Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File:                     xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier:          aziwSSvOXn36F8Y8KPl4TpCUmi6dR0/IeE3M0pnDMPo=
Subject key identifier:   EC:71:A5:2E:5D:98:C0:39:30:DD:72:A2:47:C9:30:8C:E5:12:0B:2B
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer:       /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial:       019F90C7F8C29246EFEDFDA8F133BA95E4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 21:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:52 +0000
Files and hashes:         1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
                          2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
                          3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: qDu5W+t2343ZICEr0MsRxZN7weUxyMfqHBsrR5Ge9Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:f8:c2:92:46:ef:ed:fd:a8:f1:33:ba:95:e4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
        Validity
            Not Before: Jul 23 21:00:52 2026 GMT
            Not After : Jul 24 21:00:52 2026 GMT
        Subject: CN=ec71a52e5d98c03930dd72a247c9308ce5120b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:90:a0:6b:a1:24:5e:6c:4d:89:7a:83:6c:
                    e3:54:c3:e2:e0:37:fc:b1:17:c9:dc:b4:12:e0:10:
                    0c:47:ca:e5:38:67:08:fe:0a:13:1f:8f:94:42:27:
                    d1:fb:c5:6d:30:23:74:e2:39:20:df:f3:24:e1:85:
                    c4:4e:bb:0e:1e:49:f2:ba:e0:9f:5f:a3:75:da:00:
                    53:13:fe:7a:34:ed:e1:56:98:16:f6:e1:1a:3b:14:
                    78:27:1f:d1:b7:19:aa:df:83:98:70:91:1b:8f:f5:
                    25:1f:45:6a:91:bf:36:8e:62:2a:3a:7c:74:87:51:
                    45:49:17:a3:72:39:fe:d5:ba:a6:75:5b:4d:9a:75:
                    63:ea:d7:8a:15:5f:7b:44:f2:06:22:7b:3b:d2:7a:
                    ae:7e:b6:08:05:f2:ce:2b:71:96:3e:56:71:ab:ac:
                    12:6b:68:56:86:e8:84:29:9e:6a:42:a1:77:d1:b9:
                    b0:d5:cf:e3:0e:1e:7a:f0:65:10:c9:d9:ab:65:e0:
                    28:66:76:ee:a8:e6:9e:25:17:78:39:3b:2e:7f:0f:
                    82:59:b4:1e:a3:c9:67:27:36:9a:3a:bc:19:f4:63:
                    23:83:37:64:24:57:6b:9c:7c:b5:aa:e5:41:e9:5e:
                    1a:cb:b8:81:5e:bb:eb:c9:ac:a3:7f:9e:4f:26:77:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:71:A5:2E:5D:98:C0:39:30:DD:72:A2:47:C9:30:8C:E5:12:0B:2B
            X509v3 Authority Key Identifier:
                keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:30:99:75:57:5d:f9:47:88:2b:e2:a0:18:54:eb:54:33:
         c3:30:5d:df:81:35:a9:f9:89:f8:ef:4e:10:61:97:44:0d:58:
         b1:c4:be:9f:e8:85:a9:1f:69:78:a3:7a:8c:01:36:c6:4a:6b:
         e4:6f:37:40:2d:d6:f2:56:86:ef:d9:4b:6d:5a:1f:69:a5:ec:
         d6:c9:aa:06:81:87:5c:af:c1:29:33:0b:af:fe:8e:24:ca:01:
         7e:76:69:4e:3d:37:38:dc:52:e4:d8:91:aa:86:97:d5:86:38:
         0f:97:90:fc:1d:cc:9d:be:ff:0d:41:de:7d:38:4b:ac:17:41:
         94:05:6a:06:8f:dd:cc:f5:52:81:39:e6:e8:23:37:61:ae:09:
         f4:75:d4:71:0a:8e:32:bc:e8:48:0c:a7:58:6d:92:82:a0:ca:
         c8:fa:54:db:f4:29:09:a9:8c:23:ab:f3:e7:03:55:38:e1:f0:
         2e:46:b1:73:0d:f6:bb:b4:76:0d:5f:d8:f0:9e:54:e6:9e:0f:
         9a:12:0e:9c:d7:25:8b:20:f0:0e:32:2d:5e:e1:9b:bc:17:e1:
         9a:12:8d:5e:f2:0b:b8:ca:41:09:cc:6b:68:cd:8e:2a:b9:14:
         c0:74:11:d3:74:e0:71:80:5e:d5:2b:6d:8b:5d:62:06:f7:ec:
         08:6e:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:51 2026 by rpki-client