Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File:                     54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier:          8hcR+XXIT4YFu46hfZmdHirWBM4gK33k1ngpUZ6eJhc=
Subject key identifier:   72:4F:1A:69:1C:82:9F:F4:3A:BF:98:16:7A:B2:2E:1C:62:98:C1:40
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer:       /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial:       019FA260EFF800403DB8A61718C4B3B01038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number:          0D30
Signing time:             Mon 27 Jul 2026 07:01:29 +0000
Manifest this update:     Mon 27 Jul 2026 07:01:29 +0000
Manifest next update:     Tue 28 Jul 2026 07:01:29 +0000
Files and hashes:         1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: c18BJR5B9MIGGa3xqdu+Nzo78n1ZQJwIIO5zru97Vz4=)
                          2: Gr9DH2WwJbgZo0WIG9eWTKHCcFo.roa (hash: FB5htKHBt6Y7JRV/Z29yqmijt+k8tYh3TDPpzFpqMJI=)
                          3: NwUxZnR6ilqF9CfQdG6rMzsPqx4.roa (hash: YfrSwZsx1POCSy8VLN9vekskBNjs6p4NHoLWulpvdx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:ef:f8:00:40:3d:b8:a6:17:18:c4:b3:b0:10:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
        Validity
            Not Before: Jul 27 07:01:29 2026 GMT
            Not After : Jul 28 07:01:29 2026 GMT
        Subject: CN=724f1a691c829ff43abf98167ab22e1c6298c140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:ed:5f:5f:14:25:b9:27:11:bb:62:a6:c1:
                    55:14:f9:3f:18:31:bb:47:d1:ed:40:76:d2:f0:c6:
                    b5:4c:7c:d1:19:39:ae:b8:d1:3a:bd:42:49:9e:d2:
                    f3:9f:6b:a6:08:28:fc:7c:c1:a1:db:ea:ba:01:98:
                    a5:71:a9:fd:4c:a9:f1:af:08:96:e2:a6:1c:02:e7:
                    61:5f:86:79:cf:b7:36:2e:2b:6e:a9:dc:7f:15:54:
                    b3:3e:bb:dc:b9:cc:49:ca:d9:2d:40:ad:8e:31:ff:
                    f9:22:cd:df:21:3e:5a:1a:e7:51:80:3b:50:5a:73:
                    e8:ef:d3:00:c1:41:1f:3c:05:56:c8:d3:94:31:dd:
                    a4:0d:40:a0:0d:2e:35:90:ae:08:50:f5:f4:f7:08:
                    be:a9:6a:48:10:c3:5b:90:c7:28:96:d6:d6:f4:5e:
                    46:dd:b4:bb:bb:2a:e1:c0:f8:dc:99:8f:75:bf:f1:
                    fa:f9:73:cf:79:af:23:c1:e2:74:a2:88:d8:38:57:
                    c0:6c:72:5b:e7:1d:c6:b5:ea:b8:1a:2c:52:78:be:
                    2f:4e:31:d8:8e:92:e2:a5:28:7e:e9:c3:a0:c2:8e:
                    00:5d:b8:85:e3:98:6b:87:2b:15:24:18:aa:16:69:
                    a2:ef:9d:c1:b8:33:0b:10:39:5b:8a:9b:98:55:e5:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:1A:69:1C:82:9F:F4:3A:BF:98:16:7A:B2:2E:1C:62:98:C1:40
            X509v3 Authority Key Identifier:
                keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:14:10:6f:a1:e4:64:5f:d0:80:58:28:5d:6f:37:2c:2a:
         e9:25:69:2e:b2:c0:61:7e:fe:cd:0a:af:cd:0f:6c:3a:f2:be:
         f7:45:1d:a8:66:d8:e4:40:d7:ee:d7:3d:ad:51:4c:2b:7f:eb:
         16:e0:6c:fe:4a:ea:7c:0e:90:6a:08:de:96:52:0d:98:56:e7:
         ea:cb:00:bd:6f:06:5e:80:e8:3d:15:16:09:93:88:83:c4:67:
         1b:5e:d8:a9:a5:36:fa:00:20:16:d8:c1:5a:ca:00:8b:9d:f7:
         c6:74:f5:d8:1d:ec:ef:55:22:86:d0:ee:57:cd:c2:66:11:4c:
         3a:62:68:ba:7b:2f:11:c6:c0:d9:ba:86:55:7c:95:fe:6f:42:
         ba:cc:c8:5c:e0:bb:42:a8:82:7a:ff:75:1f:d6:4b:6b:3b:33:
         19:99:1d:38:57:52:cb:f5:75:c7:03:62:63:e6:a6:88:cb:88:
         a7:2d:b5:47:20:a5:9e:cc:6d:8d:8d:9e:76:35:ff:ae:77:9d:
         27:39:07:4d:b3:c8:b9:45:1f:58:49:4e:52:2b:a1:ce:bb:3a:
         4e:62:39:a4:68:90:92:9a:3e:b3:eb:02:26:32:e8:2d:dd:23:
         85:61:a6:f8:eb:ff:97:85:fb:4c:80:78:b8:f9:61:a6:5b:0d:
         7d:6d:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:41:32 2026 by rpki-client