Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File:                     e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier:          2SNzc9z2Btb1pGit8380Mng/Sv0n5yB9xQzuLTguNZI=
Subject key identifier:   A0:97:87:1D:B4:54:1B:E8:95:43:DC:96:24:C0:2A:42:A4:8A:F1:C0
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer:       /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial:       019F818B6E224BEF159346033F72113E9126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number:          0EE5
Signing time:             Mon 20 Jul 2026 22:00:26 +0000
Manifest this update:     Mon 20 Jul 2026 22:00:26 +0000
Manifest next update:     Tue 21 Jul 2026 22:00:26 +0000
Files and hashes:         1: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: YbDwThVezr+CYW7Frs33mpdrT0XcW6aZKNcCZKef9W4=)
                          2: ryw8pANYiWDQuIyjdZ7oamR1t58.roa (hash: 2HMSeXqRqzVzH58INszxQlwSvF3HPks2TZimmKfWKr4=)
                          3: w1lnaXc0stYti4D5HKapAQ20wiM.roa (hash: dNDg8xo8m9AS8HO+Ntxotl19K7LOzsHs1ntt7tMGKHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:8b:6e:22:4b:ef:15:93:46:03:3f:72:11:3e:91:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
        Validity
            Not Before: Jul 20 22:00:26 2026 GMT
            Not After : Jul 21 22:00:26 2026 GMT
        Subject: CN=a097871db4541be89543dc9624c02a42a48af1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:72:32:18:c4:ba:40:f0:ef:d3:0f:d3:b0:
                    26:df:fb:cc:5f:ac:a4:a7:29:07:e2:1e:db:68:05:
                    ac:ac:0a:ba:3b:c4:f6:0f:17:b7:f1:25:41:c9:b1:
                    17:cf:d9:78:21:58:d6:a3:04:77:7c:6a:11:a6:45:
                    0b:0f:d8:05:bf:14:96:11:0c:db:5c:11:88:d6:18:
                    6c:64:6b:1d:74:ea:d8:8a:0b:09:ea:13:3c:06:0d:
                    43:27:3f:fc:7e:01:21:8f:d9:85:a2:d8:24:28:d4:
                    1a:6c:3e:47:b0:4f:d9:9a:32:84:c1:ad:f4:4e:0d:
                    cd:e1:f8:f2:c7:0b:91:9a:16:50:27:a0:4f:e1:74:
                    70:20:6b:07:ef:fc:d9:e9:56:59:35:8b:ef:f2:35:
                    a9:fe:91:ed:f8:1f:e7:46:1b:e1:4b:43:52:30:46:
                    76:6a:cc:32:60:4b:01:92:45:6c:34:a7:9d:b4:fe:
                    1c:97:01:5e:3c:b4:48:68:62:d5:83:92:12:d8:b2:
                    3a:98:16:d8:f0:40:20:31:32:4c:1c:74:ef:97:08:
                    94:ad:ed:3a:89:26:8d:ef:71:9e:44:08:ec:fd:89:
                    b8:c2:80:60:63:82:40:73:77:25:54:63:9f:d4:cb:
                    57:1e:86:b4:94:5b:6e:9e:56:65:85:23:f1:a4:12:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:97:87:1D:B4:54:1B:E8:95:43:DC:96:24:C0:2A:42:A4:8A:F1:C0
            X509v3 Authority Key Identifier:
                keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:2c:cd:2f:49:5b:b7:fb:32:ea:58:68:ca:ae:94:21:e2:
         6c:cd:fb:6b:1e:c7:19:88:9c:5c:4f:cf:ea:19:d9:20:87:a5:
         8e:89:2e:d3:d2:fb:a1:51:96:16:dd:43:ce:e0:5e:f7:61:db:
         ab:8d:a1:1b:b3:b8:c6:af:da:44:b1:3c:e7:7a:5e:15:73:28:
         b6:91:50:a4:8f:79:39:01:d2:fd:4b:4b:38:39:e5:89:65:59:
         d2:e8:ec:f5:aa:c3:24:8c:a5:e0:bb:4c:74:25:27:85:08:8e:
         b4:8f:07:7c:74:09:dd:84:01:f8:5e:69:dd:ac:93:af:da:06:
         ff:02:02:18:5f:6f:54:03:9e:8e:17:46:eb:bb:65:87:a2:61:
         f0:8d:ac:cc:68:51:d8:cb:81:28:48:29:00:06:c7:18:11:44:
         ad:27:7c:09:7c:9d:42:4b:c5:cf:c5:22:67:6b:38:7e:1c:20:
         4a:2d:d3:18:85:43:77:78:30:8d:61:08:71:d6:d8:95:1b:99:
         0a:1a:3d:d7:52:6d:f2:74:05:b2:1c:c1:88:c4:18:f7:e3:1a:
         45:fc:89:fd:44:63:29:9a:1e:75:e5:72:23:b1:8c:39:43:c1:
         74:1f:28:11:18:e9:ab:45:0e:b2:b2:b0:ff:47:d8:cf:0c:18:
         16:2b:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:12 2026 by rpki-client