Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
File:                     R_hjAUxgM_HYkkKz5elWFIn5wmo.mft (raw, json)
Hash identifier:          OevyVQvTYv/nqe5+nXCXD2iziErq2Ux2eH1UWtfPyfo=
Subject key identifier:   E5:F4:6B:F9:B0:9E:38:9B:4C:08:0D:77:CF:34:7E:C0:A5:0E:BF:01
Authority key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Certificate issuer:       /CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Certificate serial:       019FA304B97930ABD3590F67F71193E87C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
Manifest number:          03B5
Signing time:             Mon 27 Jul 2026 10:00:23 +0000
Manifest this update:     Mon 27 Jul 2026 10:00:23 +0000
Manifest next update:     Tue 28 Jul 2026 10:00:23 +0000
Files and hashes:         1: 6BB7YKs_TSVSHzzDi7ISS9QH3JI.roa (hash: SwW2p7kJ+ORVGz5Fk9N9ww/FGh4ApYXs5+iLpFH3B0g=)
                          2: R_hjAUxgM_HYkkKz5elWFIn5wmo.crl (hash: v9fhGd/3svlv/nvK5TpHEz9MZ5kibYiMolUtyCN4TqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:04:b9:79:30:ab:d3:59:0f:67:f7:11:93:e8:7c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
        Validity
            Not Before: Jul 27 10:00:23 2026 GMT
            Not After : Jul 28 10:00:23 2026 GMT
        Subject: CN=e5f46bf9b09e389b4c080d77cf347ec0a50ebf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:2c:b5:69:98:50:d7:12:a2:28:38:48:b2:
                    c7:7a:eb:13:9e:e9:be:a5:2a:c8:d7:0c:a7:43:07:
                    64:c4:b5:27:b1:3e:0e:ce:f9:61:59:cc:0a:37:20:
                    90:dc:13:7a:40:ba:66:24:10:04:b3:30:2b:88:f6:
                    a1:4a:94:09:1c:a1:ed:f2:69:2f:10:f4:bc:9d:6d:
                    dc:d7:68:a1:86:9f:46:5a:6a:26:26:de:b4:e7:ed:
                    7b:ad:38:e4:66:37:2c:ec:c5:9e:1e:35:11:2b:b3:
                    fe:d5:3e:c2:55:9a:81:ba:ab:47:6b:6f:40:57:ae:
                    96:5f:54:50:c3:5b:19:b9:11:c0:84:ee:4c:c1:26:
                    12:e5:b5:d6:0d:b9:c8:47:60:94:22:f3:5e:d7:9a:
                    e7:25:69:14:92:88:a1:93:7d:f7:cc:b1:4c:01:2e:
                    a6:76:01:16:03:74:75:4f:41:a9:7d:0c:24:d0:1b:
                    c4:e5:89:5f:33:bd:27:d0:d3:2e:86:45:19:39:ec:
                    fb:a3:b3:97:2f:57:8e:ea:d9:b0:c2:33:d4:c1:b3:
                    b9:8d:f7:e3:4a:a0:fb:17:a8:4a:b6:bf:e6:ae:08:
                    81:9a:96:c6:86:56:47:67:c8:4c:3b:d5:5f:00:f1:
                    5e:53:05:b6:ea:14:bb:1d:fa:19:d2:a3:29:62:a7:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F4:6B:F9:B0:9E:38:9B:4C:08:0D:77:CF:34:7E:C0:A5:0E:BF:01
            X509v3 Authority Key Identifier:
                keyid:47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:6c:76:1d:25:81:68:f0:bc:46:d8:d8:a8:02:79:36:6e:
         19:51:30:c9:e7:7e:46:52:40:60:81:e1:27:94:75:9c:3c:a9:
         5d:97:6b:c1:60:2e:74:b1:3e:2d:72:74:57:d6:c4:01:5b:cb:
         d7:39:bd:ad:5a:be:02:96:f2:2d:bc:fb:53:f3:0f:4c:b2:82:
         75:69:be:fb:60:d8:73:ce:18:93:1c:ee:87:b9:3a:8d:0f:ff:
         f2:23:70:8c:f1:19:4c:f8:fd:24:e0:f4:ac:62:dc:15:94:50:
         dc:be:4e:87:3c:73:b2:62:f6:c4:d2:9b:59:b3:c2:86:d1:e2:
         eb:85:8c:36:77:11:c5:61:c3:f5:42:a5:45:96:b9:4e:2b:a6:
         5f:36:ce:c7:4c:db:f8:8f:98:ab:61:f3:44:16:0a:60:40:2e:
         cc:84:2e:06:2a:bb:6f:88:b0:99:bf:46:9a:fe:41:04:b9:bd:
         95:11:cc:b3:98:67:be:91:eb:c2:d2:e6:41:d0:52:68:e3:fb:
         2c:bc:02:a1:f6:77:62:43:c5:8c:83:76:01:a5:99:66:6a:56:
         af:db:f9:d1:22:bb:22:4c:52:87:83:d1:55:c9:8a:69:84:13:
         0d:b7:18:f4:06:71:f5:d2:10:99:3b:81:e2:e4:fe:5e:2c:8a:
         69:fc:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:33:18 2026 by rpki-client