Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File:                     5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier:          6e8oMFvUWoLJmxXRclxWtkKxlkAUYXHKIZMVMj2rXAQ=
Subject key identifier:   10:94:AA:64:31:9E:CD:35:56:06:C0:27:3B:15:15:22:8C:42:0C:00
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer:       /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial:       019FFBDAF3F8E0AA90A641470F96EEE44910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number:          19FD
Signing time:             Thu 13 Aug 2026 16:00:58 +0000
Manifest this update:     Thu 13 Aug 2026 16:00:58 +0000
Manifest next update:     Fri 14 Aug 2026 16:00:58 +0000
Files and hashes:         1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: oz/g3nsvCwU4bdhCz2hPABMiz/zlbi4MpB1duP7xvCs=)
                          2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:da:f3:f8:e0:aa:90:a6:41:47:0f:96:ee:e4:49:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
        Validity
            Not Before: Aug 13 16:00:58 2026 GMT
            Not After : Aug 14 16:00:58 2026 GMT
        Subject: CN=1094aa64319ecd355606c0273b1515228c420c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:a1:e6:b2:51:e0:01:64:37:26:44:2c:8c:
                    c0:24:eb:1a:63:d8:b2:10:22:75:30:a1:a4:70:ac:
                    f4:7a:8e:6b:1c:de:e0:47:e2:58:66:c5:3e:ea:df:
                    1f:80:c1:31:40:67:b4:d6:f2:a4:9d:53:2a:71:43:
                    64:d1:d2:a7:17:48:0c:86:0d:d7:06:b4:06:01:4e:
                    60:e2:3f:a9:b0:9d:1a:d2:10:ae:91:2e:e3:58:0b:
                    8b:65:d9:81:99:1d:65:0c:63:08:1f:ac:f8:5a:76:
                    8a:0e:14:96:8f:24:15:c4:1e:71:0c:16:86:d3:1b:
                    92:36:4b:97:55:57:60:f2:76:65:f2:2e:e4:c4:53:
                    e9:97:43:57:e0:30:3d:74:c7:f5:3f:f8:6e:c3:2f:
                    6f:4c:79:12:91:04:55:fb:c0:ba:ec:af:6b:a5:88:
                    c6:1d:21:82:2d:25:6a:80:59:fc:48:b4:7c:5e:b9:
                    47:4a:3c:4c:0f:9f:e6:b4:bf:eb:38:e3:9f:a1:5c:
                    c6:b4:1b:4c:84:02:63:39:29:0a:4c:a8:a0:c5:d4:
                    c8:32:fe:72:b2:07:9b:21:97:78:c9:a8:e6:17:dc:
                    9f:ef:1f:24:98:ed:4b:dd:19:8a:32:8d:ed:53:8a:
                    ce:72:d9:14:31:25:ad:89:40:08:bc:b0:c7:13:53:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:AA:64:31:9E:CD:35:56:06:C0:27:3B:15:15:22:8C:42:0C:00
            X509v3 Authority Key Identifier:
                keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ea:87:7e:66:89:e6:5d:8b:47:36:18:3d:c1:cc:d3:e1:00:
         1a:52:4d:2b:6e:41:ab:e5:40:14:54:d4:be:ba:36:f1:07:26:
         c8:d8:21:86:81:1e:8b:eb:6b:30:05:c6:d1:3b:58:d8:5a:b4:
         a7:49:3e:21:f8:a3:9e:91:9d:a2:cd:47:d7:e6:e9:1f:97:87:
         98:a4:98:f4:f9:62:84:6f:d4:81:14:5d:84:dd:20:48:32:c0:
         56:79:ee:8d:8b:33:84:3d:79:e0:27:59:44:7f:1e:b2:b3:f5:
         be:09:1a:99:37:9b:31:2b:34:d6:95:1b:f3:f8:39:8d:c4:46:
         88:7b:43:ca:21:03:ac:2c:da:b1:66:53:31:5b:c6:6e:5c:38:
         cd:30:4f:79:81:cc:2b:25:57:25:db:5d:95:6b:96:70:78:c9:
         44:b5:b9:1e:a3:11:8e:53:37:5d:d8:f3:9a:06:ef:b5:c7:f2:
         49:a7:13:00:3e:39:db:c2:ac:0c:a3:29:82:4f:8f:32:3c:22:
         27:ce:1f:18:b4:7d:d0:41:04:23:dc:86:1f:93:98:2d:26:f4:
         a5:5d:60:cd:18:e5:de:d8:ae:f7:b7:54:f4:64:48:dc:e3:39:
         75:91:1b:31:a7:96:fd:d8:2f:20:13:d5:b0:63:7d:fc:87:11:
         0e:6b:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 01:05:48 2026 by rpki-client