Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
File:                     5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json)
Hash identifier:          2P6Qs13LWk/rsotjMnAnUe0tTei4KP5PfvY619lrUSs=
Subject key identifier:   0A:94:EB:FC:75:EB:D5:B5:A0:E5:4A:0C:24:AA:B9:4F:32:61:DA:78
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Certificate issuer:       /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial:       019FCBCB3ADF94C6A6D33FAD572EC5C01FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
Manifest number:          0DCD
Signing time:             Tue 04 Aug 2026 08:02:01 +0000
Manifest this update:     Tue 04 Aug 2026 08:02:01 +0000
Manifest next update:     Wed 05 Aug 2026 08:02:01 +0000
Files and hashes:         1: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: HgqJu3BkNFnBWwySmUXtYughKFxDcNQ/ZD9epntNcWI=)
                          2: T5WlH8i4_ewRLd-zMy-cgmm1JOc.roa (hash: oSBZkKDyohBJqXpHb4tTq8QcYaDSBgqUWsjkGIBouSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:cb:3a:df:94:c6:a6:d3:3f:ad:57:2e:c5:c0:1f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
        Validity
            Not Before: Aug  4 08:02:01 2026 GMT
            Not After : Aug  5 08:02:01 2026 GMT
        Subject: CN=0a94ebfc75ebd5b5a0e54a0c24aab94f3261da78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:59:9d:54:93:87:37:90:c0:c0:1c:5b:8f:6c:
                    fc:92:92:25:f1:a1:39:ff:a1:b3:80:33:c3:76:34:
                    d1:fc:77:df:3c:00:99:53:ff:84:a5:84:26:fe:fa:
                    ea:fa:74:f4:cd:e0:ee:e2:4a:ce:0a:c2:83:37:53:
                    76:c0:0c:82:89:97:92:c2:bb:e9:ca:f7:1e:84:d8:
                    b1:2c:3b:8e:ae:05:83:af:90:26:7d:a2:23:a1:1e:
                    02:40:d0:04:f5:3b:d4:f5:f4:75:fd:47:3d:48:f9:
                    a1:a8:43:66:ee:01:e2:cd:94:5b:88:1d:b8:d4:e0:
                    83:e7:4d:63:9e:fc:a9:c5:eb:66:18:8f:d2:54:34:
                    99:23:59:3d:a3:04:53:df:94:30:96:e6:24:bd:c7:
                    64:b8:a5:c3:fb:b3:fd:1e:3d:3c:aa:a0:96:5c:3c:
                    1b:e8:fd:31:a3:89:6f:26:90:65:98:45:cb:ca:35:
                    52:e4:61:45:d4:8b:37:28:22:49:d9:0b:2e:be:eb:
                    6f:67:d0:9b:ac:50:31:ba:89:27:25:8d:64:ae:f8:
                    ab:b7:cb:e8:21:ba:db:3f:08:1d:f7:e1:b1:fa:d2:
                    e2:d5:73:42:ac:d6:e8:a5:78:1f:30:a2:50:b0:8f:
                    4a:b0:a7:18:90:69:e1:e1:1f:13:88:b5:f9:a0:5c:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:94:EB:FC:75:EB:D5:B5:A0:E5:4A:0C:24:AA:B9:4F:32:61:DA:78
            X509v3 Authority Key Identifier:
                keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:67:af:d5:65:66:6a:b2:cf:23:40:19:cc:28:62:07:90:
         b9:55:b2:0b:7b:51:46:9b:a2:4f:3c:42:eb:01:3a:bc:6d:06:
         2a:4a:87:2a:df:28:0c:bc:02:25:b3:30:f5:5b:83:61:e1:f9:
         d9:f1:33:bf:77:a7:5e:ce:99:3b:83:d2:4a:d1:5e:b3:72:a9:
         c7:70:45:73:63:06:03:7a:e4:d8:8c:e4:48:b6:9c:83:c8:dd:
         fc:82:93:09:1f:68:1a:f9:e2:f1:b1:67:84:f0:7a:21:89:80:
         f5:c8:7e:86:a7:94:1c:7a:e7:50:09:7e:eb:32:99:cb:86:d0:
         d2:10:f8:b3:db:55:f4:5f:95:08:5a:99:5b:74:1e:30:87:d1:
         46:21:0b:4f:b5:88:42:18:ab:ab:51:d5:3b:4f:74:53:b4:82:
         84:ff:04:30:b3:96:6e:62:ae:00:f1:38:ed:cc:e3:62:df:94:
         23:98:24:2a:33:a3:20:4f:53:fd:60:b8:93:14:29:54:87:d7:
         3f:5a:ed:ec:e8:ef:c2:6a:e6:9a:b5:ec:92:9a:47:7e:2f:df:
         ec:5b:da:03:07:bd:f2:b9:c5:9c:92:0f:fe:eb:aa:ad:a7:64:
         b9:32:b9:08:31:90:be:78:33:86:11:be:06:96:0d:50:4a:a5:
         5e:c6:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:22:09 2026 by rpki-client