Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          Uka+q+GnEfgRcVMyrxPsfVzzNVrTwBqMlqVRsSztdn8=
Subject key identifier:   B5:AA:E6:BF:B2:30:EF:90:79:72:1B:EE:03:F5:B2:7F:E8:1F:C4:90
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       019F91358FB8F1D530BAA69400FE7F779B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 23:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:34 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: nwMLI7ABS6lKkX5ED9mtDoK73Z2aK/NddtpDlJLQv2I=)
                          2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
                          3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
                          4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:8f:b8:f1:d5:30:ba:a6:94:00:fe:7f:77:9b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Jul 23 23:00:34 2026 GMT
            Not After : Jul 24 23:00:34 2026 GMT
        Subject: CN=b5aae6bfb230ef9079721bee03f5b27fe81fc490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:1c:47:3c:4f:1a:61:fc:56:a2:51:7d:92:
                    75:6e:ed:f3:0c:a9:7b:22:84:de:4f:f5:f8:8d:97:
                    be:ba:1e:75:63:8c:bb:e9:e1:ba:ca:44:d8:c9:db:
                    bb:87:f7:bf:12:b0:f5:12:a8:b8:5e:85:94:5f:01:
                    7c:82:83:ce:59:02:57:7c:36:6f:fc:48:1c:a1:24:
                    ce:af:d9:f5:c5:e7:e7:64:81:9a:42:e0:18:e9:35:
                    97:d5:04:da:96:03:f4:c2:64:90:2c:66:c8:ce:81:
                    77:84:15:8c:91:ae:12:c2:e1:4d:ff:a9:13:81:54:
                    68:39:63:7c:7d:d5:47:ae:72:16:ba:5b:eb:9e:3b:
                    c1:ed:e6:1c:b6:0c:82:25:96:9e:52:c7:71:1b:7d:
                    8d:2e:86:79:a1:58:06:16:51:46:ca:b2:39:50:e3:
                    b2:0a:7b:3e:07:d4:12:53:23:ea:cf:75:7d:f3:e9:
                    5b:e5:70:35:f9:4b:f0:0b:d5:6d:ac:12:b9:07:6b:
                    89:04:c7:f2:b8:53:6e:f4:b4:a0:50:0e:e4:5c:1f:
                    d7:f8:c5:85:65:dc:11:7d:b6:77:8a:f4:4c:a2:49:
                    7d:cf:27:c3:c7:3a:d2:a4:2b:80:5c:01:e3:c0:c6:
                    e8:38:47:65:ee:67:b0:d6:dd:8e:ba:08:74:81:50:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AA:E6:BF:B2:30:EF:90:79:72:1B:EE:03:F5:B2:7F:E8:1F:C4:90
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:a0:d1:93:99:57:6b:fd:f8:bc:56:3e:ca:88:f9:d0:8d:
         42:03:10:55:53:6d:9c:cb:c8:bd:bb:e3:8f:e0:1f:7f:eb:38:
         ca:69:b9:84:b6:c8:19:46:d0:8a:5c:4a:23:17:62:44:60:b4:
         ae:7d:30:23:58:92:ca:16:18:5d:be:70:32:d0:c7:a5:17:46:
         64:ce:aa:50:0b:a3:c5:aa:0b:b1:4f:00:f6:dd:00:8a:e0:82:
         52:5f:51:d5:43:52:20:f3:cf:0c:8f:0b:93:93:1f:96:bb:70:
         91:16:0d:a3:75:51:c6:2d:3b:24:2b:f7:0e:bc:2a:ce:1d:1e:
         86:27:9e:4f:47:3d:6f:b3:3d:75:8d:0c:71:91:c5:d3:ab:2f:
         4b:79:0b:1f:c6:24:5e:2e:91:31:8f:73:cf:79:90:7c:00:80:
         4d:7d:01:bc:2b:a1:b9:4a:23:bf:6b:b5:1e:1c:66:60:1d:72:
         0b:0e:46:a9:1a:50:55:b3:9d:18:6f:20:20:4a:95:3d:7e:83:
         f0:39:65:31:a3:eb:1c:5d:c5:e1:ea:d5:27:1a:00:72:d1:d3:
         9a:6a:ae:5d:6f:00:1b:04:e9:18:8d:00:26:5d:1c:b2:26:7c:
         11:73:ec:c2:ff:70:dd:1f:bc:96:49:73:cb:94:b1:05:69:00:
         6b:47:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:49 2026 by rpki-client