Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File:                     xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier:          HoyPjx2ByFZN9Dwzx2d/a11ZG9ylPy/H4N8hkdIN364=
Subject key identifier:   F3:CB:3E:0E:68:70:57:05:24:BF:0C:BC:D9:CE:E1:A4:FB:58:C4:2A
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer:       /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial:       019F90C7F7BD2FB1A5651FA9E90446563EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number:          1963
Signing time:             Thu 23 Jul 2026 21:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:51 +0000
Files and hashes:         1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
                          2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: 3bcXchgFFraqZ4/XxOIFFK5Ec5+f2xMjRneVOI5O9TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:f7:bd:2f:b1:a5:65:1f:a9:e9:04:46:56:3e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
        Validity
            Not Before: Jul 23 21:00:51 2026 GMT
            Not After : Jul 24 21:00:51 2026 GMT
        Subject: CN=f3cb3e0e6870570524bf0cbcd9cee1a4fb58c42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:34:89:f4:6d:f1:39:e8:b4:64:18:68:35:
                    3c:ab:e5:c9:7f:01:66:e7:12:9e:c7:60:08:ea:c8:
                    ef:63:d9:2f:b0:9a:45:29:31:ba:03:57:7f:a7:8a:
                    39:e6:b8:35:c6:2e:a1:94:da:66:2a:fc:d7:d8:88:
                    b2:33:d0:1e:0b:58:2b:e9:20:91:a8:14:78:46:ec:
                    b2:8a:d7:9a:c0:30:aa:3f:dd:2c:02:b2:4a:52:25:
                    10:ce:36:62:02:72:2a:fd:bd:bf:ff:c4:3d:84:3b:
                    f6:71:f0:82:0e:6d:f0:f4:aa:8a:50:cf:a5:9d:5e:
                    01:7e:8d:a0:39:c2:bd:65:db:86:bc:eb:9f:0f:2e:
                    60:eb:68:a6:97:09:ba:ae:f1:52:fa:bc:30:49:ca:
                    a8:8e:99:ae:d7:6b:f2:2f:40:0f:09:ca:42:72:08:
                    4b:e9:d5:4b:d5:a2:05:b4:9b:b8:0c:b5:8b:06:4c:
                    24:04:96:0e:a7:50:5a:2f:31:ef:63:40:b9:8f:99:
                    ec:ee:d2:7d:7d:a6:ad:a9:c7:49:1c:ce:c5:89:f7:
                    ae:57:fd:02:80:62:86:93:24:e3:3a:1c:b1:58:1e:
                    22:8f:92:57:65:c2:3a:09:89:89:e5:34:6a:6e:aa:
                    8f:9f:76:7f:8d:d0:67:2f:de:1e:9e:2c:c6:c5:5f:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:3E:0E:68:70:57:05:24:BF:0C:BC:D9:CE:E1:A4:FB:58:C4:2A
            X509v3 Authority Key Identifier:
                keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:32:44:11:91:fd:7a:d7:c3:61:9a:9e:35:40:43:a1:cb:
         ac:30:54:3a:45:8e:41:f0:39:3e:f2:4b:e4:59:48:a5:b2:b6:
         f5:c0:da:fd:14:44:0c:27:f9:60:04:62:ec:30:bc:94:3c:3d:
         24:16:48:23:4c:09:12:af:79:ba:93:81:22:f1:e2:9b:a1:74:
         51:b9:85:0a:14:ef:cb:63:81:37:03:a1:2e:1b:0b:bf:fe:4b:
         54:94:0f:86:7c:15:a0:37:07:4d:eb:d3:b9:5c:54:f9:87:ca:
         a5:e6:93:91:7f:e4:b1:7a:c2:6c:91:0b:ee:ae:90:dd:70:81:
         07:0c:7f:8e:42:ec:80:39:ff:1e:bd:b5:16:c8:c2:a6:b0:96:
         e8:aa:cc:ee:46:05:6a:68:0f:8e:54:38:13:c9:49:99:c2:6b:
         f0:25:96:20:d0:75:28:7a:99:c2:a8:0c:b9:cd:2b:d5:30:ff:
         5c:b6:34:0a:96:5f:4e:3d:3c:74:b3:40:e0:94:21:49:ed:74:
         12:70:66:b6:55:dc:b3:b8:7b:a5:c3:37:9e:de:ed:99:59:52:
         fa:0c:a3:6d:ba:e0:cf:59:15:12:71:3e:71:25:a6:91:4b:0c:
         c8:a8:3e:61:c4:91:f5:87:e1:56:08:03:f0:1b:39:e1:90:c6:
         68:ae:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:48 2026 by rpki-client