Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
File:                     1XEqnWm0rsl4nBTLBStxObBuddo.mft (raw, json)
Hash identifier:          wIFEVUBbVm7vr/7Z5a5KUN0WCAXop9joCfeMEOqhDh0=
Subject key identifier:   C8:1F:9A:1D:E0:DC:82:4B:0C:51:15:40:FD:CF:53:DE:F7:33:74:66
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Certificate issuer:       /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial:       019F8F10D02D58A4FBACAC92A55A746351AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
Manifest number:          3D
Signing time:             Thu 23 Jul 2026 13:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:11 +0000
Files and hashes:         1: 1XEqnWm0rsl4nBTLBStxObBuddo.crl (hash: 36Gn8REA3nr2Km+YrnjXhL15oTskC73jZHFYOPZSEoU=)
                          2: xZ59-pNTc7ezOemP3gmY_8tZ3KA.roa (hash: +8eOBSGGw03CBaqRTg+4T+O7Q/El7GL/vSuip22cJd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:d0:2d:58:a4:fb:ac:ac:92:a5:5a:74:63:51:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
        Validity
            Not Before: Jul 23 13:01:11 2026 GMT
            Not After : Jul 24 13:01:11 2026 GMT
        Subject: CN=c81f9a1de0dc824b0c511540fdcf53def7337466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:8a:26:13:d5:10:39:01:b4:99:2a:d8:8e:
                    01:13:b2:98:85:fd:f9:4d:d7:61:95:eb:5c:ec:52:
                    42:f7:c3:9c:7d:ba:e9:87:a6:12:f6:77:f5:a0:38:
                    9b:3c:5e:82:d7:a1:a8:e0:7d:00:70:f2:84:71:48:
                    9f:42:bb:8b:df:c1:3b:c2:00:15:fb:bb:dd:3e:17:
                    67:f5:53:49:44:39:18:f4:d9:d0:94:bf:b8:c7:82:
                    2e:0d:75:35:93:89:e2:90:0d:1e:49:f7:6f:0d:b1:
                    68:4e:4d:71:60:9e:dd:1e:db:6a:6e:74:b8:c9:d5:
                    b8:ca:54:5f:98:d1:33:70:14:82:a4:40:1c:5d:ea:
                    0e:bb:6c:2c:cd:1c:43:e2:aa:45:d7:c5:f9:6c:e0:
                    32:1b:9e:d7:0b:b1:b5:88:a7:01:38:6b:bb:d0:6d:
                    95:0a:85:99:fa:32:4d:52:98:8e:27:12:b0:b4:b3:
                    1a:90:b7:1b:bd:51:3a:40:3b:77:a1:d6:96:75:e0:
                    ac:a1:45:d6:8f:a2:2f:82:c8:88:8d:ef:f5:64:97:
                    dd:8a:57:b0:3d:e4:78:64:89:a8:e2:95:25:f2:84:
                    ba:7f:a8:17:c0:82:79:a1:2d:56:a3:4a:44:14:14:
                    fc:d7:26:59:2e:8c:86:7f:1e:71:8a:62:b1:36:49:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1F:9A:1D:E0:DC:82:4B:0C:51:15:40:FD:CF:53:DE:F7:33:74:66
            X509v3 Authority Key Identifier:
                keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:46:77:03:17:ff:87:34:aa:1d:66:a4:35:2c:2e:2f:be:2a:
         be:2c:ee:5b:60:d0:15:67:c6:4a:74:10:80:cf:94:91:2f:a4:
         1d:ed:f3:ad:a9:77:cf:e0:a4:ed:fd:51:6f:4a:16:db:3e:8a:
         9c:9b:59:a6:d6:19:83:4a:ed:fb:0b:fd:fb:28:bb:85:17:81:
         3e:d9:5a:d8:53:87:17:5f:f9:d8:72:a4:c1:bc:9d:89:14:88:
         59:0a:03:61:90:2b:b3:16:ff:ad:15:2d:2f:25:77:b8:0d:bc:
         0d:ec:1c:f3:75:9c:3c:ee:31:09:03:42:28:df:f1:f2:4e:a3:
         cb:56:6d:2a:37:fc:45:ff:05:e3:b9:2c:45:ba:78:81:07:a8:
         2d:91:73:9c:ed:e8:81:af:8b:28:51:2d:48:d1:95:55:bb:96:
         2b:0a:f4:24:9f:69:94:52:07:9c:6f:14:35:73:66:1c:58:1d:
         01:33:25:2b:5f:f3:93:a1:67:75:08:f1:6b:93:f0:3c:68:bd:
         e3:98:b9:0a:6c:a5:a4:aa:9b:dd:d8:88:cb:14:e7:97:da:0b:
         01:b8:53:4e:11:d9:60:dd:19:61:1f:a3:36:79:bf:3a:b1:93:
         9c:36:1d:f5:08:5f:30:f2:75:ad:96:e1:bb:f1:66:90:a4:60:
         6e:fc:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:57 2026 by rpki-client