Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          ZJmirUbmH1Edr85RE0L+Iee+Myjcc0P1W6/5fEdq0a8=
Subject key identifier:   C8:97:4B:98:6B:5D:30:44:C5:FC:C3:6C:EC:71:6D:94:58:87:F5:F9
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       019F905A16DE97284950B35D2AD77DD98F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          093F
Signing time:             Thu 23 Jul 2026 19:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:50 +0000
Files and hashes:         1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
                          2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: /Wh66rZwn7KlYiSQKAf228Af/+5c3YXKk9dnnlfDkLU=)
                          4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
                          5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:16:de:97:28:49:50:b3:5d:2a:d7:7d:d9:8f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Jul 23 19:00:50 2026 GMT
            Not After : Jul 24 19:00:50 2026 GMT
        Subject: CN=c8974b986b5d3044c5fcc36cec716d945887f5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:33:bf:f1:05:c0:04:a2:0a:c1:6f:1a:a6:
                    97:80:a7:01:8e:9e:fc:54:dd:ca:86:2d:cf:45:83:
                    20:ae:04:7a:e6:34:e0:c4:61:23:49:34:25:61:66:
                    01:44:3d:05:9f:29:76:d6:14:7e:e0:40:92:b6:61:
                    bf:68:c4:25:21:5e:06:e3:f0:e5:87:c7:d4:12:ca:
                    09:cc:85:78:69:d8:ff:64:ce:75:0e:72:b9:51:d3:
                    ef:83:16:9f:d4:cf:8b:78:1b:33:3d:41:b9:6e:83:
                    79:ee:e8:20:09:6d:a5:d9:a2:0e:25:a0:f6:91:71:
                    ab:ed:2e:76:15:fa:3e:89:98:36:c4:16:d6:19:d0:
                    6e:61:c1:fd:87:cc:d4:c6:a7:0b:5e:12:9b:40:3e:
                    56:e2:0a:13:29:b7:bb:0c:93:23:39:54:f7:32:51:
                    67:45:6f:a1:f3:a3:a0:07:f0:b7:72:bd:7e:dd:05:
                    68:a7:ee:e0:8a:93:25:85:9e:20:f1:25:e4:1d:ff:
                    ba:5f:8d:a2:f7:97:cd:d2:20:a2:66:9a:66:ba:9a:
                    02:8e:f2:de:fc:5a:a7:6f:82:35:f5:36:d6:f4:d2:
                    b7:61:7c:66:d7:01:44:74:f3:5e:96:77:cc:56:eb:
                    5b:6c:3a:46:38:f9:c2:a9:e7:0f:20:fd:ba:07:aa:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:97:4B:98:6B:5D:30:44:C5:FC:C3:6C:EC:71:6D:94:58:87:F5:F9
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:56:9d:f4:3b:4a:1d:1a:b6:22:60:71:92:c4:80:63:73:
         2d:89:6e:6d:b8:08:d3:ce:3c:94:e9:ac:b7:ad:45:a3:10:ab:
         c4:b0:95:11:d4:c2:fc:d4:32:0a:e2:bb:14:1b:4d:e4:11:1e:
         03:79:ed:3c:98:8b:8e:3c:c1:04:a8:4d:76:70:6c:d6:fc:04:
         13:52:c7:6c:b6:c9:dd:20:67:6c:2e:31:1d:3e:69:86:b2:23:
         3b:56:d7:e4:d9:bb:12:13:77:5c:78:79:b1:0b:6d:25:f9:36:
         ab:ca:2f:58:e8:23:05:4d:e3:0a:e1:7e:14:77:ac:92:8d:18:
         69:1d:6d:b9:ec:8b:65:89:38:bd:47:3a:3d:5d:0e:f2:ac:0d:
         10:74:c6:ff:6a:af:d1:f8:1f:17:de:cb:2b:6e:d9:e3:f0:ce:
         be:db:74:f8:1c:5c:e0:93:95:f9:dc:7b:d0:46:81:b8:8b:b4:
         f1:9e:9f:2f:f9:da:2b:8a:03:36:bb:1e:1f:4c:34:7f:6f:3e:
         71:6e:f9:0e:fc:52:a7:b6:71:e0:2f:1f:0d:f7:b8:60:89:7d:
         1a:12:c2:89:a2:45:ed:8b:a6:e2:ad:ee:d2:9d:14:19:78:34:
         4a:df:7b:02:dc:1c:02:a6:bc:eb:f6:a8:f6:bd:3f:93:ea:d6:
         4f:3b:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:42 2026 by rpki-client