Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
File:                     xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json)
Hash identifier:          xPyT/qWq19rbEaTOwMkvi4qpxeFACMik6G7+xjWklRo=
Subject key identifier:   57:F5:88:9F:B6:CD:0B:F9:DB:6E:E4:75:DE:33:15:CE:DC:97:1F:F6
Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
Certificate issuer:       /CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Certificate serial:       019F92B6AFCED8D057D018D3E66F221EA4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
Manifest number:          01C7
Signing time:             Fri 24 Jul 2026 06:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:13 +0000
Files and hashes:         1: Lte9ihIhwLMJEwykODf0-Ea8xPQ.roa (hash: v/rTSSPoZthEpEjHR7Sqj/7dnyWCaWiGBnHcyQGxAwA=)
                          2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: eLnxaEeulCa24lhPb0bSwn8gS5sC3cTNKlSmjDyj6Fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:af:ce:d8:d0:57:d0:18:d3:e6:6f:22:1e:a4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882
        Validity
            Not Before: Jul 24 06:01:13 2026 GMT
            Not After : Jul 25 06:01:13 2026 GMT
        Subject: CN=57f5889fb6cd0bf9db6ee475de3315cedc971ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:75:a7:d5:ad:2c:67:34:93:46:d8:30:6b:
                    dc:55:7e:4a:3a:b4:d0:76:63:90:ef:cc:c4:23:9f:
                    d8:57:86:59:a8:6c:ff:5c:1b:02:3e:e4:1b:9a:da:
                    e9:83:43:4f:dc:7a:e4:70:53:1a:7c:56:4b:bb:fd:
                    53:85:6c:08:5a:a6:ae:04:e7:29:e8:12:17:c6:d4:
                    82:50:a4:43:9d:be:a0:24:ac:3f:9b:52:4d:3c:08:
                    48:bc:4c:9f:b5:70:16:ec:b5:ff:e7:94:78:54:c8:
                    3b:d7:e7:dc:ce:19:d4:0d:7e:05:bf:84:ab:eb:0d:
                    55:16:38:88:3f:f8:cb:47:b6:26:ed:2c:a6:2c:7e:
                    0b:48:e2:c8:b6:e5:ad:ea:af:3c:42:52:ed:f9:8d:
                    9f:61:0d:ed:e3:e0:a4:79:10:31:2c:0b:83:23:fe:
                    43:b6:01:2b:37:35:e6:4b:c7:1a:14:e9:87:48:a0:
                    24:f0:6a:98:3d:2c:4b:4d:1b:4c:bb:d4:7d:e5:34:
                    7f:a2:8e:90:2c:c8:e8:91:cc:b4:98:08:21:1f:17:
                    75:9c:69:c3:17:c8:03:32:9d:be:9d:fd:12:f1:cd:
                    e2:d1:7d:07:8d:96:89:0f:cf:13:30:f2:22:9e:4f:
                    a1:23:7b:ee:72:ce:9b:23:ef:89:b2:be:ae:86:d3:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F5:88:9F:B6:CD:0B:F9:DB:6E:E4:75:DE:33:15:CE:DC:97:1F:F6
            X509v3 Authority Key Identifier:
                keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9a:78:40:c7:f0:c4:97:9a:89:b0:30:3a:0c:ce:8c:51:fa:
         26:d0:ac:0e:42:21:68:ef:2d:ee:f5:b2:8f:ec:dc:8b:20:78:
         8f:45:20:68:22:99:fe:19:66:72:2d:ad:f1:4d:a9:4c:ad:bb:
         3f:91:3e:aa:fc:e0:94:c7:65:97:46:81:ad:11:72:5d:3e:33:
         39:a0:34:67:50:1f:88:5f:7f:6c:28:37:6d:9a:84:2c:ec:68:
         40:37:43:8e:34:b4:d5:55:da:0d:5a:a0:a8:ff:3a:48:28:f7:
         00:a5:94:bb:97:70:4c:57:71:68:1f:49:85:cc:aa:34:07:a5:
         4d:17:15:6a:ac:18:67:2e:54:62:c6:f8:77:65:4c:2f:1a:db:
         e1:fc:93:4d:26:e4:a3:8d:92:ad:d2:2e:17:e3:60:04:a7:68:
         76:aa:05:8a:71:e4:ed:2c:03:06:13:51:0c:d5:d6:39:87:b1:
         65:9b:3e:31:81:42:c1:45:7c:90:2d:4c:8b:5f:2b:c9:25:01:
         a3:bc:f0:db:3c:3c:aa:6a:03:ed:ae:b6:fe:d3:b8:3e:b9:c5:
         b2:ee:b6:43:89:da:22:08:97:a9:c8:e8:d1:6b:86:f1:78:bd:
         de:43:7b:10:48:8c:9a:c9:fc:02:e9:a8:29:97:25:c5:b5:f6:
         ec:0e:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:28 2026 by rpki-client