Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File:                     xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier:          U+AKSBfxym5XrLlNPP1vJ2mw9ocBoagPZkIqhIOzBuw=
Subject key identifier:   E0:59:A1:29:05:E6:7F:B0:58:A2:E7:4C:FA:D1:5D:D8:07:61:4E:FF
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer:       /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial:       019F92EDE3F95C5A43AB2BFF7353A31E4987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number:          1814
Signing time:             Fri 24 Jul 2026 07:01:31 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:31 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:31 +0000
Files and hashes:         1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
                          2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: M/cfFFdwE8KwrTGy7cUqtcV54h4nQ7BQ2hCaqs20ze4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:e3:f9:5c:5a:43:ab:2b:ff:73:53:a3:1e:49:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
        Validity
            Not Before: Jul 24 07:01:31 2026 GMT
            Not After : Jul 25 07:01:31 2026 GMT
        Subject: CN=e059a12905e67fb058a2e74cfad15dd807614eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f0:46:fe:5e:0d:a4:39:a8:34:66:16:af:99:
                    bb:d4:18:49:05:64:f3:59:4b:19:ca:b7:b9:f5:a5:
                    76:da:25:c6:c4:46:e9:b8:83:9f:e0:0f:23:49:3f:
                    24:82:cf:ab:b7:8e:b1:aa:0b:b7:44:a0:ef:22:2d:
                    37:e2:ac:5a:5c:91:31:46:63:df:dc:0c:05:47:ea:
                    1e:7f:e3:43:b7:78:e1:f3:ab:7c:3b:11:15:8f:a4:
                    17:10:6e:ef:7c:f4:de:ec:d3:f2:0b:ec:17:0c:37:
                    28:07:1f:40:11:38:01:ed:35:5f:ed:2c:a0:22:1f:
                    f4:44:9b:89:ff:64:0f:73:42:f3:af:48:e9:28:a8:
                    6d:7e:0b:78:f4:38:4a:12:8f:96:fb:ee:9f:3f:6d:
                    9d:ee:2c:ed:75:95:4f:1f:b0:af:b4:96:f8:93:d0:
                    0d:fb:31:f5:d4:af:29:65:41:80:30:7b:2e:60:53:
                    c6:9b:c0:4d:ef:9c:de:81:54:5a:c4:64:75:8a:01:
                    3f:d1:e7:e2:c1:04:91:00:4c:89:99:ec:a3:05:8e:
                    2b:0c:4c:2f:3f:96:92:21:35:c9:6f:e3:6f:4c:c6:
                    2f:da:5e:92:36:a9:45:32:e5:d9:4e:a9:af:4e:d7:
                    f5:15:c3:43:70:72:59:63:ef:07:ca:55:2c:96:82:
                    fd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:A1:29:05:E6:7F:B0:58:A2:E7:4C:FA:D1:5D:D8:07:61:4E:FF
            X509v3 Authority Key Identifier:
                keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ed:90:82:ed:8a:78:2a:48:7c:78:ac:19:57:b5:36:c7:39:
         aa:de:c9:cf:a1:59:08:03:ea:0d:13:8a:60:ca:fe:e7:7d:b2:
         3e:66:04:24:a9:77:e6:3f:42:f9:67:ca:d9:bb:c8:d9:30:43:
         98:08:95:7c:82:67:6d:f5:f5:bb:de:3c:48:b4:92:d4:d1:09:
         48:30:d3:71:37:b8:08:5a:61:40:96:4b:d1:91:75:ae:4f:8c:
         7a:7a:2d:e7:20:96:07:f2:0f:5f:c9:17:63:a4:0e:0d:5c:7d:
         ce:27:96:ce:c8:e8:22:93:f2:54:6e:ec:91:f1:6f:e7:7d:d5:
         41:7a:02:04:f4:f5:df:b7:fa:75:c0:99:f5:bd:9f:ce:2d:b5:
         87:ef:41:06:1d:4b:ca:41:d3:bb:d1:78:4f:1b:96:db:05:8f:
         ce:0c:7d:f0:84:b1:4d:28:d3:04:ec:2a:00:f2:90:47:aa:8b:
         55:0e:e4:f6:5a:53:5c:0f:98:86:0a:1c:45:80:09:3d:e1:c2:
         1a:f6:d7:39:4b:c8:bc:71:c4:a7:ec:e5:08:db:bb:e1:36:40:
         a9:25:a7:a6:cc:59:91:77:6c:88:fc:66:04:bd:32:f5:e6:49:
         91:84:2a:71:e2:b1:a4:0b:e0:84:42:38:9d:3c:a0:a3:04:fd:
         31:19:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:28 2026 by rpki-client