYP3Zk=
Subject key identifier:   0F:21:89:29:D3:AB:3F:49:CD:A6:C6:B4:26:7C:64:FD:6F:5F:84:3A
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer:       /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial:       019F91DA8B1ECAF3D8CE66E682EB712DF470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 02:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:46 +0000
Files and hashes:         1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: /Q5sscAF8gbbNCwlX6adFWdzhMz3aeP9xEkoHzLPeA4=)
                          2: Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa (hash: IcpxSZEbw6wlN8c6BwrewScxYORBAdj6421Et1q2/ak=)
                          3: QyLxV1GsI9UZiOqN--9VZ1wCfac.roa (hash: p/jV8Bz6xxYxD+AW9prSPsf+g1XW829odlRFlONQHfw=)
                          4: _HACinjTIxRkle58_-0RVGUxyaY.roa (hash: 56U7Y5xzPXcpazN7C00qDGlRUzZsBIL1ftiv8gKYYpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:8b:1e:ca:f3:d8:ce:66:e6:82:eb:71:2d:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
        Validity
            Not Before: Jul 24 02:00:46 2026 GMT
            Not After : Jul 25 02:00:46 2026 GMT
        Subject: CN=0f218929d3ab3f49cda6c6b4267c64fd6f5f843a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:4c:bc:b4:59:ed:6c:52:0b:46:53:57:54:
                    39:e4:a6:ae:cd:4b:b4:0e:e4:d8:cc:de:f6:2e:b6:
                    69:8e:ff:31:f8:10:e2:b6:83:58:95:cc:5d:24:6b:
                    34:0c:d1:1b:16:13:24:17:fa:a8:e3:d4:91:28:d3:
                    50:f8:d8:d9:41:16:5d:f3:d1:eb:b3:ad:2e:ab:b6:
                    5b:4b:62:97:76:0b:8a:72:72:07:c3:8f:d0:3e:3d:
                    db:12:9f:8b:bc:c9:b0:71:51:c8:d2:d8:cc:53:b6:
                    b7:20:38:a3:64:ca:4c:a9:01:60:e0:bb:05:82:eb:
                    41:58:28:a2:f5:ca:f5:bb:57:73:68:90:7f:59:27:
                    dd:de:60:32:f0:e8:8e:83:d1:52:66:24:ff:40:f2:
                    77:b2:e6:10:b6:21:68:58:58:49:c2:cb:39:a0:0d:
                    a0:58:9e:0e:2e:ba:a2:8b:09:28:2d:86:b1:2d:17:
                    2a:bf:83:16:f1:aa:3d:0d:b6:d6:58:0a:b2:b0:07:
                    76:af:9a:9c:26:ac:12:b5:15:1d:28:9d:44:14:ae:
                    e7:b8:95:4a:cc:1f:9d:b9:cf:1d:e3:fa:07:5e:95:
                    58:d4:c3:98:8c:70:31:4b:b9:28:b7:75:a7:9f:8c:
                    1a:08:55:55:0c:bd:5b:d3:a2:90:9c:bb:e8:52:a9:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:21:89:29:D3:AB:3F:49:CD:A6:C6:B4:26:7C:64:FD:6F:5F:84:3A
            X509v3 Authority Key Identifier:
                keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:61:e2:03:62:c3:65:3d:7d:87:b9:f2:9f:0f:ea:58:0b:
         e4:f0:27:31:b3:ec:d8:c7:f0:15:1d:bc:e6:73:eb:39:6c:08:
         95:74:30:25:59:93:be:4d:d8:6a:7f:9f:26:fd:1e:e9:0b:85:
         a3:d2:1c:1f:c2:65:db:06:a0:22:48:87:22:f5:b9:76:38:70:
         10:50:15:8b:f4:0a:2d:55:67:8c:e1:0e:78:7d:a0:41:76:e6:
         57:53:7f:d7:e3:d0:db:2c:0f:37:4c:29:8b:c0:03:60:60:c6:
         94:9c:21:06:f6:7a:c9:f6:cb:15:8f:1e:78:83:31:5e:f2:63:
         62:46:93:65:ef:93:48:7b:c7:75:f0:67:c0:b4:cb:c6:97:74:
         f8:4d:2b:9e:92:1c:0b:4a:75:dd:61:b5:58:66:96:38:44:01:
         e6:4d:25:71:fd:50:4b:3a:bc:47:92:af:c4:9d:9f:c5:a6:10:
         b3:c8:46:8f:f4:1e:16:b2:c4:8c:92:fd:4f:2f:48:22:25:86:
         24:c3:88:cb:1c:a7:16:f0:ae:f1:6b:53:36:da:8b:3f:92:38:
         af:72:0c:85:1b:a7:82:5f:e1:39:11:e1:3e:99:79:2b:2d:77:
         b7:c1:7d:68:41:73:91:72:35:2e:de:21:41:a1:fa:c7:b1:fb:
         88:5b:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:20 2026 by rpki-client