Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
File:                     qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft (raw, json)
Hash identifier:          bBjIxNlO0/zVZzBp9+R/1mJx0wene6eg9/tH3gMNbEY=
Subject key identifier:   88:9D:94:BE:A3:24:EB:2F:71:C8:36:85:17:E0:01:74:8E:B7:24:56
Authority key identifier: A9:2B:26:C3:8B:76:2C:9E:54:99:EF:DF:F3:AC:D5:98:62:8B:EA:CF
Certificate issuer:       /CN=a92b26c38b762c9e5499efdff3acd598628beacf
Certificate serial:       019FCB5CD8200E2BC4BB55C6A4F4F4E4CE48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
Manifest number:          5E
Signing time:             Tue 04 Aug 2026 06:01:27 +0000
Manifest this update:     Tue 04 Aug 2026 06:01:27 +0000
Manifest next update:     Wed 05 Aug 2026 06:01:27 +0000
Files and hashes:         1: NI385oVhm3QWY8htYFFjFZ1jYzc.roa (hash: sk6wuFdZcfLmM6VcAQviz4agp5zQex1ujsQrgI5Apto=)
                          2: qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl (hash: R0eUx60io93Cy6r2GxYz0H+mQO26SlPDOs1n+Ytcrus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:5c:d8:20:0e:2b:c4:bb:55:c6:a4:f4:f4:e4:ce:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92b26c38b762c9e5499efdff3acd598628beacf
        Validity
            Not Before: Aug  4 06:01:27 2026 GMT
            Not After : Aug  5 06:01:27 2026 GMT
        Subject: CN=889d94bea324eb2f71c8368517e001748eb72456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:42:cc:bb:eb:66:87:fc:65:ac:1a:dc:e9:
                    de:e5:12:a8:c0:ae:72:8b:ac:c1:49:81:32:4b:de:
                    b5:39:d7:2a:e5:93:67:f8:ce:1a:29:44:1f:a5:eb:
                    68:56:93:bf:26:0c:a5:32:5f:b4:e5:6e:f1:aa:04:
                    de:59:5b:92:ae:ed:7a:1a:8b:b5:42:7b:88:48:38:
                    74:fd:c3:25:24:c3:b4:90:1f:30:cb:80:2e:ff:88:
                    b9:18:5c:7f:4a:5c:8d:2d:c4:e6:aa:b7:6f:8b:d9:
                    91:80:62:12:91:37:1f:75:b2:6d:cb:f7:34:77:ff:
                    42:e5:70:fb:b5:56:3e:3c:25:d7:7a:76:f4:9d:ff:
                    88:4f:71:74:da:94:72:30:d9:53:32:02:f3:69:c2:
                    00:a9:f7:60:9d:d2:2f:1c:a1:5a:7b:62:dc:f8:92:
                    30:a9:0d:a9:0c:09:91:8e:85:7d:74:9d:c7:54:6f:
                    d7:08:53:3e:b0:15:f5:a9:93:0c:33:1a:77:9c:77:
                    07:91:31:b0:a5:7f:f0:d2:c7:3d:80:10:b6:ae:84:
                    63:a2:4b:60:90:d9:84:16:1a:cb:61:d6:67:25:cf:
                    0a:52:7a:8a:c1:97:58:af:d8:de:8d:65:a2:52:7a:
                    01:27:62:85:66:14:60:80:d1:5f:8c:93:30:6c:ec:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9D:94:BE:A3:24:EB:2F:71:C8:36:85:17:E0:01:74:8E:B7:24:56
            X509v3 Authority Key Identifier:
                keyid:A9:2B:26:C3:8B:76:2C:9E:54:99:EF:DF:F3:AC:D5:98:62:8B:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:d5:42:60:f9:3e:c6:d9:00:bc:f0:9c:bf:83:f9:1a:fa:5e:
         13:e8:a3:bc:ce:9d:70:b1:57:54:1e:8d:58:27:36:1a:c7:c4:
         10:ba:9e:cc:c8:a3:59:5a:c7:de:c7:da:5c:8b:6a:9c:8c:61:
         dd:f2:70:b8:bf:77:80:80:5b:65:b8:08:72:b4:a5:5a:42:bb:
         08:f0:2a:43:02:e1:fb:09:5b:02:fa:1f:47:b5:25:ee:2b:25:
         35:42:12:8e:13:fe:0a:66:74:df:31:32:27:77:b5:af:94:91:
         e9:f9:db:f7:5a:0e:34:d0:8c:4e:d2:bb:4a:0f:54:7e:33:31:
         a0:ac:0f:b4:d9:0a:49:cd:4a:3b:a2:95:8e:e8:77:00:b5:21:
         9f:2a:04:9a:18:f9:b3:58:8d:91:f9:72:71:4d:68:26:fe:56:
         b7:fc:94:68:df:f4:f5:58:4a:7c:e9:07:69:f0:ba:3b:27:20:
         6d:5b:96:ec:4e:47:ad:ab:51:a9:1a:ab:bd:dd:5a:6c:70:16:
         2a:59:c7:b2:25:11:9a:99:d8:7d:4c:9a:bd:de:09:e2:c5:bc:
         a8:33:63:a5:45:a7:55:8a:4d:78:2c:81:81:f3:9a:5c:94:a1:
         b3:3f:32:54:0c:a0:22:a7:9a:28:aa:71:95:5d:ef:f4:b2:52:
         50:e2:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:54:01 2026 by rpki-client