Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File:                     xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier:          5jhIWI86l1BdBBeef8p/+iYouUNVfd0UpDnnvjYQs1o=
Subject key identifier:   C3:9C:5C:EF:D4:C4:9C:0F:40:90:91:7B:FA:1D:70:A6:FB:4C:1B:9A
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer:       /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial:       019F92B6B7A87E198904B55C5AD64C94F08D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number:          19D6
Signing time:             Fri 24 Jul 2026 06:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:15 +0000
Files and hashes:         1: JU90aQ8JffWPKUNs4WRBmjC5fmg.roa (hash: RTDjP0CmxRz9mg1HQcbaHVAmbmYErR/CAHIxD2kjR7M=)
                          2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: Er5TqOCDAQ7/xd2iS85RVTqr9o6elql4N/bVmeN2Rpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:b7:a8:7e:19:89:04:b5:5c:5a:d6:4c:94:f0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
        Validity
            Not Before: Jul 24 06:01:15 2026 GMT
            Not After : Jul 25 06:01:15 2026 GMT
        Subject: CN=c39c5cefd4c49c0f4090917bfa1d70a6fb4c1b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:94:59:c9:c5:68:cb:74:60:41:90:0d:f2:
                    e3:ff:2a:77:85:4b:6e:e2:1e:9e:bb:da:0e:c9:63:
                    1e:a1:5f:20:80:22:f2:0f:7c:db:eb:98:56:24:b9:
                    07:b6:0f:dc:79:46:d1:01:03:47:5f:99:8a:60:76:
                    9d:21:cb:6f:1e:95:bd:6d:75:69:a3:b1:fe:68:87:
                    fd:3e:53:bd:f3:c0:4f:e6:59:8a:0a:f0:60:91:bf:
                    94:98:3d:74:68:01:65:f0:de:da:8e:36:f8:43:25:
                    4a:4c:88:bf:e1:a6:a5:dd:ec:1a:aa:19:05:54:b0:
                    33:2e:f4:7e:c8:71:53:f6:36:a8:d7:10:dc:5a:a4:
                    f2:e9:bd:7c:46:99:95:6f:86:ef:53:7a:f0:61:7c:
                    44:d1:0c:0a:15:39:37:d1:36:65:dd:af:23:29:64:
                    84:12:86:5d:b9:42:42:47:6a:e0:f6:c3:23:95:c0:
                    c0:b3:1c:fc:ed:9b:26:e0:7f:6e:a0:b2:5d:05:60:
                    3c:f4:01:84:c2:b2:32:f0:5f:78:90:e3:de:04:4e:
                    ce:a2:6a:8e:cc:c3:06:b8:1d:42:0d:91:93:c7:b9:
                    b8:39:93:97:57:ef:52:24:e3:f2:2d:6a:c7:a7:5d:
                    ed:3e:d1:44:12:af:10:49:d1:a2:e3:4c:d6:95:19:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9C:5C:EF:D4:C4:9C:0F:40:90:91:7B:FA:1D:70:A6:FB:4C:1B:9A
            X509v3 Authority Key Identifier:
                keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:f7:86:65:74:2d:0a:93:0a:21:70:a3:be:07:60:32:b1:
         5d:db:e0:3d:0b:55:8e:ae:9a:eb:27:71:92:9d:de:f0:9d:3d:
         b2:5d:2d:b7:d3:14:49:94:c5:6d:49:12:4a:a5:ad:5f:a8:c2:
         1d:82:67:7d:5f:5e:c5:e4:bc:1c:aa:fc:92:7d:7c:a3:32:aa:
         ce:0d:90:33:62:ca:0f:6f:21:81:80:a8:0d:72:24:d2:4f:dd:
         e7:1c:51:49:3e:71:60:3e:d0:42:70:30:ea:a7:94:5c:1b:a4:
         91:4f:94:d2:7f:ee:a6:2b:83:22:12:90:a6:c8:c1:d1:2b:75:
         84:2b:61:d2:f1:3d:ac:fb:73:65:3b:03:56:97:76:53:c9:5a:
         8f:e6:4d:40:47:fe:83:be:6d:19:50:98:d1:a2:cc:17:e3:c7:
         dd:22:63:c9:92:41:8f:64:5b:e5:03:23:98:f1:fd:08:37:c1:
         49:79:9c:1d:8d:f4:36:1b:fd:de:ad:dc:77:48:2c:87:ca:c9:
         05:05:9d:5b:ea:51:94:d7:cd:d2:15:98:7e:78:84:a0:c6:27:
         8d:08:eb:f7:1b:de:15:2f:ce:4d:1e:1f:d4:53:d3:70:cc:8f:
         02:63:33:2b:c6:fa:fd:2a:0a:f6:be:e1:bb:e7:64:20:4a:20:
         82:76:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:05 2026 by rpki-client