Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File:                     xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier:          yqXuzczyuVG+TDoBpx7dO+nyvtyoinzhvDe9+3hbQI8=
Subject key identifier:   2C:BD:13:CF:92:5E:E3:29:21:85:8E:CD:19:3F:36:4B:CD:9C:95:06
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer:       /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial:       019F902347118107195ABD3DDAC43E9ED2CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number:          05E4
Signing time:             Thu 23 Jul 2026 18:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:58 +0000
Files and hashes:         1: MWnPy89PH_1TfAr-2f04R8v5sE4.roa (hash: lLx6SLjmp2bg19wDs+FyMt7/MMn+v1mjyT18ZnGU1Mk=)
                          2: gchew8N-s3QGJhaPeq9th0RAwrA.roa (hash: 8LHWubfz5C/zrE3nYoyb2vELJgFr9oL05PR7fmzV9hw=)
                          3: m2sCh5HkLxEE1VASi8B7f5_IGDo.asa (hash: 4Epl+7kUup5rqY+UK4i3mas67nTsku/KVZ8PPtRd/NQ=)
                          4: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: 1oYP+gxP6JRSptFxGRh3XMEjMonmzOGxhvMmlS5Bknk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:47:11:81:07:19:5a:bd:3d:da:c4:3e:9e:d2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
        Validity
            Not Before: Jul 23 18:00:58 2026 GMT
            Not After : Jul 24 18:00:58 2026 GMT
        Subject: CN=2cbd13cf925ee32921858ecd193f364bcd9c9506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:9a:46:af:15:1c:07:25:80:6f:95:97:d3:
                    c0:4d:0c:59:c8:ad:73:71:b0:b8:34:50:d7:9e:27:
                    37:35:f5:69:00:9a:99:0e:1a:0b:6f:df:99:0a:d3:
                    ba:dd:e6:c1:35:de:46:de:ab:d6:ca:a8:92:ff:01:
                    14:e3:d3:94:7c:26:ee:14:cf:49:55:61:f0:e2:b2:
                    87:d0:f6:64:4a:f9:5e:45:74:ba:ef:de:75:fb:13:
                    49:3c:f8:77:78:6f:19:e3:5c:d6:8d:52:2b:5a:a7:
                    cc:d9:36:41:2d:0f:86:09:a1:ef:11:fa:95:97:a9:
                    6e:1c:07:ba:86:0d:71:31:11:3c:4d:96:0d:9a:b1:
                    02:49:db:38:74:c6:f2:dc:93:30:28:de:7a:6a:c6:
                    67:05:ec:e8:38:5e:3f:60:12:c7:7a:94:8e:e6:95:
                    88:58:88:35:f6:5b:d3:f9:fa:68:82:43:30:8a:b3:
                    12:d1:82:34:69:4c:b8:ce:48:03:3c:8e:0e:7c:ce:
                    60:75:71:5f:92:ae:83:da:2d:65:2c:13:d8:f0:6b:
                    0c:4e:e0:62:e8:94:0f:ad:ef:79:c6:4e:22:03:13:
                    9b:e0:f1:30:48:d2:a8:a5:c5:bf:4a:53:ac:43:22:
                    81:98:ec:11:eb:7b:ac:b7:f6:de:42:6f:f2:0d:44:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BD:13:CF:92:5E:E3:29:21:85:8E:CD:19:3F:36:4B:CD:9C:95:06
            X509v3 Authority Key Identifier:
                keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:7b:25:3a:55:f0:4f:7c:d3:76:55:1e:43:5a:a3:03:fd:
         83:4f:d0:00:5d:64:63:43:6b:87:94:d7:3b:11:2c:66:e8:6d:
         66:5e:a6:11:fc:c5:36:a3:82:1b:ea:f8:0f:6b:05:fc:8d:0f:
         33:89:c2:f3:29:0f:f3:c9:b8:a4:f4:2e:38:38:02:19:65:7b:
         64:84:d5:cf:25:73:6c:85:eb:f3:3c:58:3f:0d:83:70:e5:ac:
         5e:18:8a:b1:9f:c3:c3:cb:27:ad:64:68:f7:27:b0:7f:3b:3c:
         a2:d9:32:54:2f:3f:b5:a3:f1:fe:04:e2:e1:9c:95:cd:d1:06:
         6a:6d:4c:8c:57:a3:61:d4:a2:3c:78:51:cd:11:e4:a3:14:a4:
         20:a0:c1:55:57:83:95:c8:90:a5:e3:da:8f:19:5d:6c:fd:f1:
         65:6d:ad:69:c2:9e:0f:6c:d6:16:4f:a7:c8:ba:08:cf:f1:db:
         b5:ff:b2:bc:cb:53:4f:44:e9:5d:9a:98:84:ec:d5:03:d9:f0:
         79:5c:fb:53:e6:eb:ff:f5:3e:28:49:83:d1:aa:87:e7:be:f5:
         e6:eb:f9:eb:9a:43:e2:74:a6:74:3e:a5:74:4a:f4:fb:aa:eb:
         97:a6:fe:9d:c3:3e:fe:b6:fb:69:fc:8c:36:6c:0a:31:3e:ea:
         fe:a3:af:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QI0cRgQcZWr092sQ+ntLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTYxM2Q1OTk5ZjM2MzI5ODVlZDg5YTAyZWZhYWJkMTg5
MGJhMDkwHhcNMjYwNzIzMTgwMDU4WhcNMjYwNzI0MTgwMDU4WjAzMTEwLwYDVQQD
EygyY2JkMTNjZjkyNWVlMzI5MjE4NThlY2QxOTNmMzY0YmNkOWM5NTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs56aRq8VHAclgG+Vl9PATQxZyK1z
cbC4NFDXnic3NfVpAJqZDhoLb9+ZCtO63ebBNd5G3qvWyqiS/wEU49OUfCbuFM9J
VWHw4rKH0PZkSvleRXS67951+xNJPPh3eG8Z41zWjVIrWqfM2TZBLQ+GCaHvEfqV
l6luHAe6hg1xMRE8TZYNmrECSds4dMby3JMwKN56asZnBezoOF4/YBLHepSO5pWI
WIg19lvT+fpogkMwirMS0YI0aUy4zkgDPI4OfM5gdXFfkq6D2i1lLBPY8GsMTuBi
6JQPre95xk4iAxOb4PEwSNKopcW/SlOsQyKBmOwR63ust/beQm/yDUSQKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy9E8+SXuMpIYWOzRk/NkvNnJUGMB8GA1UdIwQY
MBaAFMZWE9WZnzYymF7YmgLvqr0YkLoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2Ut
NjUwOTkyZjJhMTc0LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2UtNjUwOTkyZjJhMTc0
LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCp7JTpV
8E9803ZVHkNaowP9g0/QAF1kY0Nrh5TXOxEsZuhtZl6mEfzFNqOCG+r4D2sF/I0P
M4nC8ykP88m4pPQuODgCGWV7ZITVzyVzbIXr8zxYPw2DcOWsXhiKsZ/Dw8snrWRo
9yewfzs8otkyVC8/taPx/gTi4ZyVzdEGam1MjFejYdSiPHhRzRHkoxSkIKDBVVeD
lciQpePajxldbP3xZW2tacKeD2zWFk+nyLoIz/Hbtf+yvMtTT0TpXZqYhOzVA9nw
eVz7U+br//U+KEmD0aqH57715uv565pD4nSmdD6ldEr0+6rrl6b+ncM+/rb7afyM
NmwKMT7q/qOv6g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:39 2026 by rpki-client