Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          VZCk4tXJo/ifEpwzseSxo0h1MtEROhq7Cey+TryckIk=
Subject key identifier:   43:18:D4:26:60:7A:02:BC:E7:FA:07:98:EB:87:29:44:7B:91:51:A0
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       01A01FE745267EEEB5217D0B5390C24BF1C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          1A64
Signing time:             Thu 20 Aug 2026 16:00:45 +0000
Manifest this update:     Thu 20 Aug 2026 16:00:45 +0000
Manifest next update:     Fri 21 Aug 2026 16:00:45 +0000
Files and hashes:         1: 5Sb_HPOKAsSdsUjzw140834viv8.roa (hash: dbP1i30GcVhpjOAzB6T5uPHGgdW2XcNsW1MsPzGhr80=)
                          2: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: 2Kfv0IMvUyVLrmnPWuWGwedebq302UGPrd0ELG3GnS8=)
                          3: 8BqmL7UcN2qfYbL66pHli8JsIzY.roa (hash: pCciA+077UGjAkiMs81qTKCGq54F1nIKWaxa6mwVk+s=)
                          4: TxQ0636d2LwXH2VImycVLeg_GD4.roa (hash: Cd3bRS1ODPCLQTHK/bSamcQr7JmtV/0UDeqKAMmW1WI=)
                          5: a2XY2UXf90IY1VBTinejxs4Lai4.roa (hash: gW9fcMOQIykl/4g6Q5f2diEfBFcQxaR7rcpmHjIDqIU=)
                          6: hnkjTOt3IhDTYibZaSqbPm2m_p8.roa (hash: Mx2YKCPTY4DLbjw56TaKSRWkKvHmvhBylSYEY4ARbGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:e7:45:26:7e:ee:b5:21:7d:0b:53:90:c2:4b:f1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Aug 20 16:00:45 2026 GMT
            Not After : Aug 21 16:00:45 2026 GMT
        Subject: CN=4318d426607a02bce7fa0798eb8729447b9151a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:0c:1c:78:ea:28:da:3e:2e:37:36:f1:74:
                    c5:78:0d:a7:cb:c5:0e:8f:19:6a:27:37:fe:9a:51:
                    dd:a6:9c:05:e2:2f:d3:97:46:53:05:fd:70:d1:5e:
                    5f:d2:50:66:cc:c4:ab:73:9f:85:c9:c2:85:d1:89:
                    50:40:34:2d:93:ae:cb:ff:17:38:0d:87:cd:c0:5f:
                    c6:f9:7a:43:f5:83:f1:1f:47:1f:16:f4:59:9f:59:
                    f6:9d:11:6a:01:8a:c6:99:87:35:bf:21:1b:86:74:
                    7f:59:1e:0d:68:25:f4:1a:48:fe:63:52:85:4e:7b:
                    de:79:ef:d6:5f:3a:58:1c:23:cc:ec:0c:62:25:ea:
                    00:af:c0:97:91:0a:09:95:d1:1d:94:45:ac:99:b2:
                    d7:b3:60:ea:87:50:5f:e8:b2:4e:00:f2:61:28:b3:
                    ea:f5:87:ce:44:09:c4:5c:87:c5:8f:62:21:47:39:
                    98:be:ea:4c:89:ae:c3:c8:a6:b5:17:26:a9:c2:20:
                    f1:90:8d:58:e5:1e:1e:b4:bd:57:72:93:f1:72:29:
                    65:d1:b2:66:94:55:07:c0:20:57:ec:ae:8a:c2:c9:
                    33:17:7a:e7:b1:44:2b:8c:39:d7:70:a5:72:81:8e:
                    df:8d:a0:d7:63:19:7a:1c:55:21:d9:05:44:68:7c:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:18:D4:26:60:7A:02:BC:E7:FA:07:98:EB:87:29:44:7B:91:51:A0
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f6:89:a5:82:42:c2:e5:5d:23:2d:78:17:9c:da:e4:12:f3:
         09:6d:b5:ff:bb:11:d0:11:86:17:31:45:5d:5a:65:f1:18:af:
         36:52:13:03:3d:4c:a8:70:94:1e:4e:12:e5:4e:4d:14:5f:f3:
         c6:bc:c6:04:4d:00:20:9c:72:b0:4d:f1:19:ad:e3:fc:f5:26:
         53:1d:2a:11:3b:c2:01:f1:4f:5c:12:e6:1c:af:4c:65:ee:d1:
         fa:e8:55:3d:17:a7:fd:5c:06:14:03:5d:2f:e4:19:36:72:13:
         48:bc:8d:76:94:d2:cf:59:1b:e1:7b:ab:b3:f7:fc:c3:dd:74:
         ce:d1:c7:49:7e:e7:c0:75:b2:d1:bf:cc:67:7e:10:7a:87:d9:
         5e:61:3c:5c:18:6c:83:ed:d7:0c:4b:b9:04:a6:87:ac:45:4f:
         46:ad:de:48:9c:3e:da:f5:12:e7:59:64:50:aa:22:52:1d:fc:
         ed:81:5c:18:2c:68:6b:f9:f1:2c:a4:ae:45:e9:16:2e:bb:49:
         70:74:42:d4:d3:ca:6d:70:41:19:4a:d8:39:71:61:5e:60:75:
         90:1f:ec:2c:3e:a4:41:cb:07:da:fa:5d:f2:96:30:39:a7:16:
         a5:c6:e7:14:42:6d:37:2e:b8:1f:ff:ff:e1:ed:e2:ac:91:00:
         50:6c:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:04 2026 by rpki-client