Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File:                     xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier:          ELZ5vRnoiGJr0M3fMsVMJZcyERzqNe40TnibUo4gSiY=
Subject key identifier:   B6:C6:07:91:E2:C8:43:C4:44:09:9C:57:D0:98:23:46:7A:1D:11:5D
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer:       /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial:       019F92ED0FEC198E2C84333F78D5C67E1D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number:          18FA
Signing time:             Fri 24 Jul 2026 07:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:37 +0000
Files and hashes:         1: IPWrOvsWgguYWB7Nl_gTONIzrpI.roa (hash: K/fllT4qGMJT3KoDnyrWIczoizT4y2FZ0kvxUQY8R7c=)
                          2: LbZzVT40yf25Ha7iF2B6O1RvYF4.roa (hash: f9AuhT5EpMpRv8pZmA+KFqXspnh60tIOSzMIN9FFIDk=)
                          3: pN_P1IlTK7N9Tsyo-7qDne3seo8.roa (hash: 4JuBbaWoHsvx0AsZc9fY1wPJc+hsLORDmTae2tdrxYs=)
                          4: vCRnh4F_lljPYv3DYF0shQI8Bbo.roa (hash: qW582UkFyFw7De0dFAxA/OIbguYJh97E6vsR4Z29UJE=)
                          5: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: 8HdlXopXizz7B71D+/2H0f/QxfQSNT54RKJoCnQFpJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:0f:ec:19:8e:2c:84:33:3f:78:d5:c6:7e:1d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
        Validity
            Not Before: Jul 24 07:00:37 2026 GMT
            Not After : Jul 25 07:00:37 2026 GMT
        Subject: CN=b6c60791e2c843c444099c57d09823467a1d115d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2f:8c:db:c4:74:2e:05:a2:bf:c7:de:c0:57:
                    d7:13:d1:09:d6:ca:35:4c:de:d4:e0:df:9c:10:73:
                    fa:70:71:14:da:fe:fe:ee:ca:35:e8:00:6a:62:51:
                    cf:65:1e:14:49:86:7f:b8:89:e4:8a:2b:54:96:78:
                    e7:1b:81:27:c1:3e:0f:5c:af:61:35:2d:63:a8:8e:
                    2f:b7:f1:73:fc:0e:f6:26:d0:6a:7c:ee:51:e1:df:
                    be:67:19:e2:3d:dc:ea:65:cc:3e:97:91:e8:56:da:
                    4c:0a:38:9a:55:57:f9:e2:3b:33:dc:66:0a:12:b3:
                    b7:fc:c4:b7:0d:95:72:91:9a:54:29:da:5a:1f:d5:
                    b7:7c:ad:65:b9:72:fd:6d:00:a1:a2:75:cf:06:ed:
                    d5:8f:da:8f:10:e3:88:05:d9:51:51:a9:6c:5c:ba:
                    e9:7d:89:f2:17:bf:0b:fa:d0:8d:fb:d7:31:b0:0c:
                    f4:40:4b:5c:bd:d2:f0:15:fd:d4:0a:5a:da:8f:aa:
                    bc:ba:e3:3f:96:7b:3e:c3:d0:d0:40:b3:5f:fb:96:
                    f3:df:63:f2:e8:74:e8:d0:e8:fb:63:a5:fc:25:64:
                    0e:33:bb:ab:34:0a:4e:de:78:59:50:72:ba:04:3f:
                    92:e4:60:13:81:4c:e7:11:42:4f:f7:e7:5e:aa:e9:
                    6d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C6:07:91:E2:C8:43:C4:44:09:9C:57:D0:98:23:46:7A:1D:11:5D
            X509v3 Authority Key Identifier:
                keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:19:f0:cb:14:4e:f6:c4:31:5d:21:58:cb:8e:2d:f9:88:1e:
         05:70:ca:c1:c9:50:0a:7a:00:e9:e2:a2:06:c2:f4:f3:cb:f0:
         c7:19:7b:8e:66:ab:b9:04:bf:70:b2:82:f0:4a:06:58:4e:30:
         41:82:c4:a6:34:8d:1d:a6:f1:08:9f:10:6e:f2:ca:29:62:27:
         3a:cb:f3:de:1d:c1:61:c7:3d:95:14:63:30:2b:da:f9:e9:4a:
         46:d3:cf:f1:5e:2e:cd:01:49:7d:93:e0:79:f3:26:89:ae:39:
         7f:d0:7c:08:5f:52:43:17:22:e9:34:ea:5f:d9:45:f7:58:18:
         02:71:51:12:5e:19:c1:bb:4c:c5:5b:c2:b7:83:2f:73:1e:06:
         d1:32:69:e6:2d:88:d2:51:17:15:06:56:7c:e5:7a:2f:8f:0b:
         aa:bd:57:77:c8:69:72:18:6a:e0:6e:2d:d6:56:49:87:de:48:
         15:8c:58:a3:56:30:81:30:ec:82:d5:dd:34:19:50:5d:1c:43:
         4d:5a:d4:2f:93:c6:b5:8d:6d:84:98:49:3c:2c:e2:27:98:59:
         35:56:0e:02:0d:74:65:a6:f9:1f:09:e7:58:89:44:33:03:e9:
         a3:c9:3d:a0:c2:07:61:75:ec:86:a6:c2:9d:b2:f4:47:f2:d6:
         ea:4e:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:21 2026 by rpki-client