Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File:                     xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier:          xnAGE+Qg68rReX0+7HNJJ7Q2aBqNrkTjZyTCZOTU6wE=
Subject key identifier:   40:4E:84:83:76:17:69:E8:48:D6:CB:94:D4:A5:BA:27:47:3E:8B:E7
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer:       /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial:       019F927F462E21DC2D7AC95F1DB8DF7EAF0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 05:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:42 +0000
Files and hashes:         1: 0sxkLDFdb4QelHCb0OZcMbO1jDM.roa (hash: 1xnWSoVsnQK8dLyDSxHxSRJdCC9QJVhSYDLS7qz0b0o=)
                          2: AjeR0O3ITsCO65xWw0QykqgxNA4.roa (hash: DgIKpLNUmEsPkrau/sY/HOWPCo1ggWtDwl6wxDzmrWM=)
                          3: JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa (hash: 8yyEuQEPL63uz0pA2x8egSWHyWTxI5pMdw0GJbheT0g=)
                          4: XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa (hash: I7f3HuHYguoVsLgmKIELlpLwLVz1wyD/5cmJZXhghjI=)
                          5: cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa (hash: voL4FK/goy3Ucp4jv2hDvT1VmoRVg+99FBMAXu49zQk=)
                          6: sQNC3PZhtT00aBnksKdxFAVZzQQ.roa (hash: 0L2z2BzNlMPl3E12ZeAaZbBCG9ys89MDIPcvR5FtVNI=)
                          7: tfaKP8IvgQkAwmU3RK8qZmHmzts.roa (hash: hyWKZ+AjnMpt6LR61ItU5+Wmy9Q8i+PxJ269z65RWH0=)
                          8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: hALZ3pGSo83F8MJXNhs3tvqZMeen6cBR9+Sc/aJj7tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:46:2e:21:dc:2d:7a:c9:5f:1d:b8:df:7e:af:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
        Validity
            Not Before: Jul 24 05:00:42 2026 GMT
            Not After : Jul 25 05:00:42 2026 GMT
        Subject: CN=404e8483761769e848d6cb94d4a5ba27473e8be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:8c:84:2f:c1:e9:31:1c:8c:fe:82:55:f6:
                    2f:cd:c3:6d:1a:b7:bc:9e:db:f6:12:0a:7b:bc:02:
                    41:57:ec:aa:01:a0:c1:5c:fc:6a:6c:bf:8a:10:60:
                    b0:f9:b8:65:03:59:63:70:66:cd:fa:35:09:88:04:
                    3c:68:f5:d5:eb:30:a4:34:9e:d3:d7:34:65:06:6e:
                    49:04:4b:bf:74:0b:38:08:b1:60:60:5a:bf:a1:69:
                    95:a9:0b:61:c4:7b:be:e8:72:e7:2f:49:e5:99:b1:
                    ef:87:a0:78:66:df:c2:ec:8f:eb:c2:60:31:34:2a:
                    f4:e6:5e:38:90:44:af:c7:7a:8e:2b:c7:94:01:e2:
                    56:46:05:ee:85:ba:c1:65:94:15:87:0a:ed:09:ff:
                    d2:d8:ed:fd:0f:a6:8b:8b:66:6e:65:23:bc:ab:c8:
                    b3:60:41:79:97:af:87:fb:f4:59:2b:a7:b2:15:61:
                    59:4b:96:1a:81:75:7c:bd:91:1c:7e:af:a1:56:a3:
                    1b:e3:92:b1:ea:9f:c2:79:1d:78:f3:08:13:f0:9c:
                    91:e1:de:48:b9:46:25:81:b0:96:3c:75:db:ad:e0:
                    12:9e:bf:a1:7c:14:42:0a:68:5c:63:87:6d:63:8c:
                    4e:d3:bc:9f:1e:2c:12:f0:b7:bf:d0:1f:72:73:21:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:84:83:76:17:69:E8:48:D6:CB:94:D4:A5:BA:27:47:3E:8B:E7
            X509v3 Authority Key Identifier:
                keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e2:40:4c:92:76:f9:d2:9a:16:41:ff:77:d3:13:fa:3b:98:
         48:4c:74:79:9d:f9:78:00:c6:33:f9:44:9d:54:35:44:5f:d9:
         14:9e:27:bb:bd:8d:50:8c:8d:0e:5b:98:7e:3e:21:47:48:a7:
         0c:e9:56:18:3d:ee:f8:71:c0:66:41:5b:54:cc:e2:e0:e2:0e:
         a6:a6:df:78:3b:77:02:8b:d5:59:93:1f:8c:83:e9:cf:a8:05:
         eb:ac:8a:37:d4:21:ac:5c:f5:5b:76:e2:03:ce:67:fb:b5:ad:
         fb:3d:59:1d:d8:cb:b8:94:61:41:f7:ab:98:db:39:1e:3c:5c:
         3b:8c:59:a1:d9:9b:fa:a5:ff:a8:81:3d:62:5c:8b:9a:59:66:
         63:6c:5c:b9:96:81:2c:51:df:b2:a4:37:72:2f:bc:f6:8b:6e:
         d3:50:53:66:af:69:d3:c0:a5:bb:b3:1c:6c:b9:d7:11:ec:80:
         4f:a7:0b:57:be:72:6a:ca:8b:c3:da:cd:a1:92:b1:ab:e2:a9:
         a1:ae:de:8e:db:3e:f3:1b:07:b0:f5:3f:4a:3b:ac:ee:8e:07:
         87:47:06:f6:81:2f:d1:52:2d:89:83:28:25:12:fb:36:1f:36:
         77:c5:38:5b:5f:dd:75:1f:2a:9f:1a:6b:f4:46:aa:2b:f6:19:
         cd:38:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:51 2026 by rpki-client