Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
File:                     _X5IAbAS8bGZsv0RqqxS13VjRzk.mft (raw, json)
Hash identifier:          TPGuSgm1omX6hnV0qGEx+UzV7kYNzRAuQ6mV1EPAvOw=
Subject key identifier:   E6:9D:09:F2:81:C7:F7:39:59:B4:7F:A5:2E:F6:59:05:0D:85:9F:AE
Authority key identifier: FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
Certificate issuer:       /CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Certificate serial:       019F916D494CDEF566C8FD58F94B835769CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:26 +0000
Files and hashes:         1: YDVKQbfRYIpm7hR70cFm_r3Bozk.roa (hash: aF7PQA8hwmlUZMld6dK9hesrrO56Rkyyowsvq4iO504=)
                          2: _X5IAbAS8bGZsv0RqqxS13VjRzk.crl (hash: IUxTUVU3/DmAxhyqKZiyOXsEW4i/bRlUw/rUFNV1Edk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:49:4c:de:f5:66:c8:fd:58:f9:4b:83:57:69:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7e4801b012f1b199b2fd11aaac52d775634739
        Validity
            Not Before: Jul 24 00:01:26 2026 GMT
            Not After : Jul 25 00:01:26 2026 GMT
        Subject: CN=e69d09f281c7f73959b47fa52ef659050d859fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:50:f1:a5:40:e3:e7:8a:33:a9:b9:d5:b8:a1:
                    8b:ba:de:3a:42:51:86:32:3a:99:45:fc:7e:23:e6:
                    fc:d3:a6:4d:80:6a:73:d5:96:bc:8b:18:3e:85:05:
                    56:b9:c6:64:c1:1d:38:64:74:6d:2b:3e:d8:fd:38:
                    f2:da:c7:89:a9:91:aa:6e:cf:74:35:fb:3a:7f:17:
                    ce:8a:b3:56:f9:4f:3f:98:f6:10:90:8b:a4:8f:b6:
                    7a:f8:31:d2:0b:aa:f2:a1:5a:f2:92:38:4d:99:be:
                    2d:09:2e:4c:bb:61:dd:84:12:da:92:41:96:a5:70:
                    bc:4b:3c:df:17:90:02:23:ee:93:46:6b:7f:b8:28:
                    72:d9:d4:0e:0f:2f:20:c2:3b:0e:51:e7:5d:eb:00:
                    42:b1:2f:8b:04:76:76:b4:fe:d8:27:a0:bd:6e:1a:
                    4f:c2:6b:68:01:91:25:1b:18:b8:5c:c1:fa:29:20:
                    af:bc:c7:99:62:ab:32:15:62:2f:8a:80:82:1b:ab:
                    a3:6f:70:d4:02:0f:ad:a9:fc:1e:eb:a3:db:52:60:
                    75:e0:b5:ea:87:4d:df:ae:b5:fc:34:db:47:b1:67:
                    ab:e3:c0:e4:70:f5:da:e0:c9:17:3f:38:0e:48:6b:
                    7f:3e:84:08:1b:94:76:14:10:92:5e:1a:bb:3a:e5:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9D:09:F2:81:C7:F7:39:59:B4:7F:A5:2E:F6:59:05:0D:85:9F:AE
            X509v3 Authority Key Identifier:
                keyid:FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:4b:b0:3f:53:18:90:67:c8:f2:78:dc:47:56:58:5e:1c:50:
         9a:b3:03:78:41:53:c9:57:5a:cc:2c:39:6e:dc:10:e4:56:29:
         b3:98:5b:f8:63:6a:fd:1c:c2:46:75:7a:4a:8a:a3:c8:75:8b:
         a0:63:44:da:b1:b5:a5:46:76:8a:6e:16:20:f7:39:fd:4d:15:
         72:cd:9c:84:36:dc:be:00:cf:9d:87:bc:f2:f8:78:c2:58:87:
         3e:4c:93:2d:73:e4:a8:62:08:ef:d3:03:11:9a:c6:da:12:6a:
         01:27:48:b3:a1:1a:d5:77:1d:c6:83:d8:da:98:4f:c2:ba:f7:
         c5:e1:5e:3f:a6:2f:f4:f9:95:60:5f:25:cd:fa:c2:b7:df:1b:
         bc:a7:e4:8d:a3:2f:f9:cc:33:79:ef:38:31:3e:60:e2:a9:33:
         97:83:d2:d0:41:c8:a7:6d:da:e1:28:2e:2d:99:cc:39:1a:d3:
         06:a2:b3:6f:a0:9d:5a:40:c2:35:d4:53:43:bc:d1:ef:4d:0b:
         74:69:c4:f7:58:07:3d:d3:86:ed:c0:b9:25:83:99:ca:10:bd:
         1c:e0:e4:f6:e9:c3:cb:a5:6b:ee:4c:ec:53:d7:f5:09:3d:e5:
         4e:2d:54:df:f2:8f:8b:ad:56:3e:ad:77:4a:2c:ca:b4:dc:a6:
         f1:82:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:04 2026 by rpki-client