Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File:                     tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier:          7s9K/E8XNqlMI/3xs1gbcylyGGhGcMoygTJcae0M2gU=
Subject key identifier:   54:F7:E4:43:A4:52:F6:C5:DC:B3:FF:26:76:F6:D0:5D:7B:BD:01:18
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer:       /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial:       019FA0A8D6CD38F9F6940F780A994B0397B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number:          01E6
Signing time:             Sun 26 Jul 2026 23:00:47 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:47 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:47 +0000
Files and hashes:         1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
                          2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: UmR4TOTm5zEKcRFvrn0ooAU9aCy8yBDc4U3z9lcJ8+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:d6:cd:38:f9:f6:94:0f:78:0a:99:4b:03:97:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
        Validity
            Not Before: Jul 26 23:00:47 2026 GMT
            Not After : Jul 27 23:00:47 2026 GMT
        Subject: CN=54f7e443a452f6c5dcb3ff2676f6d05d7bbd0118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:f1:6b:05:f9:4b:be:5e:45:17:88:f4:3a:
                    b2:4a:4f:ce:d2:66:89:dd:9a:3c:4c:68:9c:2a:8b:
                    9c:f3:0f:8f:cc:11:40:fe:b9:27:36:0c:ca:fb:f0:
                    19:a0:b8:62:fe:1d:bf:e2:91:cf:f6:d8:8b:e6:6b:
                    a2:9d:8d:d0:d7:c5:d6:b3:c1:b8:ef:f9:84:79:fd:
                    63:3b:bc:90:bc:c9:da:7c:a0:6c:33:c4:9e:3a:10:
                    78:d0:5b:0f:f2:dc:b5:98:91:e7:2b:20:d2:1d:7a:
                    b2:4a:52:84:70:19:41:8a:94:29:93:d2:78:b1:67:
                    1f:c8:da:f7:34:3c:3c:96:6b:00:fd:e6:21:5d:05:
                    0b:9a:e1:43:dc:8f:23:81:af:fa:24:85:71:b6:e0:
                    5b:3f:34:39:23:33:c2:11:f1:d0:ba:65:65:a5:55:
                    e5:fe:3d:2d:83:f7:44:77:06:db:88:62:a1:1c:e2:
                    26:7c:af:7e:cc:55:b9:4a:47:2c:19:3e:8a:09:3c:
                    9d:be:aa:bf:11:a3:8a:98:39:33:59:8a:f7:42:22:
                    8a:a0:80:6c:f9:5e:48:fb:f6:e9:7e:52:ef:bf:98:
                    b2:ac:69:b9:a4:bc:0f:40:d3:22:15:a2:9e:b3:d3:
                    49:78:7d:ee:53:8d:a1:4d:b0:70:87:bf:f2:11:cf:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F7:E4:43:A4:52:F6:C5:DC:B3:FF:26:76:F6:D0:5D:7B:BD:01:18
            X509v3 Authority Key Identifier:
                keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a9:f1:9c:3a:8b:df:7c:77:fd:63:3e:7b:23:59:0d:cf:03:
         df:03:85:02:61:25:3c:39:63:03:20:20:9b:e8:e6:2c:57:7c:
         3e:54:b7:7d:d5:7a:56:f8:86:a3:5c:d6:53:74:cc:61:3b:69:
         2a:38:d6:c8:f3:e1:4f:11:ec:62:c3:55:d6:eb:da:36:1c:09:
         24:4f:53:94:33:45:fb:5d:b1:f1:74:b3:cb:40:e8:83:57:66:
         2c:51:fd:01:f8:17:77:3d:47:55:b7:fd:72:75:5b:b4:82:97:
         35:46:1a:24:16:0f:89:08:c9:58:c6:82:65:1c:13:ee:10:09:
         12:d6:00:47:f5:16:eb:7e:8f:7a:5c:fd:bd:68:76:aa:92:6f:
         59:99:cc:af:ae:d0:3d:b0:03:da:a0:d1:07:77:0a:44:9c:cb:
         87:0a:19:c0:12:dc:02:22:82:0b:8d:f6:21:a8:87:f7:9e:30:
         52:8b:1f:b3:38:8d:f2:e5:96:09:51:ea:43:83:2b:1e:6f:1c:
         d9:b5:31:bb:3c:55:73:91:cb:3e:80:1d:c2:07:25:fc:2a:47:
         09:c7:11:ab:62:84:3b:58:b1:b8:09:cc:6f:b8:ae:01:19:40:
         60:ff:86:22:67:24:1a:d9:72:e1:5e:ae:79:e9:47:27:7e:c7:
         a5:5c:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:42:55 2026 by rpki-client