Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          CYY+gwcsEHlclUWeCWi8iig2pwMWZbEMtqf/EfKAqFA=
Subject key identifier:   77:55:08:FE:4C:97:3B:2D:93:2D:5B:E6:DB:E9:D9:F3:82:13:1C:0B
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019F91DAE28B6EA706EA700F00DC6132560A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          0636
Signing time:             Fri 24 Jul 2026 02:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:08 +0000
Files and hashes:         1: 13lETM7dYwgkukJoWApUFl8dJuI.roa (hash: cZO0/GICe69R1nGUBraIiKZbW7afS/3775vhW3rYR+4=)
                          2: EMqpNBcCNtehXNjtWHmz4Qx27pk.roa (hash: 8njOTJ/2VGv+q8vvCxeqjLAb7iHXNWrxTs90DA1iMqI=)
                          3: Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa (hash: wkeGlAvS62MwRHYU8Z+cHP5CIoQV+KvyovxR/4O84h0=)
                          4: dYPKia158SIrrNF4l9j5f3SItUA.roa (hash: /mvbSwmPXlWJfBXD/fmkRZb24RyV5+E4SIG3bbAtRas=)
                          5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: iVrpLvnK9HOSKAyVT8A6MnmlooTjYl9B7kFAXlqL9Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:e2:8b:6e:a7:06:ea:70:0f:00:dc:61:32:56:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Jul 24 02:01:08 2026 GMT
            Not After : Jul 25 02:01:08 2026 GMT
        Subject: CN=775508fe4c973b2d932d5be6dbe9d9f382131c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:3f:87:21:9a:ad:e2:79:15:10:81:01:38:
                    6f:e3:19:ec:a0:9b:56:9c:c7:25:7c:e4:f1:ae:d9:
                    4b:35:39:38:c5:d9:ae:96:ad:05:27:ee:b6:85:65:
                    36:92:bb:ca:fc:84:02:18:c8:2e:31:66:d9:61:55:
                    4d:d4:a6:9f:ce:e1:11:a9:f0:4e:ee:33:aa:80:ab:
                    6e:4f:4b:6b:2c:38:7a:85:47:bd:b0:35:69:18:a8:
                    06:15:39:b2:a2:5a:13:d9:2a:6e:0c:bf:e6:bf:f1:
                    93:88:8f:70:e8:58:be:36:6e:7c:88:a1:c1:87:e6:
                    50:b2:a4:6e:69:f8:d1:a5:17:71:c3:8b:5c:c0:25:
                    79:a5:00:4a:2e:1f:10:21:80:1e:3d:f5:81:e5:0c:
                    7a:82:71:17:cd:a8:08:c1:b3:09:fb:c6:83:f6:9d:
                    c1:69:82:b7:3c:e4:29:1a:12:9b:31:87:6a:32:f9:
                    80:55:a6:e6:3a:24:ec:ce:fc:86:52:d8:7f:3b:40:
                    51:e4:fd:74:af:57:f4:28:2e:b2:1e:2e:b4:fc:5f:
                    0a:1a:d6:a2:7f:57:ad:b8:79:ba:bf:82:37:3c:f7:
                    f2:fc:b7:81:8a:cb:d9:2a:6e:5c:96:72:6c:3e:9f:
                    d4:23:41:e0:4e:d2:c6:20:5e:53:08:7d:54:95:0b:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:55:08:FE:4C:97:3B:2D:93:2D:5B:E6:DB:E9:D9:F3:82:13:1C:0B
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:bc:68:8e:88:bb:02:9d:18:45:4b:d0:ab:d3:55:6f:a9:23:
         07:bc:c0:4e:7b:4b:f7:c0:57:16:d8:03:09:d9:ce:3f:ec:ca:
         1a:b6:78:46:ba:c9:c6:31:e7:bf:d3:cc:1e:a2:a3:de:40:c8:
         82:87:1e:8a:8c:5b:43:e5:81:43:15:47:50:fb:78:89:fa:d7:
         fd:33:f0:56:bc:84:95:b2:2a:8c:07:22:b1:4c:ee:87:f2:2a:
         ac:91:74:f7:2a:58:d0:65:7d:ed:7b:58:83:31:9f:4e:40:10:
         5f:d6:e0:ab:00:fd:f9:e3:45:65:c6:8d:cd:f0:cc:f5:51:97:
         84:6e:d2:47:35:69:f7:1d:7c:11:ce:14:52:cd:44:fd:bc:eb:
         61:04:13:4b:b2:0b:88:b1:28:f9:da:14:f1:49:73:ec:c6:25:
         20:8f:98:45:cc:91:94:7d:94:16:5a:2d:d0:03:29:d7:b1:3b:
         91:bc:15:6d:37:37:f6:12:be:35:5b:2e:09:ca:6c:61:a9:d9:
         c7:08:35:69:3c:ff:11:bc:12:0c:00:30:11:b6:25:b9:71:6b:
         e2:4c:64:23:26:6d:3c:d4:7d:82:54:50:6c:d5:97:1f:7c:de:
         d0:e1:94:53:57:38:ee:3d:6b:7e:58:70:a8:2a:bc:fa:52:d7:
         6b:c7:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:51 2026 by rpki-client