Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File:                     xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier:          jVXOjLh40CkA/eketoA1WIMDgesLuAP1CKmYrX7bms8=
Subject key identifier:   1E:47:56:E1:F7:D8:14:68:BD:8B:7B:A0:99:32:B1:DC:D0:DF:36:66
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer:       /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial:       019F93C905F16970BBF752D1A1FFF1AEB83A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number:          181D
Signing time:             Fri 24 Jul 2026 11:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:52 +0000
Files and hashes:         1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
                          2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: Cwk2TqvC62RxETA2WIYigqDFihXCQyIgRV0kTceD7fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:05:f1:69:70:bb:f7:52:d1:a1:ff:f1:ae:b8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
        Validity
            Not Before: Jul 24 11:00:52 2026 GMT
            Not After : Jul 25 11:00:52 2026 GMT
        Subject: CN=1e4756e1f7d81468bd8b7ba09932b1dcd0df3666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:69:72:91:07:e4:cd:ae:eb:66:75:b5:f6:
                    43:bd:61:88:eb:e3:22:2e:53:a5:3f:f1:01:16:9c:
                    a8:9c:58:32:09:16:21:be:22:76:ce:58:e4:78:4b:
                    b5:2a:cf:d9:08:26:0e:3b:7f:6a:22:04:69:6c:32:
                    29:c4:62:c3:06:c1:e3:d0:c9:72:f5:96:fc:df:b9:
                    bf:3e:9e:c1:1f:d1:45:fe:f5:11:76:6e:2f:8f:03:
                    bb:03:bf:ad:46:d7:9c:1d:cd:17:40:b4:7d:38:f6:
                    78:66:8d:68:5e:27:0e:aa:ae:8f:1b:a9:33:0f:8c:
                    1d:6c:9c:e5:6b:64:d5:ad:1e:24:28:65:c1:2f:cf:
                    54:23:31:b2:e7:22:13:3c:f2:e1:e1:9c:3d:84:e0:
                    6b:a9:ae:95:c6:11:74:8c:50:64:2e:ef:78:4c:1d:
                    16:b8:12:28:16:e6:68:02:a3:0c:9a:f3:0b:7c:0f:
                    32:4c:00:fa:75:78:e4:2e:f0:94:c9:dd:4f:c6:26:
                    4c:4c:e8:64:88:d8:f5:26:7e:c4:d1:04:c8:cc:bb:
                    f9:55:35:2b:c6:2a:39:e0:23:96:63:f5:28:b1:33:
                    21:57:4d:1d:ba:56:05:27:25:30:af:31:a8:59:71:
                    86:bb:ca:03:1a:7e:fa:aa:e0:8f:30:56:27:10:54:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:47:56:E1:F7:D8:14:68:BD:8B:7B:A0:99:32:B1:DC:D0:DF:36:66
            X509v3 Authority Key Identifier:
                keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:7c:0d:60:81:da:1c:ef:f7:38:20:5b:17:74:f7:95:9c:
         61:98:0d:36:48:f9:e4:9b:04:44:bb:47:2a:2d:47:6c:e0:93:
         8d:fd:2f:1e:46:27:00:cd:e2:bd:39:a9:81:d0:ce:7b:51:f9:
         ac:22:20:25:0a:01:d5:b2:df:d8:5c:8d:af:bd:10:7e:af:58:
         0f:32:48:1e:7f:64:b6:7a:2c:87:a5:9e:88:cf:10:b4:f7:e7:
         06:89:d3:1b:8a:7b:e5:74:bd:3e:59:4c:38:35:2b:bc:af:3d:
         0a:ac:44:85:b3:6b:92:08:6c:d7:88:87:07:ad:2b:f6:d0:11:
         25:ef:85:c8:68:d0:aa:62:9d:54:11:c0:ec:71:40:68:cd:82:
         e7:72:aa:e6:84:35:31:fc:a7:61:44:de:51:54:76:a1:71:fa:
         52:9d:5b:57:46:da:5e:1b:b0:ad:17:2c:7b:dd:c4:64:8a:10:
         95:96:e7:86:cc:35:e3:ce:54:e2:63:45:e2:6a:ae:e3:67:30:
         13:be:94:fe:93:1a:a1:47:1a:b2:77:ad:c6:9c:c2:a9:1d:52:
         5e:e1:1f:43:7b:01:4d:0a:f2:35:4c:5c:e5:5c:e2:b2:3d:92:
         6f:70:8a:23:fd:c9:c9:08:97:8e:fc:a5:4d:32:ec:67:19:7c:
         35:36:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:07 2026 by rpki-client