Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File:                     Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier:          +hMyjyz9gpqG2OGqZsMFdF18djgqhSCtK3ePHmFi6lY=
Subject key identifier:   77:49:A7:EF:7E:28:6F:C9:FB:DC:6E:15:87:98:03:85:6B:5A:A4:C1
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer:       /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial:       019F935B11E29B235543ABC334F60FB71D11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number:          0B46
Signing time:             Fri 24 Jul 2026 09:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:46 +0000
Files and hashes:         1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
                          2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: W+jd1A8OEc0k5uACd1vab63Fzk0S7Ei0OosjNORCWo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:11:e2:9b:23:55:43:ab:c3:34:f6:0f:b7:1d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
        Validity
            Not Before: Jul 24 09:00:46 2026 GMT
            Not After : Jul 25 09:00:46 2026 GMT
        Subject: CN=7749a7ef7e286fc9fbdc6e15879803856b5aa4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8e:88:4d:da:e9:1a:0c:fb:c2:54:36:20:ab:
                    b0:23:f6:19:09:f5:24:de:ca:17:3e:c3:87:8d:a9:
                    03:f8:0e:b5:69:a4:0f:24:4c:5f:9a:0e:3c:e9:be:
                    f4:72:16:d3:40:35:80:9b:a1:2c:41:74:97:39:cf:
                    af:ed:fd:95:41:e8:c7:0c:df:f6:61:f9:b2:e1:79:
                    13:2a:51:fa:12:f3:c5:bc:9e:c5:78:29:48:52:96:
                    27:fd:88:ee:6e:10:f3:35:9e:08:bb:24:5c:43:86:
                    40:b5:2b:74:45:69:a9:0e:f4:15:d5:6d:59:94:24:
                    66:4a:1a:e0:a6:61:c0:aa:50:0b:69:3a:4e:06:47:
                    70:c7:a2:17:57:1a:ee:6d:62:65:02:95:ee:b6:b4:
                    a6:70:21:00:4e:39:db:b0:2f:46:24:b4:2f:ef:de:
                    c9:59:3d:df:67:23:d4:a3:93:df:b6:32:c0:aa:2e:
                    bf:c1:46:62:11:ac:56:49:ac:ad:7b:d4:37:e2:df:
                    67:5d:bc:a7:9d:f4:18:47:93:b4:8f:6e:48:37:e9:
                    31:42:17:e4:cb:4d:c7:72:87:44:6a:29:93:21:ce:
                    00:42:2b:92:cd:d7:73:25:42:41:67:b6:7e:5f:fc:
                    a6:12:02:dc:38:17:0e:a1:62:c4:6d:b2:90:4b:98:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:49:A7:EF:7E:28:6F:C9:FB:DC:6E:15:87:98:03:85:6B:5A:A4:C1
            X509v3 Authority Key Identifier:
                keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a1:a9:88:26:bf:73:f2:61:0f:77:c6:7c:5a:12:3a:2a:25:
         39:0a:bc:9c:01:19:c9:07:f9:f1:b4:dd:24:3b:7a:09:11:43:
         77:fa:97:61:14:d4:65:53:3e:d7:59:a6:6e:6c:c0:0a:c1:e0:
         5a:b8:0a:43:e5:71:f4:a9:34:5a:6f:5b:62:0f:ae:cf:12:bb:
         63:5f:af:f7:1a:70:50:04:6a:5e:0d:15:c1:b7:79:65:59:73:
         fb:ee:34:7e:3a:fd:94:45:88:93:17:e7:54:e8:f6:f1:d6:4f:
         77:af:93:59:fa:8c:b2:fe:cc:32:04:89:e2:ac:b6:8c:38:d6:
         d1:4b:02:ec:96:f2:28:09:1b:bc:12:9f:42:2e:63:b3:52:51:
         23:0a:c9:54:b6:3f:6e:81:fe:7f:6b:44:cc:5a:10:ca:69:5d:
         f9:08:11:9c:54:b8:f0:05:df:b0:e7:8d:32:28:e8:95:ad:8e:
         a3:e7:33:45:da:7c:ad:f9:e9:e1:df:58:f5:2a:e0:4f:c7:26:
         0b:17:46:3b:66:94:a5:a1:bd:e0:17:df:ce:b1:1a:55:71:3b:
         64:52:54:b2:4b:59:46:80:f9:5b:96:56:c0:ae:92:c6:3f:7c:
         a8:90:30:48:17:fe:68:b5:0f:81:70:5a:4f:a8:9d:80:97:91:
         00:81:94:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWxHimyNVQ6vDNPYPtx0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODhlY2YwYTE0YWQxODU3MzU5ZDJjZTViZDA0MmI5Zjk2
YzdjZGQwHhcNMjYwNzI0MDkwMDQ2WhcNMjYwNzI1MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg3NzQ5YTdlZjdlMjg2ZmM5ZmJkYzZlMTU4Nzk4MDM4NTZiNWFhNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I6ITdrpGgz7wlQ2IKuwI/YZCfUk
3soXPsOHjakD+A61aaQPJExfmg486b70chbTQDWAm6EsQXSXOc+v7f2VQejHDN/2
Yfmy4XkTKlH6EvPFvJ7FeClIUpYn/YjubhDzNZ4IuyRcQ4ZAtSt0RWmpDvQV1W1Z
lCRmShrgpmHAqlALaTpOBkdwx6IXVxrubWJlApXutrSmcCEATjnbsC9GJLQv797J
WT3fZyPUo5PftjLAqi6/wUZiEaxWSayte9Q34t9nXbynnfQYR5O0j25IN+kxQhfk
y03HcodEaimTIc4AQiuSzddzJUJBZ7Z+X/ymEgLcOBcOoWLEbbKQS5hAbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdJp+9+KG/J+9xuFYeYA4VrWqTBMB8GA1UdIwQY
MBaAFF6I7PChStGFc1nSzlvQQrn5bHzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzkt
OWYwZjMzNTMyZWEzLzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzktOWYwZjMzNTMyZWEz
LzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqGpiCa/
c/JhD3fGfFoSOiolOQq8nAEZyQf58bTdJDt6CRFDd/qXYRTUZVM+11mmbmzACsHg
WrgKQ+Vx9Kk0Wm9bYg+uzxK7Y1+v9xpwUARqXg0Vwbd5ZVlz++40fjr9lEWIkxfn
VOj28dZPd6+TWfqMsv7MMgSJ4qy2jDjW0UsC7JbyKAkbvBKfQi5js1JRIwrJVLY/
boH+f2tEzFoQymld+QgRnFS48AXfsOeNMijola2Oo+czRdp8rfnp4d9Y9SrgT8cm
CxdGO2aUpaG94BffzrEaVXE7ZFJUsktZRoD5W5ZWwK6Sxj98qJAwSBf+aLUPgXBa
T6idgJeRAIGUsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:23 2026 by rpki-client