Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File:                     Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier:          0DKS4nDkJoHnVoa7nertinbEJZ7hjTJpWDmhMe2klbI=
Subject key identifier:   2F:83:13:50:39:AB:B8:85:1B:D3:C9:62:32:52:15:39:86:85:5C:CC
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer:       /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial:       019F90C846EFA3EC8230A68D48951DD28589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number:          19E3
Signing time:             Thu 23 Jul 2026 21:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:12 +0000
Files and hashes:         1: 3M28JHI7FacsIOAJQWmxce2Slr8.roa (hash: YkTIvgr/OPBfSq7cSMGcukiH55SIyz1JhUaAuApclZY=)
                          2: 7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa (hash: Odl4gnozu+3MVceJoIMFZfxLwPzuPyHk73z9Oo2EcD0=)
                          3: Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa (hash: /bwOAvbGES0zjJv2PTCP3py4NDDoCXEMIJubC3y4gDQ=)
                          4: IK5t8ZtR9FmBC9B2Oc1q_FzsZ60.roa (hash: 99eWXzzKhZzYTyaPK2nn6KPekh7aMTWJKB401rZwNvg=)
                          5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: 5BPAnmc1W2X++H67C7h2l1dSwCQSUmLjycVY4vcEOSA=)
                          6: aqoU9zJ3XearIjlOINJlmfcvvuw.roa (hash: Sz6yVgzziCuFuMg8Vphcvorcn0t0kQDujyZ/W1bGUWw=)
                          7: kl3oy-dFL14cqnAqsoTUT2p-gAs.roa (hash: 2IH7sBJVtOHKhrFUONXV2aGCQkjnVLJ+vB9vvY8IEzA=)
                          8: kyQ4JI7k9YbINgfhHLT6m28Lt5g.roa (hash: k6gw+9YpfRZ8fBPrWOAfF6dmY/qo7leQ3UVRA8om9+s=)
                          9: qH5fLLWJkV1VZnXKxFAToZGD4BA.roa (hash: gujwjiPUnMht5bxbQJ8geZbpehgQ8vnJKIXcFg1nhbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:46:ef:a3:ec:82:30:a6:8d:48:95:1d:d2:85:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
        Validity
            Not Before: Jul 23 21:01:12 2026 GMT
            Not After : Jul 24 21:01:12 2026 GMT
        Subject: CN=2f83135039abb8851bd3c9623252153986855ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:1f:97:b8:4e:76:06:bf:e5:47:19:46:6d:
                    d1:c8:c9:9b:10:74:c4:2c:e6:55:e5:19:c0:70:48:
                    57:12:e5:78:89:32:7f:66:bc:fd:bd:91:e7:6f:c8:
                    2b:21:7a:e1:52:21:7b:8c:45:c6:06:bc:dd:04:72:
                    cc:6b:37:cc:f4:98:5c:dc:a6:97:6e:66:90:d6:2a:
                    a6:66:21:2a:21:44:a8:80:fd:1c:f0:42:a5:aa:7b:
                    1d:50:3f:51:3e:45:6a:43:65:95:8d:96:05:07:91:
                    dd:66:55:56:d5:56:cb:10:5b:40:a1:7c:c2:0d:e3:
                    01:a1:38:bb:9a:3b:84:bf:88:d6:fc:98:6a:cc:0c:
                    15:ed:e8:db:df:b9:45:36:8b:0d:9b:17:ad:3e:00:
                    9b:e8:8d:61:c3:34:6c:65:f2:16:3d:a9:db:57:c8:
                    fe:6f:92:02:61:bd:53:e5:df:14:e4:50:f7:5f:d4:
                    92:24:83:8d:d3:f9:0f:61:4a:07:47:a6:1f:59:b2:
                    bc:2f:ad:80:d6:4d:9c:27:87:b4:18:d6:de:1c:59:
                    f0:a8:3e:5d:d8:fb:45:c5:f2:c1:9d:63:2e:0a:23:
                    7e:64:34:3c:8b:19:bb:31:dd:af:c8:4e:fb:96:13:
                    2c:0c:c9:5d:82:e2:b2:f8:8b:58:80:c2:b7:8a:cc:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:83:13:50:39:AB:B8:85:1B:D3:C9:62:32:52:15:39:86:85:5C:CC
            X509v3 Authority Key Identifier:
                keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:60:72:5e:9f:ed:f0:b4:a0:af:40:28:fe:84:24:3a:a0:cb:
         e2:f8:3a:be:dd:31:0f:5e:26:3d:88:56:fd:56:97:8f:36:14:
         e5:56:c8:19:90:6e:61:4e:bd:a3:44:aa:fa:fd:36:f3:46:f2:
         cc:df:93:44:c0:24:da:02:76:c3:a1:71:f8:aa:23:16:9d:e8:
         b3:81:b8:6a:31:9b:86:df:31:e5:67:ad:98:af:f7:c4:97:54:
         26:ce:22:f8:d6:9e:46:56:79:7c:72:1d:e9:e8:c7:42:c4:4b:
         c5:b8:7b:d7:a7:3d:65:14:45:57:d5:c7:a0:c3:6d:67:ac:14:
         22:c8:88:98:32:e2:c7:bb:07:13:5d:fa:2f:ec:07:f2:1c:7b:
         7d:33:e2:5d:75:89:88:ed:61:f0:d6:9e:26:05:5a:25:99:b7:
         ca:16:64:40:df:a2:68:ed:50:14:95:2a:d0:45:b9:43:b4:eb:
         37:3e:fb:66:d7:6d:14:90:83:9b:96:68:eb:ad:cd:26:cd:ae:
         4e:fb:8f:11:c0:60:c8:06:ef:57:0b:e3:06:ce:25:eb:87:4c:
         b5:c5:e4:7c:a2:c9:c6:d6:b1:62:1f:6f:fc:d9:1e:d4:1d:fd:
         e9:19:0e:f0:d9:d2:f4:b0:6c:41:b5:66:71:53:36:46:fd:0e:
         f7:54:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:40 2026 by rpki-client