Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          ULddoEG5yrKf9k4DJRsfp6AgmaTxJN/d+qvDf7AX1BY=
Subject key identifier:   C5:8D:7E:F6:62:04:2B:75:1B:E9:5C:75:A5:AD:29:82:BF:38:03:75
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       019FA1BB2322F426AA358D2137C21ED072D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          19D5
Signing time:             Mon 27 Jul 2026 04:00:23 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:23 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:23 +0000
Files and hashes:         1: 1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa (hash: YgoOaQlFbXUdsZx8u8PNBd2uQHXrr/r+JgEvwggSZDA=)
                          2: 1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa (hash: sllzVYP/WiMPElY3BFy/EfBmKfiCPi4PRAGGrxfDP7g=)
                          3: 6LKvF_6ld6s3n--fTX7f7BK_ehc.roa (hash: /eEnxWv6EmUP6K8zfowjl8E4hGLa0C38VlYeIpY/h7w=)
                          4: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: 5eFt3y+mbVtTiKN0eg1iPDKtXh0j9ekIBJNLY1lshdM=)
                          5: GHJyTF0ORoaY9AckOmArWob3_HY.roa (hash: uI00sPFgBL2eDPBgh7Ys5Cfku0oem0hVhkVJpAs4CZg=)
                          6: QzNYXaK9Heg5iwI0_fdSvPsjX10.roa (hash: 7DicMrMZcYWPra55/EcMga9qpWnVA1JBNRCO/E/beAo=)
                          7: vsAEpL5w14p4gOY7B1dWMsDjDJI.roa (hash: ULT4TLN8aqk2Vz6VZZi8pMSOHDlIrdLD0OUPI10LgY0=)
                          8: wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa (hash: TZU5rVeqp7nDnIs3V8dsH2Vbd18ixFe0rwWSFe7vxYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:23:22:f4:26:aa:35:8d:21:37:c2:1e:d0:72:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Jul 27 04:00:23 2026 GMT
            Not After : Jul 28 04:00:23 2026 GMT
        Subject: CN=c58d7ef662042b751be95c75a5ad2982bf380375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:f0:a8:0d:81:1e:78:ef:82:e6:dd:d9:b3:
                    ea:2f:07:d3:43:3a:b7:3c:15:20:87:0c:97:5a:ad:
                    c7:2e:9e:e7:8c:2e:1d:2a:8d:7b:bb:42:e6:5f:fc:
                    27:bd:29:07:fc:17:68:c3:e6:27:bf:1b:ab:36:4b:
                    ce:41:9b:4b:4f:00:69:b1:fe:ce:c1:49:f9:32:00:
                    8b:62:a1:91:5f:16:2f:fe:79:48:26:22:e7:52:ee:
                    d2:62:14:01:f4:4c:9f:63:f6:e3:af:b3:87:7e:74:
                    b3:56:1a:73:93:ee:86:fd:c8:68:6e:f7:e6:0e:ae:
                    6d:67:aa:4a:bb:b0:5c:1c:28:e2:a1:25:f5:a6:2d:
                    a2:7f:ac:c1:e1:00:e0:f3:ee:24:f6:7b:74:34:57:
                    d3:24:86:d7:02:04:38:94:33:66:f4:ae:11:e5:ad:
                    75:dc:3c:1b:04:b9:75:6f:1f:91:34:22:89:68:fe:
                    b7:05:cb:16:62:47:96:6d:f5:e9:8c:8f:9b:de:a3:
                    91:7c:24:da:63:dd:8e:ed:e3:2f:54:61:36:7c:60:
                    ff:e4:8e:45:73:95:5b:18:8e:ce:f5:a1:d8:64:4a:
                    81:86:62:8a:ce:4c:a5:0c:ab:a9:af:61:56:f1:b3:
                    6d:98:ff:40:cd:fc:a3:ff:ca:72:cc:cc:ab:2b:35:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8D:7E:F6:62:04:2B:75:1B:E9:5C:75:A5:AD:29:82:BF:38:03:75
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:e6:2a:b1:e9:73:f7:9b:71:92:5c:06:de:a7:4d:b3:da:
         29:fe:c0:26:ce:2c:74:20:6f:f6:73:93:b3:27:06:f1:36:99:
         9d:f5:d1:72:02:d6:94:f8:c6:8a:60:7a:ed:a8:9d:62:75:46:
         db:fb:36:a3:4a:c6:8a:b5:11:56:97:bf:b6:48:b8:70:3d:3a:
         20:d6:34:6e:a2:f6:d2:da:d6:4b:cb:8d:de:a2:61:15:2d:d4:
         98:30:7a:3f:8a:9f:97:01:04:fa:31:ef:7f:61:87:ba:1e:d7:
         c1:43:19:9a:5f:8f:ef:bf:95:4c:06:2a:15:fc:90:be:15:1f:
         4f:0c:ca:9c:6f:b7:e5:13:68:81:34:c9:f0:11:24:aa:08:0e:
         df:8a:ae:8a:f2:b8:23:f2:ad:e4:9f:7d:b2:2b:ce:e5:30:16:
         dd:d4:55:6a:e0:48:81:31:fe:11:ba:62:b1:a0:4b:08:18:d2:
         bc:f6:b0:61:22:de:c2:04:df:a1:bc:a3:b9:f0:fc:32:41:56:
         b6:21:dd:8a:f5:43:e1:69:49:5c:cc:22:eb:ee:c0:4e:4e:2b:
         f5:89:f6:a5:5f:9c:87:36:f9:db:3f:f1:f2:92:3d:f6:39:34:
         de:1c:4e:1d:86:b5:13:39:7d:73:1c:c1:4c:1e:4b:77:00:59:
         14:78:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:53 2026 by rpki-client