Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
File:                     s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json)
Hash identifier:          tStAe5bp7gK5Q18lld94V3cBzTVCKqmpNFXCRG5U1F0=
Subject key identifier:   C7:1F:1B:3D:42:23:CC:0D:FE:FB:A2:E0:98:B2:D5:51:0A:F3:A8:1C
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Certificate issuer:       /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial:       019F860D66FF5A8C0FF1357FB2E0359801BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
Manifest number:          01E3
Signing time:             Tue 21 Jul 2026 19:00:53 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:53 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:53 +0000
Files and hashes:         1: 0mX3Kr0b0UFBMsJtVZn5yf2lhTM.asa (hash: t3G1NkXWHK4wGViktIA9e/IpeSePFuwm4DhV5QXwwUE=)
                          2: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: icwicu8pC+jJVin4Mw3m4PXU2Xj8e3B7rUC+IfO2mM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0d:66:ff:5a:8c:0f:f1:35:7f:b2:e0:35:98:01:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
        Validity
            Not Before: Jul 21 19:00:53 2026 GMT
            Not After : Jul 22 19:00:53 2026 GMT
        Subject: CN=c71f1b3d4223cc0dfefba2e098b2d5510af3a81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:47:1d:e8:bc:1a:47:18:18:71:12:07:9e:
                    d9:63:42:25:73:5a:57:a5:91:57:1f:87:46:e2:34:
                    1e:12:e5:6b:7b:6f:cd:ae:6b:60:3c:35:f6:70:e2:
                    67:00:14:cd:d3:f5:be:e1:92:86:4f:e0:3b:fc:f5:
                    e1:e8:44:6d:2e:f8:76:98:ce:7a:13:15:ee:26:a9:
                    34:92:e7:1c:2b:8d:d6:51:c9:26:47:be:c2:b0:23:
                    a1:01:12:63:aa:ad:5d:29:b8:d5:06:f6:cf:ce:09:
                    c3:5e:65:e8:6c:4e:ca:cf:f9:f2:2c:b6:c1:8b:36:
                    98:c9:ec:b9:29:3c:98:95:e7:b8:26:35:13:df:b5:
                    46:91:18:08:10:4b:1a:58:cd:9f:0d:9f:6a:d5:6a:
                    06:99:2d:5b:3d:03:c2:25:68:d5:78:69:ac:ca:98:
                    a8:59:49:5f:ab:cb:d8:75:f7:03:17:52:06:b6:17:
                    25:48:53:0f:7c:ec:52:19:80:80:32:9b:f3:b8:d2:
                    8b:cd:63:53:ba:9a:cd:f5:ed:23:fe:b3:41:20:81:
                    9a:56:f1:63:41:6b:30:4d:c7:f4:b4:90:89:b1:7a:
                    dd:33:cf:e4:bb:75:15:2e:52:39:3f:c5:8a:dd:59:
                    1d:28:67:a1:1f:c4:7f:d6:fa:3f:23:54:ba:36:9e:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1F:1B:3D:42:23:CC:0D:FE:FB:A2:E0:98:B2:D5:51:0A:F3:A8:1C
            X509v3 Authority Key Identifier:
                keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:69:52:69:cd:54:a6:ec:19:1d:56:db:91:25:05:de:4c:16:
         6a:db:2d:d3:33:8e:7a:50:74:af:50:13:74:5f:74:1b:85:16:
         ff:04:56:bf:32:eb:ed:1e:71:69:7c:ef:ea:b5:89:df:dd:4b:
         40:da:4a:29:b2:49:a5:1d:38:aa:c1:47:a3:a3:13:52:10:19:
         83:b5:28:f5:3e:2d:63:a2:85:e3:9f:22:5e:86:2c:0c:a8:77:
         73:2b:16:12:71:e8:8c:e2:89:7d:72:90:63:32:57:cd:b9:53:
         0d:28:64:e6:65:e5:3a:32:3b:47:99:df:91:59:5d:5e:d2:a1:
         94:78:ee:59:89:81:9b:b1:aa:51:f2:15:d1:89:cc:08:3e:73:
         53:5d:1e:de:aa:21:fd:66:6a:3f:4c:d7:a8:67:01:6a:ba:0b:
         34:42:7d:97:14:21:4d:d3:27:16:3c:1e:ff:ed:23:59:36:4e:
         af:98:2b:fc:08:63:6d:13:fb:2f:42:1a:51:6a:02:bc:79:6e:
         0e:35:77:ae:35:2a:21:14:e6:49:fd:22:0c:d7:b0:cb:c4:3c:
         03:72:ab:1b:fa:99:b5:e7:83:d9:55:85:fc:1a:ad:12:7d:28:
         7b:6c:19:96:0f:0b:18:b9:c2:24:f4:dc:60:99:b8:36:38:99:
         19:41:b7:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDWb/WowP8TV/suA1mAG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTJkMjFlYmNmNmVkNDQ1NGM0ZmY0NjgzMjRiZGVkZDQ5
YmFhMTMwHhcNMjYwNzIxMTkwMDUzWhcNMjYwNzIyMTkwMDUzWjAzMTEwLwYDVQQD
EyhjNzFmMWIzZDQyMjNjYzBkZmVmYmEyZTA5OGIyZDU1MTBhZjNhODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IlHHei8GkcYGHESB57ZY0Ilc1pX
pZFXH4dG4jQeEuVre2/NrmtgPDX2cOJnABTN0/W+4ZKGT+A7/PXh6ERtLvh2mM56
ExXuJqk0kuccK43WUckmR77CsCOhARJjqq1dKbjVBvbPzgnDXmXobE7Kz/nyLLbB
izaYyey5KTyYlee4JjUT37VGkRgIEEsaWM2fDZ9q1WoGmS1bPQPCJWjVeGmsypio
WUlfq8vYdfcDF1IGthclSFMPfOxSGYCAMpvzuNKLzWNTuprN9e0j/rNBIIGaVvFj
QWswTcf0tJCJsXrdM8/ku3UVLlI5P8WK3VkdKGehH8R/1vo/I1S6Np693QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcfGz1CI8wN/vui4Jiy1VEK86gcMB8GA1UdIwQY
MBaAFLOS0h689u1EVMT/RoMkve3Um6oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVMU0hyejI3VVJVeFA5R2d5Uzk3ZFNicWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MmU2MzItMzYyYS00NDJhLTk5ZmMt
ZGJkZGE0NzU3MTU1LzEvczVMU0hyejI3VVJVeFA5R2d5Uzk3ZFNicWhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83MmU2MzItMzYyYS00NDJhLTk5ZmMtZGJkZGE0NzU3MTU1
LzEvczVMU0hyejI3VVJVeFA5R2d5Uzk3ZFNicWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWlSac1U
puwZHVbbkSUF3kwWatst0zOOelB0r1ATdF90G4UW/wRWvzLr7R5xaXzv6rWJ391L
QNpKKbJJpR04qsFHo6MTUhAZg7Uo9T4tY6KF458iXoYsDKh3cysWEnHojOKJfXKQ
YzJXzblTDShk5mXlOjI7R5nfkVldXtKhlHjuWYmBm7GqUfIV0YnMCD5zU10e3qoh
/WZqP0zXqGcBaroLNEJ9lxQhTdMnFjwe/+0jWTZOr5gr/AhjbRP7L0IaUWoCvHlu
DjV3rjUqIRTmSf0iDNewy8Q8A3KrG/qZteeD2VWF/BqtEn0oe2wZlg8LGLnCJPTc
YJm4NjiZGUG3bw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:25 2026 by rpki-client