Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File:                     xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier:          S8FOVuw5aDcBKMpGCQg5TFa1H+JNd0glju4pAsHsGV8=
Subject key identifier:   94:48:B5:11:49:9A:88:63:DE:98:FA:7F:44:D1:F2:04:56:4F:1F:CC
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       019F92EDED01BB69AC10A0F5460C73C35C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number:          19D0
Signing time:             Fri 24 Jul 2026 07:01:33 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:33 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:33 +0000
Files and hashes:         1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
                          2: D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa (hash: ez1YIU6Tx3muI0r5J6f9+6WO/D4t4YugqUqFYhktxYk=)
                          3: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
                          4: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
                          5: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
                          6: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (hash: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ=)
                          7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: 9vd3wxLKPQGEHUBuWZD4Vn43D7OrqmAczQ/jL0pRDr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:ed:01:bb:69:ac:10:a0:f5:46:0c:73:c3:5c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Jul 24 07:01:33 2026 GMT
            Not After : Jul 25 07:01:33 2026 GMT
        Subject: CN=9448b511499a8863de98fa7f44d1f204564f1fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:86:cc:64:05:57:3b:5f:56:34:68:d9:89:
                    0c:52:73:ab:7b:f7:09:9b:26:bd:51:be:33:18:a2:
                    de:98:8f:25:97:cf:c6:92:fb:d5:86:9c:c0:12:d8:
                    a2:b2:cc:5e:66:43:25:4f:34:a9:00:70:1a:9f:bf:
                    3e:38:94:30:62:a8:be:9d:66:7d:8d:0a:2c:4d:af:
                    e9:88:c9:85:00:88:97:ed:3d:82:5c:8c:ea:f9:2e:
                    56:16:9a:30:56:5a:ba:9d:89:9c:2a:0b:ad:e2:bc:
                    6c:36:72:f7:08:ef:4f:70:80:88:90:1d:8f:02:a0:
                    3d:35:b5:2c:38:d0:17:f7:5f:f4:71:c4:3a:ac:b6:
                    02:96:5a:ac:77:10:85:7d:1b:8c:33:e9:ca:b3:d3:
                    67:64:c0:42:90:7e:25:da:f9:6a:2f:6b:df:c7:93:
                    a6:6d:d6:16:22:34:de:ca:48:cb:9c:55:94:fc:47:
                    36:c7:c8:8f:a4:4a:91:34:27:f7:39:a5:4a:3b:42:
                    84:28:55:67:62:88:71:b4:96:59:24:0f:94:16:b6:
                    06:b8:de:13:e6:65:50:2a:e7:83:0d:22:72:f4:b7:
                    d1:eb:07:9b:3c:46:c0:cf:39:2d:09:e2:89:2e:f7:
                    c7:9c:08:29:16:68:34:0b:27:72:08:63:dc:3e:87:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:48:B5:11:49:9A:88:63:DE:98:FA:7F:44:D1:F2:04:56:4F:1F:CC
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:c0:ac:59:b6:d0:6b:45:03:12:df:4a:0f:d7:e3:da:8b:
         9d:e5:10:8a:9c:08:28:e3:48:22:66:c3:ae:b5:25:34:68:66:
         81:83:4e:a7:12:80:3e:9b:57:d3:f1:31:d1:3f:33:e0:e3:38:
         2f:7d:77:eb:23:73:e3:b4:d1:4c:f8:1d:62:ad:af:6e:47:1d:
         cc:7e:ce:a3:09:32:95:66:73:f3:a7:18:74:e7:49:8d:c6:ed:
         9d:33:67:76:c4:16:4c:9f:a6:b3:a4:cc:43:34:97:03:53:32:
         a2:3c:7c:5c:0f:25:15:0d:7c:da:96:10:c7:f3:7f:0c:09:27:
         bb:b4:50:9d:eb:93:a9:5e:1d:2b:98:55:f9:c8:1e:9b:a7:58:
         a0:0f:86:1a:79:76:f2:60:69:e5:89:d3:5a:04:75:75:e5:19:
         24:c3:f9:0d:9c:97:5f:37:63:77:4c:4b:8b:c5:c0:53:62:3c:
         14:9b:25:a9:56:c9:7b:a3:20:f0:20:8b:10:0b:8c:3b:46:d8:
         53:b2:75:7b:4b:e3:3e:4a:b0:d2:f9:e8:d3:8b:18:52:ea:5b:
         37:19:63:4b:d7:0c:b8:68:7a:d5:f2:a2:1d:20:86:7b:53:17:
         2b:a8:ff:9a:c7:b1:95:4d:3c:1d:60:b6:2d:92:79:a8:1b:49:
         09:90:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:05 2026 by rpki-client