Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
File:                     614owu_zzzXDwcw9Z7qj3wUFX5k.mft (raw, json)
Hash identifier:          oHO4/BXvDq6ZVZ6irU8KbZV3gSW4DZ0CGQrJjuV60w4=
Subject key identifier:   5C:DB:10:2C:41:C1:10:96:07:5A:E0:AF:6C:15:20:AF:76:51:C3:A2
Authority key identifier: EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
Certificate issuer:       /CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
Certificate serial:       019FA1BBE13599E8CCC519C51F5F6BB8AD34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 04:01:12 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:12 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:12 +0000
Files and hashes:         1: 614owu_zzzXDwcw9Z7qj3wUFX5k.crl (hash: Xx2EY2ae++KCi0w7cc2ukV5UvUKZ2FP/kORQ0TiO54U=)
                          2: PlK6Gz_zz8yOe932ySLfbF7lgwo.roa (hash: 7JKBnxpSJYk4FSEy0vtBUc/r6F+DCRSjQcAobLs9g+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:e1:35:99:e8:cc:c5:19:c5:1f:5f:6b:b8:ad:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
        Validity
            Not Before: Jul 27 04:01:12 2026 GMT
            Not After : Jul 28 04:01:12 2026 GMT
        Subject: CN=5cdb102c41c11096075ae0af6c1520af7651c3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:48:7e:f1:2d:07:cb:13:e8:f1:f1:90:2d:
                    cb:71:ff:3b:67:1d:52:2a:ce:38:35:c8:96:07:ff:
                    4b:da:af:0c:10:ac:8b:32:eb:bb:e9:14:af:16:ba:
                    97:82:bb:6a:d1:9e:d6:2c:50:24:80:59:77:f6:92:
                    6a:4a:ed:46:d4:e9:46:9f:da:b5:26:6d:d2:46:85:
                    ad:4f:a1:91:e4:c0:0a:29:1c:28:ae:f3:19:83:d5:
                    1a:e7:78:75:03:8f:3f:c4:01:88:ab:c3:33:39:70:
                    88:50:e4:54:fe:54:21:fe:41:e2:32:2b:cf:37:51:
                    61:db:cc:d5:5b:eb:20:1a:c1:1c:c2:c2:a0:1c:09:
                    a3:61:51:98:b5:3d:e0:24:71:cb:a0:39:54:2b:d3:
                    2d:82:64:49:5c:d4:42:78:51:ce:56:db:54:1e:c7:
                    42:50:96:f9:1f:9b:bd:e4:f6:5e:4d:aa:f1:1e:c9:
                    30:a7:bd:40:13:a8:37:52:09:ca:7a:87:4f:da:a5:
                    aa:7c:60:61:86:fe:77:90:e3:b3:a7:79:1f:36:65:
                    4f:c0:32:eb:f6:83:24:50:dd:17:a3:a4:1b:f6:fb:
                    37:ec:1b:fd:aa:6d:b1:7c:ae:6d:73:e0:ff:a8:0b:
                    78:b0:f0:70:30:4c:3e:4b:ac:48:6f:17:1e:e1:58:
                    ef:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DB:10:2C:41:C1:10:96:07:5A:E0:AF:6C:15:20:AF:76:51:C3:A2
            X509v3 Authority Key Identifier:
                keyid:EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:83:5b:2d:2b:b5:eb:69:65:79:dd:ad:8b:9e:74:e8:f3:00:
         63:5a:08:c9:7b:e6:95:74:a6:fd:d9:70:da:b9:75:2d:41:c2:
         f1:bd:07:45:76:7e:8d:fd:6c:41:c3:6f:dd:b6:b0:2b:57:8d:
         50:4f:79:1a:2b:d9:af:e9:26:cd:b1:a3:94:f1:89:e7:77:76:
         b0:6c:ad:13:c6:2e:51:d4:d0:50:2c:43:47:0b:4a:3c:cc:f9:
         27:27:47:ea:72:17:14:4c:0b:8f:ad:39:5e:37:a4:fd:a5:73:
         64:ec:dd:98:c7:99:8f:99:eb:fe:e4:c0:64:75:f5:18:7a:4d:
         0f:6e:2b:76:6f:f1:15:45:f2:96:0c:8b:46:41:2d:da:33:a6:
         07:57:36:08:d4:b5:0c:47:e7:3a:88:66:59:a3:32:4f:09:b3:
         b9:cd:a1:81:ef:4d:c8:cc:53:8b:e8:76:50:79:41:26:28:13:
         ff:46:ad:8d:9d:82:9f:e7:91:7d:ca:5a:b3:67:de:d5:49:c1:
         28:c2:15:33:f0:e5:d8:80:d7:58:5c:2a:4d:62:15:dc:6a:f7:
         fa:5e:be:91:e6:35:21:ba:0b:4b:ac:bf:ef:9f:26:e3:a5:9c:
         61:f4:e4:4d:93:9d:97:b8:18:65:f2:d5:30:a5:5d:f1:39:9f:
         77:ed:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:55:29 2026 by rpki-client