Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File:                     xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier:          ud8iYs+Rll6zqeif1z2TugrAo3nmQsMsfu1uTpD0Fd4=
Subject key identifier:   95:BF:E8:D1:4B:89:D5:EB:C7:9A:47:09:34:DD:EE:AF:98:41:F1:CB
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       019F93FF6762E954F07811EDC6098A265065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number:          19D5
Signing time:             Fri 24 Jul 2026 12:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:16 +0000
Files and hashes:         1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
                          2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
                          3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
                          4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
                          5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: Q0cEuTkftRLNLDLQicOocqY5SD2SjLtYE2PSwskc2H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:67:62:e9:54:f0:78:11:ed:c6:09:8a:26:50:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: Jul 24 12:00:16 2026 GMT
            Not After : Jul 25 12:00:16 2026 GMT
        Subject: CN=95bfe8d14b89d5ebc79a470934ddeeaf9841f1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:59:a4:67:a1:73:de:cc:f1:86:d4:37:d2:
                    f9:7b:de:43:3d:68:b5:62:07:78:9d:2b:3b:56:41:
                    03:b0:c3:1e:25:91:12:ae:c1:62:46:16:54:b4:b9:
                    01:fe:76:e8:a5:a7:a9:f0:1d:ac:e5:80:c8:ec:8f:
                    e5:a3:5c:f8:ba:72:20:6b:c7:47:71:23:38:1b:c7:
                    c9:b9:f2:97:40:f4:ab:d7:cd:76:02:ea:14:0a:93:
                    4e:56:6a:2a:da:00:0a:0f:34:c8:2b:97:3e:c5:1d:
                    b0:86:98:05:4b:0e:36:59:51:26:4e:ee:6e:1c:c9:
                    c2:2f:04:f3:0c:b0:82:e9:7c:13:18:14:f2:85:ee:
                    3c:51:3d:aa:b0:6d:db:11:e0:74:d9:09:7e:90:64:
                    a8:46:db:b7:42:e2:c7:4d:20:a4:9f:d0:fe:45:8e:
                    bf:ff:30:ca:89:ea:cd:40:f7:72:b8:22:b9:b5:ab:
                    91:1e:83:94:26:5a:d6:c7:6d:e1:b8:72:f6:58:bc:
                    cb:16:f4:61:87:68:3b:c4:7e:e2:39:ce:12:4f:be:
                    f0:81:01:1c:9d:ae:5d:5f:3f:02:87:42:5f:f1:34:
                    4a:92:a7:5b:40:d0:6b:70:5d:ff:dd:45:40:1a:1e:
                    cf:54:cc:c3:a0:19:b3:a7:bc:94:c3:a8:33:ef:19:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BF:E8:D1:4B:89:D5:EB:C7:9A:47:09:34:DD:EE:AF:98:41:F1:CB
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:92:a8:4b:62:c1:d4:b2:29:c3:0b:d9:a4:19:0c:e1:4e:c6:
         7e:7a:48:2d:15:2f:2b:87:2d:ac:ef:78:95:80:d6:58:29:0c:
         66:18:36:59:d6:54:5a:e2:17:82:a0:57:b6:3b:19:46:d9:92:
         88:0e:2e:b0:5e:d8:44:1d:b7:a9:71:5e:24:a4:9e:40:1a:9b:
         06:ad:3e:dc:e4:26:c3:4a:1f:0c:07:3e:17:96:e6:ff:bf:b0:
         08:30:87:15:40:67:01:85:20:31:50:7c:44:4c:9c:1b:ea:45:
         0c:c4:14:71:66:9e:81:a0:a2:35:d8:1e:d2:b7:59:79:fe:4d:
         55:95:c2:80:05:37:87:b8:32:18:7f:eb:2d:da:f9:b4:f4:2b:
         9e:de:2d:65:fa:33:e3:24:ae:48:eb:30:ca:97:5f:55:23:a7:
         ac:13:c8:51:7a:77:ad:79:e5:e3:02:73:0f:e9:f9:0e:38:11:
         41:16:fb:e9:e2:67:c0:1d:db:f7:21:ea:2d:12:78:ba:f8:c2:
         7b:a1:06:ac:27:11:f9:17:d9:3b:ad:1c:1a:41:f5:66:ba:e1:
         89:a6:6b:57:76:b8:e1:30:56:82:d7:c3:c4:b3:c0:80:63:b2:
         91:7f:45:f8:15:13:f3:cb:e1:b8:6e:e6:ad:6e:ec:a3:87:33:
         20:18:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:25 2026 by rpki-client