Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File:                     XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier:          J3VhsBtsF8nIHify9glm/4WS32SeRtp6Xjor6Gz86qk=
Subject key identifier:   C5:19:C0:59:A0:AA:F2:18:79:17:5A:52:E0:45:E9:A4:7D:D9:A3:9E
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer:       /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial:       019F939263F50DFF8120ABF5A75A7C3D035B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number:          1A07
Signing time:             Fri 24 Jul 2026 10:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:12 +0000
Files and hashes:         1: CZ1LSUniiHGNKwvHak6fSDmBxdc.roa (hash: Mosbvu2i3W9lRSEMHDa5n4kbGcSkA8mN4bx3wDReYfc=)
                          2: JhlPUIaiuE2YohDfzMjZESoyDBM.roa (hash: 7exMhOdMj9M/aNI0j3yYX3O6VN6kNC8RAmHhooROzJc=)
                          3: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: sJa/p9joAANQKPqIAl0XHetYxROtlqbkeXAJydb2ldY=)
                          4: i9Jjligy-EqoCiaFX_JoZgf9dZ4.roa (hash: XW8rc6v037pilJaZxg9f1SStjDu20ZBHUdc/h3ZDPqs=)
                          5: j2M12KSK7yupbk2QrIFnkpZ-KPM.roa (hash: yQynIUWOty/ocy5JzISGlHN5/AewbIRpARiMe1+4m+I=)
                          6: kSIrlNkYtxjevrUOWqXwGaCeFxQ.roa (hash: P1EFKe/doBtEMdSkydhZWieCIypvlDRY3TVJIkRt4p8=)
                          7: rgypQg1mq_y1PkBJTzbgugJszfU.roa (hash: 2UJiTYNC2SMcM+K20BC59uzzBZrc7ob9nA7WO1YUWjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:63:f5:0d:ff:81:20:ab:f5:a7:5a:7c:3d:03:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
        Validity
            Not Before: Jul 24 10:01:12 2026 GMT
            Not After : Jul 25 10:01:12 2026 GMT
        Subject: CN=c519c059a0aaf21879175a52e045e9a47dd9a39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:bc:c0:2c:6b:c9:e0:05:51:54:69:d6:8b:
                    71:58:73:37:ba:85:20:b4:f1:56:61:3f:29:01:7c:
                    f4:bd:5d:38:31:31:47:c7:c1:75:5b:84:43:04:22:
                    fb:b8:0a:29:18:bd:85:20:fd:0c:af:01:27:b1:d3:
                    8e:53:e1:30:4f:08:84:75:81:80:0b:0e:3b:c9:67:
                    5c:07:e9:45:76:e9:6f:63:20:0f:62:f7:5e:f3:dd:
                    7c:56:d4:ae:fb:16:44:10:20:f0:2e:44:5e:87:fb:
                    da:5d:62:92:8e:04:8e:17:ad:fa:3b:ab:4c:d5:02:
                    88:77:31:d0:68:d1:c9:cd:3c:84:96:9b:94:d0:b3:
                    05:ed:3b:04:37:dd:44:f0:67:f8:00:84:62:8b:80:
                    fe:bf:7e:b0:db:6b:c9:66:b2:90:08:41:85:9a:90:
                    23:74:91:14:88:cc:16:68:5a:de:0f:89:68:75:19:
                    9c:42:90:6d:f7:8b:dc:b1:17:af:cf:47:40:e4:7c:
                    82:bb:b5:29:a2:d7:3c:f3:da:a9:3a:5e:9c:1e:8e:
                    2e:c1:cc:82:d0:1e:be:71:0d:33:a8:9b:61:4a:19:
                    d0:29:e7:d9:51:ca:4c:25:86:b2:1f:ac:eb:70:f8:
                    e3:4d:46:e9:6c:51:60:e5:85:d2:b9:c0:9e:b9:37:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:19:C0:59:A0:AA:F2:18:79:17:5A:52:E0:45:E9:A4:7D:D9:A3:9E
            X509v3 Authority Key Identifier:
                keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3a:59:de:87:e7:0c:4c:61:26:be:37:64:af:8f:82:28:86:
         33:96:80:be:0a:c0:74:d2:81:b7:c7:1d:34:de:ba:7c:08:1c:
         a0:c5:cd:15:47:80:f4:0b:f6:a2:c7:41:ef:11:9a:ca:6b:05:
         fc:fe:43:ec:20:4a:48:97:72:21:ee:31:84:bb:74:f8:17:93:
         94:41:d6:bc:f1:fa:39:4c:ae:d5:48:60:5d:f9:f4:cd:af:8a:
         26:be:99:0b:fb:8f:27:55:52:9a:d4:3b:cb:ab:39:d0:3e:c2:
         be:dd:2b:32:48:4b:7a:0f:a7:92:93:e7:4c:f8:76:93:01:ce:
         4b:96:0b:d3:d5:b2:4b:57:8b:7b:48:08:89:98:e4:3d:80:55:
         cf:d2:b4:30:15:ec:c7:26:a3:ca:4b:fb:99:16:90:f2:49:26:
         5b:e6:fd:6a:bb:55:c9:73:b7:35:8e:52:d0:72:4b:05:6c:22:
         b9:39:70:3f:fa:c3:70:4f:29:ea:56:e2:3e:85:32:c0:d1:c8:
         d6:42:62:92:34:4a:f0:b7:43:bb:84:58:d6:f5:86:be:d3:65:
         54:2a:68:1c:fa:aa:04:e7:f7:9b:52:c1:85:94:82:16:c5:04:
         fa:11:1a:1b:55:06:78:03:4b:c4:0a:1a:1b:67:a5:0b:c0:cb:
         1e:64:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:28 2026 by rpki-client