Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
File:                     Rl73vS6z3NurBJCDgNSKjy_rxiw.mft (raw, json)
Hash identifier:          zE7jW2o0+Qa25hNyXUtarEuMr591XTUaRrKRlujG8eA=
Subject key identifier:   20:C0:4D:5D:C6:D7:64:17:D5:C3:5B:E0:7F:CB:B1:D9:6C:9B:85:BF
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Certificate issuer:       /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial:       019F9436AA3CCBE5A32FC537E4F675C5FFD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
Manifest number:          13C8
Signing time:             Fri 24 Jul 2026 13:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:38 +0000
Files and hashes:         1: HkHNahLcMn29F8mn38rgMtihXs4.roa (hash: ub8cZTZrM4u+sWY7kMq23CbCe1Gwl8HzBfkM+mdpS/s=)
                          2: Rl73vS6z3NurBJCDgNSKjy_rxiw.crl (hash: e3UVjmqiD/+h6Lo/agQWS5kItCwF7GVWkkoCcKCPaII=)
                          3: _9DDX6WKNqS0U0FDUYxXSX9hkD0.roa (hash: d5NycVVgglVXxsyA3VPNn2ddBgaNxuvJJjeMaRJ5HLc=)
                          4: aMbMcTxJqNY_J9l47sKKtyWmfY0.roa (hash: 2URg953/d4UDsCHiGXQnGS8745mKkNdX4MZQCglPrUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:aa:3c:cb:e5:a3:2f:c5:37:e4:f6:75:c5:ff:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
        Validity
            Not Before: Jul 24 13:00:38 2026 GMT
            Not After : Jul 25 13:00:38 2026 GMT
        Subject: CN=20c04d5dc6d76417d5c35be07fcbb1d96c9b85bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:29:e9:0e:f1:3b:a4:67:f4:79:95:18:9a:
                    f1:9a:f9:fc:32:eb:a2:c7:e6:4f:67:b4:f0:e3:4f:
                    67:77:80:5e:dd:07:d9:76:9b:db:59:8b:24:ff:b1:
                    f9:10:39:a2:92:e8:5d:42:c7:7e:15:c0:c3:ce:55:
                    61:27:44:73:91:c7:b6:c9:09:ae:25:19:7f:b4:53:
                    a0:d7:a1:e0:91:b6:df:f9:9d:dd:b9:75:6b:dd:37:
                    e5:00:c2:84:f5:f5:31:df:96:89:15:30:e0:10:b0:
                    9e:7f:d3:f2:47:ef:41:c6:47:98:aa:f0:73:35:3d:
                    85:3c:de:1a:9f:12:0c:8b:d9:21:ff:9f:60:44:f6:
                    27:d1:a3:0a:4a:d4:e2:d7:e9:b9:b9:45:d9:ab:6d:
                    6b:bc:fd:22:4b:99:ba:d3:25:44:89:dc:70:9c:87:
                    8a:00:73:cd:9c:9d:21:42:71:15:0d:3e:33:e2:4b:
                    1f:7d:ca:73:5e:48:39:b1:96:74:a7:88:14:91:77:
                    4d:1e:bc:e7:ef:96:ef:94:6b:bf:a1:e2:7e:67:80:
                    a6:2e:5b:d8:c5:27:9a:ea:a3:36:2f:6c:88:57:44:
                    49:9b:dd:92:5d:f3:00:43:cd:4a:50:c7:56:2d:4b:
                    44:ae:c8:32:2c:e8:be:40:a4:27:b5:ac:b5:65:14:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C0:4D:5D:C6:D7:64:17:D5:C3:5B:E0:7F:CB:B1:D9:6C:9B:85:BF
            X509v3 Authority Key Identifier:
                keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:35:85:e0:32:4a:10:39:0d:1d:f6:5d:15:27:f0:df:1f:7f:
         92:12:93:fe:36:ed:2e:fb:8f:fb:22:35:bd:3d:9e:14:69:f6:
         3d:6a:bb:28:9d:00:4f:f2:f9:44:9a:41:c4:9c:2b:09:00:13:
         00:78:2f:74:1f:d2:24:91:38:45:40:fe:73:e4:b4:b4:d0:a5:
         c1:1b:a1:6f:8d:3c:61:b1:8a:e0:e4:72:6a:8a:58:5b:6d:9a:
         18:6f:3b:d7:c4:43:a2:4d:dc:9f:d4:36:b8:bb:ee:20:2b:02:
         c4:12:18:ff:cc:01:d7:b0:a0:5f:8e:50:40:d4:45:79:e8:d4:
         1f:c7:e1:7f:64:14:5c:4e:44:e1:70:c0:03:39:1a:99:dd:54:
         cb:a2:91:9d:2e:6b:6b:f1:f1:a8:ff:f4:85:6a:b2:cf:aa:12:
         15:00:64:a9:65:0f:2a:97:d7:4a:44:17:b3:c1:47:44:96:83:
         47:f7:06:a3:65:4e:9d:5d:69:23:57:f9:81:61:da:3f:db:75:
         6d:7b:eb:56:34:5b:c9:9a:1f:9a:a4:dd:52:2c:9e:74:9d:d0:
         a2:d9:63:02:db:66:09:87:ca:be:3e:30:07:38:6a:31:4b:70:
         2f:a2:d6:c1:99:4b:e7:ee:77:bf:31:4c:60:5e:b3:ee:8e:0a:
         73:24:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:01 2026 by rpki-client