Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File:                     s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier:          tNy6brfKql88gLrMxklNwY4mTzidLx3B179OYui1FZ4=
Subject key identifier:   A1:C2:45:A9:56:A9:15:FF:66:DE:21:70:52:D0:E4:6E:5F:99:2A:5D
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       019F867B1CBAEBCE8149EC4D463235933D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number:          19C1
Signing time:             Tue 21 Jul 2026 21:00:42 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:42 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:42 +0000
Files and hashes:         1: 4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (hash: SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=)
                          2: eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa (hash: EZHtgyXuVhoKYg4ldCwReKSDjf4sa7sqciiJnV/pNsU=)
                          3: gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa (hash: MTngT7ag+SmUmwcOQxAC0+9glcY1SoAbKgViBkJyexI=)
                          4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: htdOlTcNjrIn89svHI9Uvyr5/8er/aBtaj8ZJtX+CEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:1c:ba:eb:ce:81:49:ec:4d:46:32:35:93:3d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Jul 21 21:00:42 2026 GMT
            Not After : Jul 22 21:00:42 2026 GMT
        Subject: CN=a1c245a956a915ff66de217052d0e46e5f992a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:57:c5:c4:20:91:2e:02:8e:ec:ab:57:ff:
                    c2:6d:c2:cb:84:63:3e:a3:13:a7:3a:ce:5f:56:f3:
                    b9:d8:06:af:d6:5e:0a:c0:60:28:66:1a:50:a4:92:
                    53:05:b7:c9:12:59:e7:27:71:f2:92:a5:b2:13:da:
                    82:ef:9d:ca:a5:b0:fb:10:14:e3:9e:9f:cd:f6:73:
                    ab:30:f4:0c:0e:c7:09:af:4c:55:e7:79:4c:44:41:
                    11:9f:12:b1:9d:42:b9:96:8e:ce:eb:6d:42:6a:40:
                    21:ae:27:03:8c:2a:97:e8:6b:23:16:dc:60:67:8a:
                    42:82:1a:98:e5:e5:d9:e5:19:0e:aa:77:bc:13:9a:
                    7c:9a:c7:0c:62:ec:bb:65:85:67:92:ec:1b:0d:a1:
                    76:dd:4d:db:97:29:7a:a7:2f:50:39:4f:3d:ca:89:
                    5f:7f:92:08:1c:1d:be:46:e5:f5:14:38:42:60:e1:
                    a9:0e:8c:1d:21:6a:86:37:97:21:75:7c:dc:18:ed:
                    18:36:a1:38:f9:33:bb:e6:fd:54:5b:02:24:79:ce:
                    83:76:dc:b8:84:ad:6a:ba:65:02:aa:ff:ec:37:bc:
                    6a:b9:82:f1:de:94:05:07:ae:ce:68:a5:67:a3:75:
                    6d:73:2f:62:86:21:6e:1a:fe:53:1d:05:e9:34:8f:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C2:45:A9:56:A9:15:FF:66:DE:21:70:52:D0:E4:6E:5F:99:2A:5D
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:e8:41:e1:b6:3e:ed:8d:33:18:39:df:59:69:0c:fb:bf:
         ac:91:3b:74:dc:90:6a:07:b6:90:e2:a7:7d:aa:c1:38:43:71:
         7c:b6:9f:a1:8c:6e:ba:7f:85:be:63:d8:64:c9:ac:62:b3:f1:
         16:85:03:04:29:2f:b0:a8:d1:6b:8c:a7:f9:3d:5b:8a:fa:a3:
         09:c7:7b:4d:7b:35:52:ed:12:45:df:2e:48:f2:72:10:2a:e6:
         da:87:13:e5:b3:54:89:ca:71:b4:22:7b:dc:41:97:6f:0f:85:
         03:9f:5e:3d:0e:0d:bc:8a:62:dd:6a:d9:c4:84:a4:19:4b:32:
         75:08:d4:3a:4a:50:f7:ab:51:d8:de:fe:6e:4e:04:a4:c1:bd:
         d4:7c:94:f6:b8:cf:ac:0a:39:8e:6a:cf:0c:44:b3:84:1b:e1:
         ff:5c:87:f4:bb:15:ef:ba:45:2a:0a:ec:c4:49:b1:9a:2a:e7:
         4b:8a:9f:53:6d:de:fa:9e:1e:53:a9:f9:08:e0:9f:f4:7f:df:
         08:cf:19:90:b4:27:c1:f2:5f:b4:77:43:3f:67:3d:6f:e0:a6:
         59:3a:42:0f:a2:f5:e8:ab:17:fa:9c:32:a8:c4:c4:45:19:b4:
         f2:86:77:11:37:0f:f1:7f:bd:49:d9:a9:67:ab:ac:d5:42:5e:
         9b:1a:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:38 2026 by rpki-client