Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File:                     XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier:          y6T0Y0EJFkG9HtB6AMaqKKrySzujjbBYOUtmIlXKz8I=
Subject key identifier:   1C:74:24:4C:5F:93:9B:86:BB:3F:8C:00:2D:53:A3:CD:3E:D0:9F:B1
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer:       /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial:       019F8FEC0715975DC94D7C26BEF0541C9F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 17:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:37 +0000
Files and hashes:         1: OS8EDWL74n3CtFxmTxNOolYhsvA.roa (hash: yF17P4v/AdaI5VNNKOl9FtUJuOAbQSvTKgj5Ha/kk7s=)
                          2: RrlPj_5PMLmauOZbV-XxFE0jClU.roa (hash: +JGjuqCo+HgEGZGs0mkuqnIL4NPJWqKMaUK/A5KXgqw=)
                          3: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: 7wYOtr1sZlFmu2NP8dp69oqXcOApYSojXa0VfBRmIEM=)
                          4: dL_9twvmgLzMs895oA64iiDmIEY.roa (hash: LgJcVms5Pq7JFZ8+OO+s5X+XVI8uKF8XIm98bwsR7Lk=)
                          5: dqfLmPoWYDgnN63zfumMSmq4Qs4.asa (hash: VP2elBPNAsWST4m//JgRDzv1id8AdOzpooWBKdSTZ3M=)
                          6: m_016GliLd1us5Dyp3gWd_9XmZU.roa (hash: NGfX/rkS6vQZZNfEtGY8uwL12Vk9X/AaXVk/NGit2hQ=)
                          7: wEd_ihwz_Sc9Z7253Egu-wb4rYs.roa (hash: JaUYZqefug6H01TWJts1HEcFIA5lKpx4F7+av5F+33Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:07:15:97:5d:c9:4d:7c:26:be:f0:54:1c:9f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
        Validity
            Not Before: Jul 23 17:00:37 2026 GMT
            Not After : Jul 24 17:00:37 2026 GMT
        Subject: CN=1c74244c5f939b86bb3f8c002d53a3cd3ed09fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:f9:59:be:5e:ab:8b:1e:a2:ac:e6:f8:6e:
                    24:9b:33:a3:47:c5:ed:d8:dc:5d:78:81:c1:b9:92:
                    56:bb:3b:7e:78:a3:57:70:81:4a:fb:b8:c9:bc:4f:
                    a7:b1:fa:f8:06:1c:5e:b7:85:27:f3:66:41:67:d8:
                    5e:e0:dc:c7:ee:03:16:d1:45:56:14:2c:e6:19:28:
                    02:52:62:ce:09:62:02:3c:08:d4:e0:ba:46:42:fd:
                    3b:f5:3e:90:02:c6:30:f3:1f:5e:bd:62:3c:a7:d1:
                    55:0d:fe:e9:f4:c6:be:32:e3:72:9e:2b:ad:0f:ac:
                    7e:ba:11:98:18:00:eb:83:15:77:8b:a9:a5:49:31:
                    74:0d:c2:42:ec:b6:3b:7c:ce:d0:87:16:f2:3a:e7:
                    7b:18:74:65:8f:55:31:b5:fb:7e:a6:fc:e6:60:86:
                    19:00:d1:6c:86:fc:df:a4:85:21:89:87:31:8c:ac:
                    be:25:1c:8d:7e:3a:7b:a9:64:96:7b:d4:c5:71:ef:
                    06:0d:00:11:e1:ac:a0:79:fd:12:bd:28:da:95:ce:
                    88:8f:91:e3:63:2c:95:db:8d:29:d9:a4:79:ff:dc:
                    db:5d:79:60:b9:ee:37:2b:e3:6d:3a:db:45:be:39:
                    9d:c8:6b:72:fa:df:04:7c:28:87:90:fa:08:19:f3:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:74:24:4C:5F:93:9B:86:BB:3F:8C:00:2D:53:A3:CD:3E:D0:9F:B1
            X509v3 Authority Key Identifier:
                keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:42:83:a5:df:a1:11:68:76:fc:3a:6c:28:65:6a:61:1b:4d:
         db:15:51:b5:d0:d7:16:3b:4c:86:95:44:37:64:14:0b:3a:e1:
         9f:34:71:a0:73:47:90:c8:fd:58:39:bd:fc:6d:c4:0c:60:8e:
         ad:81:69:9b:cf:77:0a:ba:de:85:71:2f:8d:99:86:60:d4:bf:
         3c:a4:dc:dd:6e:1d:c5:ad:33:8d:46:59:66:d5:d8:03:ba:39:
         b1:7e:5f:a5:68:51:97:d0:15:f3:0d:ea:4a:95:b8:4e:63:94:
         d4:e6:33:9b:f2:96:0f:3f:1a:ff:08:d5:36:48:cf:1d:42:ae:
         13:a9:5e:53:18:fc:18:8e:c0:9c:9c:32:4f:78:a1:b9:c3:e2:
         15:25:4d:4e:48:98:ab:8e:83:41:46:c4:e6:34:eb:e0:46:c2:
         ae:52:08:b7:a9:ff:6b:84:d1:12:96:2f:8b:e4:d2:04:d9:57:
         bf:b3:63:c3:45:02:45:88:81:14:80:85:43:56:17:5d:66:51:
         fc:5d:96:ee:5a:23:62:b6:eb:31:db:84:46:17:7e:44:18:fb:
         06:24:a3:71:82:71:a9:74:88:91:c3:a4:80:5c:a9:47:f3:10:
         8e:d7:69:a4:cf:9c:0b:71:4c:83:56:3b:62:cc:6a:0e:47:78:
         17:63:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:47 2026 by rpki-client