Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          8WJSGiG/wEu06LbxvKMRloDuTQnuWKp5rgOD/sToLL8=
Subject key identifier:   2E:53:F5:39:C6:6D:BE:91:77:C7:D1:BC:BA:D0:44:96:14:7A:A4:02
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       019F8267091663486208EBD39065321BE949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          173D
Signing time:             Tue 21 Jul 2026 02:00:18 +0000
Manifest this update:     Tue 21 Jul 2026 02:00:18 +0000
Manifest next update:     Wed 22 Jul 2026 02:00:18 +0000
Files and hashes:         1: 0UtZJpaH9ZhWJzvOUmqS1m2r370.roa (hash: UdeibxbzHWRgn3KJEu2PyWPjfgCf2fUauCUDT1MFzeU=)
                          2: 2i6ET0xmeFNNwjckPtEiXMzR1A8.roa (hash: RMMo6cNDlmb7w7WUvvn6btB8oEeGkC5RlJSJmweHPSg=)
                          3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: VRnxaualW1ejdm5g6AKm8OyVEOQSMh4Axm7/ZEoxF60=)
                          4: R1KgvQsI1PNvvWsNYjSHXjmCUko.roa (hash: eSfdxnu6Fm6Qr8tRqOcchhcxy/tWOkcHERSE8N3r8uI=)
                          5: XdtoN-G6_JHehbj0D7l71OQKEXE.roa (hash: bDoA0XebMdpMlFP6CJH1fk3V+NG+IRgcZpROF4NtHwY=)
                          6: Yx7l960TQn9HM_7QR6gs0XY-qcA.roa (hash: O+2F1pg3A5EVSk1DJbaRJDwXaNusK4Cx5sLgaLCJXdM=)
                          7: vV4kfM7-tPnyYx_K2ljxEExtxso.roa (hash: iQoz4P+KRDJgWwM5+v9IkBekoevvl7t44wSOdaiYAvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:67:09:16:63:48:62:08:eb:d3:90:65:32:1b:e9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Jul 21 02:00:18 2026 GMT
            Not After : Jul 22 02:00:18 2026 GMT
        Subject: CN=2e53f539c66dbe9177c7d1bcbad04496147aa402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bb:86:e7:22:30:8c:da:ab:12:46:c4:5a:0c:
                    6f:cf:78:49:68:fc:d2:d5:a2:aa:11:4b:0f:cb:94:
                    00:0e:53:3f:13:ba:a0:d0:f8:87:e8:bb:48:4e:b3:
                    69:6e:ab:8d:3b:36:50:68:35:4f:c3:c2:43:06:a1:
                    04:97:86:6a:65:bf:1e:94:6b:19:04:85:9f:11:23:
                    8f:ee:cd:00:dd:d7:16:29:24:d0:2e:e9:be:f3:c8:
                    d8:f8:3c:cb:cd:fc:49:da:7d:0d:8d:68:9c:ab:b4:
                    f6:5c:da:5f:e1:c3:fa:fa:13:07:83:d8:c7:84:c7:
                    97:c7:e2:13:7e:f2:66:7f:06:60:50:ee:6d:68:c6:
                    71:8f:62:4e:fe:b2:b9:f8:71:24:d7:cb:ce:ed:22:
                    06:69:99:7a:5b:1c:0d:82:e7:53:37:3d:92:91:bd:
                    27:3b:17:24:07:48:0f:09:33:d3:8a:a6:9a:ff:0b:
                    61:9f:f9:9f:1d:25:c2:1f:a1:95:cb:64:8a:0a:76:
                    97:44:4b:ba:cd:c4:ec:d6:7d:73:de:a9:72:da:91:
                    61:3b:ba:fe:68:a3:cd:a7:f3:e5:10:e0:0b:8a:6b:
                    3f:81:24:5b:60:8d:b3:84:15:2b:c6:73:fb:e9:73:
                    41:97:0f:6d:ad:ed:fd:4c:39:9d:4e:4a:a5:07:07:
                    22:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:53:F5:39:C6:6D:BE:91:77:C7:D1:BC:BA:D0:44:96:14:7A:A4:02
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:5c:bb:bd:93:96:9b:a1:a7:ae:05:44:35:79:c7:1f:81:
         3b:50:a0:87:fe:b6:07:09:fc:90:0e:44:1e:3b:80:c2:04:84:
         82:a9:03:5f:52:11:2a:a5:1e:ba:1c:b8:6b:0b:e9:fd:cb:e9:
         4a:bd:67:a5:a1:3b:25:82:3d:3e:2b:9e:6e:31:45:ea:b8:7b:
         7c:45:af:db:d2:8c:51:58:52:cf:59:46:14:95:16:97:69:40:
         40:ea:75:c7:b1:a8:18:8d:d4:69:e0:4c:3d:2f:1b:c6:44:36:
         52:e3:4a:24:9b:a0:f7:08:2c:68:f9:46:54:a4:f4:4a:58:99:
         dc:7d:25:78:3f:59:26:f4:15:04:18:80:cd:39:9c:2a:50:57:
         ca:10:ba:b2:07:f2:f1:c8:55:3c:e0:fe:cc:30:4b:96:e1:c9:
         c9:1d:60:65:51:79:04:48:31:1b:a5:38:b1:63:12:ca:a5:cb:
         fd:98:8c:76:8a:cd:39:18:d9:ca:7d:a8:47:95:a9:44:f7:09:
         51:ff:56:9a:ee:44:60:ae:46:90:6e:e2:7f:23:43:c6:2c:40:
         d0:b0:c5:dc:09:52:c5:83:19:ea:22:f9:c2:19:db:c7:ac:61:
         5e:a4:62:87:7d:57:61:3e:d4:9b:25:ff:d8:64:f5:ed:86:0b:
         8e:8f:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:03 2026 by rpki-client