Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File:                     XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier:          niKyg3URKXHmY/IUN3NwgbMxPVwHuGX8OimgS+Tg/D0=
Subject key identifier:   40:41:8F:11:A2:94:3D:8D:BB:5F:88:FF:32:65:FE:3F:F9:62:12:FC
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer:       /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial:       019F8FB519BA013780737C84A712025205D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number:          19D5
Signing time:             Thu 23 Jul 2026 16:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:38 +0000
Files and hashes:         1: 3t8az_xmWCwRgwYdF8ntbUiTIo4.asa (hash: OYtFSUrUtQCeFSpMmkc6CELhcO6KgL/e+r+O7ChwoMw=)
                          2: 98276ywNR3GWE3eA4GBIWlMqClE.asa (hash: QZoO0A1vljWFvsSQFCIsfrovq51qQKECKf/LpyJyKgc=)
                          3: PRbbcfFVNFIHvCLuBhm9svvvFeY.asa (hash: TTKXbBMADa8jzEvKjCjU8NuDyyjAgBi2zrMscCgrZ3o=)
                          4: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: ipwu5jttXYdjADAxTVlf9q9VhKf3kYklNvaNMEvI/yo=)
                          5: fsfsFG6c-uDOrtkFycj7XUTrSFs.roa (hash: /2iuoJT/Z9P4V0/09Vme7KEMEVlGA2pEZglck+m/U0E=)
                          6: obrcupVsssO_agB28qMpvHAxeW4.roa (hash: GS+FF6yB/em6e/eXYvpbII2ejEv9rt1t/93lekFQ52Y=)
                          7: otlDwitKEaIJU2uBA1kA4FQjaiM.roa (hash: PnlNyi9JuqZEzROpx8dqkQn2kawiLgt6YWBA0/7GyGs=)
                          8: royOJADOHC1NNGIUFUSG8i3BLQ0.roa (hash: 2PUXEpyjrcM46Q23bjPi20e6P3M7C3MjAxYWgm68WVY=)
                          9: xE39Ruj0m92ceMsS3LNfFTVLuDk.roa (hash: X8+e4gKAkSWFlzWGvgEu09Paqpm627rMwTZHilH3gFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:19:ba:01:37:80:73:7c:84:a7:12:02:52:05:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
        Validity
            Not Before: Jul 23 16:00:38 2026 GMT
            Not After : Jul 24 16:00:38 2026 GMT
        Subject: CN=40418f11a2943d8dbb5f88ff3265fe3ff96212fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:c7:29:2d:5b:ba:a3:b3:bd:e3:fb:06:1f:
                    2c:eb:50:c0:d8:ca:0d:2a:ad:ab:20:51:28:84:2d:
                    5f:6d:b1:cf:f5:94:6c:fa:88:6b:e8:02:b6:eb:17:
                    88:9c:4c:cf:29:b1:c4:fb:69:be:60:2b:68:bb:b3:
                    31:11:29:31:bd:a0:f2:a7:5a:20:32:8f:04:e9:c6:
                    45:9e:28:a6:3e:74:09:11:d5:11:0e:f1:45:56:20:
                    b9:c1:a0:73:e7:77:73:37:83:ae:02:c7:0b:1f:15:
                    82:dc:51:23:ca:ad:9c:da:27:2d:fa:f9:ba:68:8e:
                    ef:8e:c6:73:5f:f1:b6:49:5e:2b:70:12:22:b2:56:
                    8b:6b:17:6e:5d:d4:d2:81:71:0a:4f:e2:e6:d1:95:
                    2c:ce:28:b9:17:22:92:47:57:4c:8e:44:82:7b:fd:
                    04:34:d5:b1:e7:9a:cf:af:e4:06:35:a7:5b:e8:82:
                    9a:a9:28:d0:30:dc:ad:f3:4f:c2:0d:5e:98:74:67:
                    e4:bc:00:12:9d:70:66:54:a6:aa:a4:32:09:cd:23:
                    2f:3e:2e:33:38:c0:64:0a:9c:ca:30:2d:cc:3f:f2:
                    c4:69:93:de:78:d3:b1:00:c5:a0:98:8f:70:c9:9c:
                    df:85:5f:68:ad:94:d9:94:74:df:83:16:03:a9:29:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:8F:11:A2:94:3D:8D:BB:5F:88:FF:32:65:FE:3F:F9:62:12:FC
            X509v3 Authority Key Identifier:
                keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:3d:69:ca:95:87:4d:ca:e9:d4:c0:da:66:38:40:35:4f:d8:
         3b:40:6d:4c:e9:90:01:cb:29:37:8d:67:5d:03:7b:ab:47:56:
         e4:34:46:f4:d9:e2:4b:d0:7c:3f:1d:8c:a7:c8:ed:27:54:5d:
         78:72:eb:a8:33:c8:43:60:c5:38:4c:cf:ba:7c:27:4a:3e:9f:
         93:13:dd:ca:d5:84:42:ca:eb:8f:ed:81:b7:e2:bf:b8:02:e7:
         12:df:e2:0a:e1:69:81:ab:51:f8:d3:d2:f5:5f:31:17:7e:14:
         73:b9:fb:6d:80:d0:99:80:55:66:e4:87:ea:78:0c:47:0e:f8:
         fb:e8:73:33:ff:35:bb:32:2d:51:ef:ab:78:03:de:e1:a1:14:
         ba:89:a4:1e:fb:bc:53:1c:99:ca:59:9e:f5:4b:a4:fd:69:16:
         87:19:d0:2a:f3:ec:a6:ad:b7:18:fa:d5:36:f1:fc:1c:0a:d0:
         07:e9:5f:59:d3:69:1f:a7:61:74:80:29:3e:b4:6d:e3:14:73:
         22:35:d9:4b:da:91:01:f7:86:1f:a4:0f:f9:f3:5a:99:16:4c:
         f2:8e:8a:61:03:8c:1c:ea:5b:71:8e:4b:40:e4:de:8c:d8:62:
         4a:bf:92:49:fd:7e:cf:c1:a6:fa:38:d8:76:3d:90:6b:72:6c:
         45:d3:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:06 2026 by rpki-client