Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          IdhkSvxVL6lUV/9UGmG5rObf5FwRGjGYx/RmFlDtcE0=
Subject key identifier:   86:89:73:EE:4B:F1:2C:78:51:9C:89:C8:28:20:80:F6:84:0E:FD:2B
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       019F905AA174D2D721E59D5881FCCB8C352C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          0A8F
Signing time:             Thu 23 Jul 2026 19:01:26 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:26 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:26 +0000
Files and hashes:         1: HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa (hash: a/gPxO3vEuqfCp70KpDQq2lcCKuUQZuTopPVCy8m4LA=)
                          2: PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa (hash: 7fFDeno1llfmG5xw2+UhwO2bFxAsVyxjb17vnpRCoYg=)
                          3: PfU-pIQUztpuCpjeK4PA6M387xY.roa (hash: IxKP4N/sSJx4IV1KMlr0VGqT7A6A6/R7M00aHJnoW/w=)
                          4: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: VGbM5aqF5VEEZ7iRGkJwZPeoRYsfvkcbb4Y+USRtR2E=)
                          5: _BWqmK6mrfBuguQtqF75TBClGMs.roa (hash: uZ7P5xdR1guWm1uC7RQ3bBaQOHT/pKp/etCCjtf5eTs=)
                          6: mUrwLBSn-6OABt-a8CWyid9HQT0.roa (hash: QLR5JTAjIM5uhR1YB984cbq/Umms9s9InAJMrrGnnxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:a1:74:d2:d7:21:e5:9d:58:81:fc:cb:8c:35:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Jul 23 19:01:26 2026 GMT
            Not After : Jul 24 19:01:26 2026 GMT
        Subject: CN=868973ee4bf12c78519c89c8282080f6840efd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:97:78:d2:cc:8e:eb:47:72:3f:9c:cf:88:
                    48:41:40:58:10:50:41:e4:7e:7b:ed:56:de:5c:4e:
                    e4:a4:c2:3f:71:9a:04:4e:7b:de:59:86:dd:1f:04:
                    d3:39:d6:66:09:3a:ce:cf:61:cb:20:f7:e0:e1:f5:
                    b3:88:e3:65:2f:33:e3:63:74:84:67:b2:14:7e:eb:
                    8d:94:b0:c1:0d:0f:9f:56:f7:9e:bd:a1:b5:45:36:
                    62:c7:c4:3c:69:b7:b8:80:fb:7e:7b:cb:f8:30:ae:
                    d5:79:3f:1e:38:45:9f:80:c8:1d:59:dc:cb:78:33:
                    1f:26:b0:f8:76:ad:1d:50:02:ac:98:19:20:89:74:
                    92:3a:44:14:a7:2e:42:d7:f3:76:74:c5:bd:50:42:
                    0e:82:18:86:ef:fb:d2:52:2d:c2:d3:2c:6e:a2:52:
                    7c:03:c2:34:7b:c2:94:6c:06:79:0a:36:f4:d0:ca:
                    c6:09:56:c1:81:20:07:05:21:e7:51:63:a3:b6:c1:
                    b6:ee:ce:eb:6d:3f:bd:01:60:05:53:76:b6:de:ad:
                    21:48:76:2d:4d:89:3b:65:bd:df:75:cc:68:6a:e0:
                    16:0d:a5:ea:f7:ba:83:93:c3:ca:4f:e8:7d:8b:51:
                    2f:35:3f:16:47:e6:f9:b5:ff:ed:b4:0f:31:32:77:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:89:73:EE:4B:F1:2C:78:51:9C:89:C8:28:20:80:F6:84:0E:FD:2B
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a0:09:b7:6d:16:03:78:89:7d:60:89:43:19:ed:d7:ba:83:
         60:78:92:a5:12:ed:06:59:44:a8:73:77:54:f6:14:f0:fa:85:
         c5:37:f3:10:76:fc:4b:a9:b6:f0:67:d9:56:4c:bf:34:e8:78:
         ef:f3:77:3c:8c:fe:1b:fa:80:58:77:66:68:bf:18:1b:15:10:
         c9:14:3f:50:78:91:28:96:7d:c2:6f:d9:cb:90:b5:6c:d4:9f:
         57:17:d6:03:06:b3:c5:10:d9:fd:df:95:04:ed:23:06:0a:3e:
         c9:a0:ea:84:5c:2a:b1:e1:c3:c8:0e:58:67:6e:9e:98:11:37:
         d0:95:54:7c:d7:26:16:c6:80:3b:6f:92:25:f4:38:b4:52:d3:
         88:98:8b:e6:0a:77:19:88:ac:b1:c8:e3:3a:73:15:4a:15:72:
         3e:a8:d2:15:85:32:a8:eb:e7:84:ab:37:47:ef:2b:f0:ef:e4:
         80:d4:88:0e:1d:71:f4:3c:6c:ec:6e:67:6d:aa:cf:84:81:69:
         c9:0a:f3:f1:df:75:20:38:11:3b:9f:7c:23:9b:5c:fe:a5:d2:
         92:73:3b:37:1d:13:93:d1:d3:13:70:47:64:7b:a2:8a:b9:bc:
         ee:d5:38:22:6e:24:11:7c:77:f0:7a:1a:10:72:84:fc:5e:2e:
         25:34:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:49 2026 by rpki-client