Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File:                     X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier:          6HHXO9JFhmkLtaXh9EIkR+kvTpkh9i4YfDceLMDSJqA=
Subject key identifier:   61:1E:7D:8A:12:3A:23:D5:85:05:B7:21:ED:6E:52:00:44:5B:C1:83
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer:       /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial:       019F93925948143C68017AC7FCC45FED8139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number:          13DC
Signing time:             Fri 24 Jul 2026 10:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:09 +0000
Files and hashes:         1: OgANtrj8j6WImSC_x9463NVhsNw.roa (hash: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=)
                          2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: V6J5RsQfncP+OUdwA2YGnZdCLv3Tbc0bImv5ylAKRvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:59:48:14:3c:68:01:7a:c7:fc:c4:5f:ed:81:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
        Validity
            Not Before: Jul 24 10:01:09 2026 GMT
            Not After : Jul 25 10:01:09 2026 GMT
        Subject: CN=611e7d8a123a23d58505b721ed6e5200445bc183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:77:17:a8:08:c9:72:49:65:33:3e:31:47:9c:
                    90:e7:36:5f:fc:9b:45:05:69:79:06:bb:2c:f7:be:
                    01:0b:4d:f4:c8:1a:23:79:5c:e2:1e:d3:64:fd:ea:
                    d2:c5:2b:2c:ef:7a:7c:e6:0a:36:05:9d:ea:5a:fe:
                    a6:76:94:52:41:73:3f:57:67:76:04:c6:6b:1c:b7:
                    38:d4:97:96:e2:f2:85:ca:26:4c:dc:21:73:f8:42:
                    ce:ae:29:0d:da:9d:cd:02:af:34:00:a3:c8:de:d8:
                    c7:b0:29:72:2b:e7:9b:ad:dc:e7:3d:e0:25:00:e4:
                    6c:4e:7f:b8:b1:37:4f:0f:8c:e5:72:66:53:07:08:
                    85:f6:51:dd:82:bc:5d:84:5f:d9:45:2a:83:93:ef:
                    66:e9:eb:d0:51:f4:01:e3:e6:e3:80:7e:bf:29:13:
                    bf:b1:cf:0e:e1:a5:5a:bd:ff:5f:7b:0b:44:18:8f:
                    35:f3:d3:21:ba:fb:de:78:30:dd:56:0c:b5:f9:c2:
                    a5:a1:46:c9:4c:c5:1c:22:8a:50:c0:a1:c0:e9:e1:
                    c7:6b:c8:a6:84:d0:76:7a:ca:39:15:6a:74:61:df:
                    0c:f1:f9:43:da:45:8f:08:20:3e:95:97:3d:5c:32:
                    12:14:61:4a:2a:f2:dd:d4:b7:91:37:fb:74:43:82:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1E:7D:8A:12:3A:23:D5:85:05:B7:21:ED:6E:52:00:44:5B:C1:83
            X509v3 Authority Key Identifier:
                keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:76:5a:c6:1c:f8:d0:c9:5b:e3:e6:f2:93:54:91:dd:3a:e1:
         45:88:86:05:10:d7:f9:da:12:f6:15:2b:e4:19:1b:30:ed:67:
         e7:e1:0d:2d:bd:0a:f2:93:19:4b:22:6a:fd:ec:63:f5:7d:9e:
         3d:a1:8a:82:23:09:7d:0c:d8:44:c9:d2:00:6b:51:b4:69:13:
         48:81:9e:b5:33:e3:e9:88:6d:c4:ca:6d:8a:c4:0e:b5:a9:aa:
         0b:94:8d:ba:05:d6:af:25:ce:4c:1d:2f:31:31:87:f2:22:f9:
         7e:32:5b:b2:52:18:a2:86:fe:3b:4a:6f:c2:85:7d:49:42:bc:
         a6:36:01:80:2a:39:7a:0e:5b:95:88:94:17:92:5c:2e:51:22:
         23:d0:81:b8:10:c6:a0:d8:a3:8f:71:2b:6d:fc:04:e4:6d:94:
         ec:16:60:65:58:9e:2d:c6:7c:7d:21:ec:8d:bb:76:48:e3:49:
         43:00:78:34:65:ce:1a:98:5e:37:15:3c:0a:80:c5:a0:e7:e1:
         80:85:a5:b3:4f:76:32:1b:ad:c8:80:73:4c:eb:93:d6:db:e0:
         bd:c6:d6:26:f8:a7:69:48:52:aa:5a:96:90:f8:05:38:c9:a6:
         1c:c1:6a:a6:0d:33:ec:f8:21:33:a5:0d:f0:cf:27:a1:33:e0:
         01:8d:05:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkllIFDxoAXrH/MRf7YE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm
NzJkOTMwHhcNMjYwNzI0MTAwMTA5WhcNMjYwNzI1MTAwMTA5WjAzMTEwLwYDVQQD
Eyg2MTFlN2Q4YTEyM2EyM2Q1ODUwNWI3MjFlZDZlNTIwMDQ0NWJjMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/HcXqAjJckllMz4xR5yQ5zZf/JtF
BWl5Brss974BC030yBojeVziHtNk/erSxSss73p85go2BZ3qWv6mdpRSQXM/V2d2
BMZrHLc41JeW4vKFyiZM3CFz+ELOrikN2p3NAq80AKPI3tjHsClyK+ebrdznPeAl
AORsTn+4sTdPD4zlcmZTBwiF9lHdgrxdhF/ZRSqDk+9m6evQUfQB4+bjgH6/KRO/
sc8O4aVavf9fewtEGI8189MhuvveeDDdVgy1+cKloUbJTMUcIopQwKHA6eHHa8im
hNB2eso5FWp0Yd8M8flD2kWPCCA+lZc9XDISFGFKKvLd1LeRN/t0Q4LlJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEefYoSOiPVhQW3Ie1uUgBEW8GDMB8GA1UdIwQY
MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt
NGZhNjI0MmI4YTNhLzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh
LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXZaxhz4
0Mlb4+byk1SR3TrhRYiGBRDX+doS9hUr5BkbMO1n5+ENLb0K8pMZSyJq/exj9X2e
PaGKgiMJfQzYRMnSAGtRtGkTSIGetTPj6YhtxMptisQOtamqC5SNugXWryXOTB0v
MTGH8iL5fjJbslIYoob+O0pvwoV9SUK8pjYBgCo5eg5blYiUF5JcLlEiI9CBuBDG
oNijj3ErbfwE5G2U7BZgZVieLcZ8fSHsjbt2SONJQwB4NGXOGpheNxU8CoDFoOfh
gIWls092MhutyIBzTOuT1tvgvcbWJvinaUhSqlqWkPgFOMmmHMFqpg0z7PghM6UN
8M8noTPgAY0F2A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:27 2026 by rpki-client