Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          ixElC1+2GqaVJChgDnHBuMqJm7rTmxwI2pAL2SoBh/A=
Subject key identifier:   3A:33:FD:7D:97:7F:BF:2A:C7:89:4D:FA:31:74:0A:35:38:F2:A7:B3
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       019FA2604D8649579F5DE246AFD6DD24A575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          194D
Signing time:             Mon 27 Jul 2026 07:00:47 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:47 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:47 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: R7BLM9SBBvtSyT2QZWY1H/vXLmsUuq/M+4DpXNag98w=)
                          2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:4d:86:49:57:9f:5d:e2:46:af:d6:dd:24:a5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Jul 27 07:00:47 2026 GMT
            Not After : Jul 28 07:00:47 2026 GMT
        Subject: CN=3a33fd7d977fbf2ac7894dfa31740a3538f2a7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:d2:63:72:f9:f7:39:98:e0:61:84:bb:d4:
                    28:c4:f1:70:63:16:c1:4c:75:43:ea:d7:28:3f:33:
                    57:e1:f7:c7:30:b2:58:bd:05:93:56:1a:7a:21:88:
                    44:6f:19:5e:6a:77:68:a4:43:0a:45:c4:e9:b5:fc:
                    2f:bf:dd:ef:40:3f:ba:c4:b9:fa:eb:e6:90:2b:b1:
                    6b:da:9c:05:0f:65:a1:b1:65:88:c8:90:e3:7c:6e:
                    71:75:97:10:6a:1c:c1:a3:1b:78:ee:56:5f:9d:14:
                    52:d6:d5:ff:18:8f:ec:fb:fc:b6:d4:ad:fd:63:89:
                    60:50:e3:59:72:48:1c:6e:46:78:4a:cb:00:5b:4e:
                    15:e9:44:0d:eb:06:af:75:6b:ab:44:25:8f:2d:a7:
                    75:f2:2f:be:03:41:e8:39:78:cb:90:9c:6a:97:75:
                    46:49:2d:10:56:3b:cf:99:d7:81:d7:58:af:ad:66:
                    00:30:e1:bc:31:3d:29:d4:8b:f3:78:04:5c:39:b1:
                    f4:db:cb:31:1f:ab:0f:89:bb:3e:c2:75:51:6f:e4:
                    15:29:fe:02:ef:56:2a:70:db:eb:ed:7d:42:59:d5:
                    e9:89:86:62:8c:00:1f:f3:16:ff:42:7f:ff:8c:9b:
                    62:87:53:7d:83:e4:14:d3:e9:03:48:55:35:8c:28:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:33:FD:7D:97:7F:BF:2A:C7:89:4D:FA:31:74:0A:35:38:F2:A7:B3
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3b:d6:00:8e:d1:7a:4d:0b:02:51:37:99:cd:a2:7c:bb:53:
         4a:7e:c1:39:71:5e:cd:42:a4:16:ee:55:a5:14:f8:f7:cd:fb:
         6c:e1:35:05:48:de:7c:fc:d0:e7:8b:d3:93:8e:81:e5:f2:b0:
         f3:38:c0:af:73:6c:9c:e1:27:bb:df:f7:19:29:54:0a:e7:7a:
         4b:38:47:09:ca:3f:b3:10:18:1b:c4:16:f3:1c:b0:ab:64:a1:
         30:db:6f:5b:01:c1:7d:23:1a:20:aa:85:c6:60:ef:ca:db:0e:
         d3:71:fe:f5:27:95:32:49:45:4e:04:69:09:4d:25:ad:31:07:
         b9:b0:ef:80:fd:7a:dd:83:0e:f1:07:6c:2c:eb:d8:cd:ce:0b:
         7a:69:64:a5:14:18:28:b8:fc:f7:7d:6b:f1:a8:71:e7:8d:42:
         5e:da:bb:58:99:7e:29:8c:69:1e:7a:c4:23:08:4d:ab:2a:e1:
         06:d7:02:58:9d:03:ac:96:fd:b7:b7:aa:8d:bc:c4:46:99:d2:
         07:d1:00:ff:d4:43:f6:0c:54:9b:f0:11:aa:14:e5:a9:41:e2:
         40:4c:fc:6e:12:ce:63:52:59:53:f2:e8:68:07:55:1b:92:69:
         c0:1d:b5:73:0f:5a:66:39:1d:51:69:a3:bc:4a:d7:26:99:e1:
         fc:34:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:39:15 2026 by rpki-client