Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File:                     XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier:          dQPhfXrcOmKrFTcGEKQgBvXdcdKp5CrwOfJI/rD4gGM=
Subject key identifier:   10:4D:CA:EF:40:7A:17:1F:C0:7E:B1:38:DA:51:9F:53:D2:AC:48:48
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer:       /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial:       019F9436B82548317597115E2F623F1B78BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number:          07F8
Signing time:             Fri 24 Jul 2026 13:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:41 +0000
Files and hashes:         1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
                          2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: PTPWcAsZdC2BsKCHWAthOa3FZ9sVZpvaEHy36zg+R7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:b8:25:48:31:75:97:11:5e:2f:62:3f:1b:78:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
        Validity
            Not Before: Jul 24 13:00:41 2026 GMT
            Not After : Jul 25 13:00:41 2026 GMT
        Subject: CN=104dcaef407a171fc07eb138da519f53d2ac4848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f5:7d:c1:d6:18:e9:6f:3e:8b:54:6d:76:5e:
                    24:09:6b:49:87:1b:f0:fd:58:08:53:35:a3:ce:dd:
                    eb:ff:e0:50:c8:4a:dc:0f:98:25:34:23:a6:8b:38:
                    9e:35:8b:eb:0c:ca:ca:13:42:73:86:25:72:03:4e:
                    d4:f2:3a:60:f9:2b:cc:9c:4a:df:4a:a9:bc:ef:2f:
                    a7:85:fa:85:53:be:53:01:99:61:d4:74:10:d8:9f:
                    50:c1:31:82:f0:29:95:db:9d:30:25:90:53:f0:eb:
                    7e:d3:9f:15:de:c8:4e:c2:cb:ea:01:d4:73:2e:ce:
                    c5:46:66:b0:ba:28:64:b0:f1:e7:d6:70:e3:69:b8:
                    09:d8:75:bf:53:58:d4:6c:53:ae:f4:f4:c9:b9:e9:
                    45:81:50:14:d5:4c:a0:85:3b:bf:a7:92:7f:8f:6b:
                    ee:9a:6a:6c:5a:db:21:ab:10:ce:b9:63:04:87:35:
                    ab:ad:e5:92:c1:4f:fd:78:84:41:81:37:04:40:0f:
                    85:5a:28:45:a4:77:82:2f:f1:79:50:1e:91:60:28:
                    16:71:09:f3:0b:1e:1b:f1:33:6f:e5:96:63:60:97:
                    5a:7c:d9:ce:70:63:59:ea:34:3e:17:e0:1b:2d:a5:
                    dd:83:c8:dd:e4:b9:f2:52:e7:3c:ba:a6:1a:f4:22:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4D:CA:EF:40:7A:17:1F:C0:7E:B1:38:DA:51:9F:53:D2:AC:48:48
            X509v3 Authority Key Identifier:
                keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:e6:e7:a8:ea:c5:0b:98:38:02:d3:c2:26:a1:bf:fd:14:
         8f:9a:25:d7:ca:06:bb:94:7f:f5:86:88:a9:f3:a5:85:6f:f7:
         20:6a:fd:8a:93:34:29:a9:95:39:ae:af:ec:9a:d4:97:9f:85:
         31:95:bd:34:40:f5:4e:4b:6c:fd:d5:a6:10:be:5e:da:1b:e9:
         8a:df:44:6d:6b:7e:56:4d:f8:4b:f7:da:8e:21:d2:91:41:0d:
         30:f6:6c:c8:4d:43:8e:9e:3f:d4:47:f3:11:b6:c4:98:33:64:
         1d:46:d8:be:c4:e1:0d:d3:57:f1:a9:26:a5:a8:d1:e7:b6:52:
         f1:8e:26:f4:d9:86:06:c3:76:1a:9c:50:65:6d:65:6a:28:82:
         e3:b6:61:fb:7e:70:75:25:b7:5b:56:6e:2c:bc:1a:da:c5:45:
         80:60:e1:00:6d:68:b6:e6:e2:e6:c4:5b:ef:0d:ae:bc:73:ec:
         fa:83:5d:ea:bb:64:22:72:ce:4d:fd:99:ed:d5:72:bc:f4:1a:
         0b:e9:3a:13:cf:1e:51:e4:d1:50:45:23:54:44:d9:65:19:ca:
         df:ee:6c:48:61:5c:a1:0b:80:77:4a:03:9b:6f:fc:1e:33:42:
         83:94:99:4b:b3:a3:ba:8f:fb:13:16:85:51:f7:54:52:85:f1:
         a8:1f:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:02 2026 by rpki-client