Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          kt6hpXub+1z2POf338YYEHAjavO0W+KKoSEg/v1Xf9w=
Subject key identifier:   DC:8F:80:78:59:E9:4B:27:DF:87:4B:62:3E:67:95:55:E3:24:56:C2
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019F927FCB6680E54CC90CA0D1C4BA73C40F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          0A7B
Signing time:             Fri 24 Jul 2026 05:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:16 +0000
Files and hashes:         1: 4YRS6EEeuTI9ZfzO53iKNIfSN4s.roa (hash: Tv3HULU0Zra1BolAPc2Q/gu/Km7IonOCAUA8ZpZ63Jo=)
                          2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=)
                          3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=)
                          4: kt9wkvMfUjDBISQAMhIZ_H3acrA.roa (hash: 2eym/C1FIDZNxIwzhAk1LB/uLTJl3u4Wtgxo8cZEAdo=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: CMp9SgcWgx0EDwKmszQd5tuOG05dt3ldeE0AJ/4OByI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:cb:66:80:e5:4c:c9:0c:a0:d1:c4:ba:73:c4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Jul 24 05:01:16 2026 GMT
            Not After : Jul 25 05:01:16 2026 GMT
        Subject: CN=dc8f807859e94b27df874b623e679555e32456c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:28:f3:62:d3:27:0f:20:21:f8:60:43:5f:
                    d3:1b:27:94:e4:64:95:0e:2c:8f:a0:d8:2d:b9:79:
                    ee:d8:da:c5:5a:42:41:61:e5:83:8e:f7:93:46:0d:
                    d6:39:90:34:18:07:84:08:22:ae:18:57:bf:ee:53:
                    09:24:a8:b9:77:7c:b2:2e:93:60:0f:bc:a5:35:2f:
                    b7:e0:76:da:f0:2a:4e:70:27:a1:4e:aa:2a:6b:7d:
                    44:1a:0c:67:be:40:27:26:f0:1e:1f:b5:8d:9d:d1:
                    eb:b2:95:2a:36:a0:3d:6b:8b:0c:eb:7e:d5:37:0b:
                    ca:1e:2e:41:e5:2a:09:f4:af:04:88:13:e1:2c:9f:
                    e2:ee:be:2d:33:78:35:8a:8c:7e:45:02:b8:60:1a:
                    62:ef:f1:3d:8c:9d:a9:28:fc:9a:ae:9b:f4:dd:a8:
                    4e:57:e3:a4:05:3f:59:54:1b:eb:77:a5:f2:66:81:
                    01:08:41:d7:39:d9:fd:32:6b:0e:49:6e:1f:27:6a:
                    ff:2c:a5:bd:69:ef:55:ea:85:7a:0c:9b:1b:df:08:
                    7e:1a:56:b8:55:af:d7:41:95:7f:a3:d7:d9:76:5c:
                    03:69:ef:f6:de:9b:fc:ce:3a:c9:7b:df:42:ec:53:
                    cc:ec:a6:f2:8d:91:db:c9:9c:9e:17:ef:32:4f:90:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8F:80:78:59:E9:4B:27:DF:87:4B:62:3E:67:95:55:E3:24:56:C2
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:19:91:93:f8:28:ca:fd:b3:97:24:d1:bb:50:df:7b:ac:c8:
         2b:75:59:ac:25:92:12:8b:21:ee:2c:6b:12:8a:5d:f5:4a:bf:
         d4:04:a7:24:08:9e:0a:7a:43:93:e1:0d:33:4d:bd:fb:54:57:
         b5:60:0c:66:45:16:57:03:8b:38:4e:9c:9b:5a:69:75:2c:ac:
         b5:68:5f:78:67:81:b0:61:8d:fd:b9:13:00:47:83:4b:4c:22:
         b7:90:d8:de:59:c9:50:99:72:b1:da:86:c9:6a:41:0a:54:ce:
         83:2e:49:45:e4:92:da:8d:40:f7:3d:01:fd:20:30:96:8c:ff:
         7a:c8:0e:cd:11:87:da:8e:aa:ed:b6:4f:87:15:47:07:ac:e9:
         f7:8e:2b:05:47:70:e6:73:6f:54:67:72:8b:72:59:8d:fd:65:
         69:80:77:45:11:e7:8d:63:3a:80:e0:98:ac:4b:34:68:de:88:
         41:2c:66:e4:7d:5c:d5:a3:48:e9:17:46:76:a8:b7:be:23:29:
         eb:5f:0f:b3:db:4e:b3:c6:36:ee:19:96:3c:9e:77:e6:46:94:
         48:3b:40:f0:1f:e7:bf:78:ea:da:f5:1f:58:ad:a1:29:76:95:
         c5:67:00:7a:2e:5e:d4:b7:8c:19:c4:7a:9e:bb:10:1f:65:d1:
         89:52:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:38 2026 by rpki-client