Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
File:                     XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json)
Hash identifier:          RkEV0PI00iZG1unwlscykIiwB0Fk9wmNz6nNqRn5sg4=
Subject key identifier:   BC:FC:F2:03:79:98:14:12:38:41:77:AC:00:7B:39:11:C3:DA:E4:F9
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Certificate issuer:       /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial:       019F924857D8B985BF8EC94C56412311A303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
Manifest number:          0F82
Signing time:             Fri 24 Jul 2026 04:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:42 +0000
Files and hashes:         1: JjBO1amjFaXKhp_BY_wamVGillY.roa (hash: EPoONpabQiLm+XMuLyPiJhdjDRYBEoJAyi19e3SuWu8=)
                          2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: e/bApazp9nSBqF/o+ChsikkxqN3uaKfYIEyFfc40hEU=)
                          3: lskIdwRbHzMZEWLGTNl2U0zpcVc.roa (hash: KELAneudQMw0Lv1CUTTdAguNyi2AXca3YtUqnwbLd4U=)
                          4: s1w-A0JQ7-GP22Qs9TMP-YC29-g.roa (hash: UbNWOkKqq7RPWPwsnO7EB9cjjZaqtck3tiM3zDy2/V8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:57:d8:b9:85:bf:8e:c9:4c:56:41:23:11:a3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
        Validity
            Not Before: Jul 24 04:00:42 2026 GMT
            Not After : Jul 25 04:00:42 2026 GMT
        Subject: CN=bcfcf20379981412384177ac007b3911c3dae4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:df:d1:2c:20:02:4c:84:05:2e:c4:ff:35:
                    fe:bb:c5:dc:eb:d2:e6:f5:55:9f:bc:b4:b9:86:3c:
                    73:4b:a3:d8:7a:f7:ae:6b:24:40:aa:79:36:bb:ef:
                    c8:7a:c2:78:97:12:f9:dd:78:46:66:76:67:64:27:
                    2e:91:15:db:51:10:80:7b:f0:a0:a8:28:42:a3:04:
                    c0:67:b6:7f:ea:15:ee:12:ed:1c:b7:fd:f2:4a:8a:
                    ed:9a:85:b8:d0:03:04:65:7a:18:81:1a:03:32:ed:
                    dc:6e:ac:4d:a8:ff:3b:7b:9c:6d:9e:2b:c0:d1:a6:
                    f4:99:75:a8:e8:1b:3b:3b:30:59:9f:52:64:ab:a6:
                    ca:cb:e7:c9:9a:f4:75:9e:4f:0b:a8:4e:21:d7:71:
                    78:59:78:bd:20:b8:6a:43:17:b6:8a:14:17:a2:46:
                    c5:5a:06:7f:96:fb:38:3a:5a:0a:74:6a:2b:10:7e:
                    1d:32:46:ca:ff:97:dd:ab:de:33:95:e7:a2:64:3c:
                    17:e8:a3:87:3d:ef:e0:4b:74:84:74:b0:ce:62:38:
                    57:0e:47:23:eb:26:6b:09:7e:66:52:2e:ce:5a:43:
                    bd:64:3f:37:52:73:b6:e0:bb:a0:9c:1e:8a:5d:50:
                    f3:d2:9e:3c:7d:f4:fc:d8:4f:20:f7:90:3c:bd:c7:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FC:F2:03:79:98:14:12:38:41:77:AC:00:7B:39:11:C3:DA:E4:F9
            X509v3 Authority Key Identifier:
                keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:72:85:2a:8a:b8:12:00:68:8a:22:3f:ee:e9:a7:4e:80:f8:
         0c:18:e9:43:33:df:ae:f6:63:e7:cb:54:66:e4:bd:3e:c6:de:
         03:16:79:1c:3d:21:1f:cc:ff:f7:4b:90:0e:f5:c7:02:54:1b:
         44:5f:f9:57:26:b5:96:13:70:e6:24:37:c3:22:81:fe:e9:76:
         e3:65:4e:96:a4:e4:fb:3e:8a:69:4f:cc:ae:55:00:e7:85:c5:
         91:a9:b9:21:06:19:bf:66:7b:cd:72:88:55:75:1d:31:ef:7b:
         f1:b2:eb:82:37:ee:10:59:20:00:74:47:d9:3d:a5:c0:ea:99:
         05:a9:7e:00:2b:e7:9e:99:9e:f6:3f:a7:5a:8c:2f:1c:12:0c:
         51:44:db:9c:d2:13:e7:b8:b6:76:24:f7:3a:18:6f:ff:23:f6:
         bc:40:ea:6a:8a:1e:3a:d0:19:11:68:26:15:55:a1:8d:fd:a0:
         b7:28:8c:6b:9d:c2:d2:7d:b1:16:c7:8f:b1:13:ce:69:b3:86:
         27:6a:9b:d1:4c:80:f1:39:1c:d6:cf:8b:c4:41:6d:d9:f8:24:
         2f:fd:7e:70:a4:2d:2f:ca:ec:e0:ae:8b:4a:fa:89:30:01:b1:
         19:7f:37:6d:3e:70:92:31:56:a6:38:f1:16:f4:83:4e:69:70:
         ae:e6:a7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:03 2026 by rpki-client