Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File:                     X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier:          /gcPeS3K5iN0yppYOf0Fcq2i3ct/938W34usw4BKdAc=
Subject key identifier:   E1:75:B3:84:75:9D:04:BF:5B:5F:AB:B4:4C:A1:A3:9B:E9:35:43:47
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer:       /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial:       019F92B64DB78EF4840CC1F2293D227C20CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number:          07ED
Signing time:             Fri 24 Jul 2026 06:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:48 +0000
Files and hashes:         1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: MWNQyHjISFNrY1ifg4P2+exAZfP7LHBEmH9jehPOcNE=)
                          2: hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa (hash: s7Q9n6FVyTwioyvvcuH0Je0WpF9fajbCSSnTwOxPywE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:4d:b7:8e:f4:84:0c:c1:f2:29:3d:22:7c:20:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
        Validity
            Not Before: Jul 24 06:00:48 2026 GMT
            Not After : Jul 25 06:00:48 2026 GMT
        Subject: CN=e175b384759d04bf5b5fabb44ca1a39be9354347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:21:54:be:e4:f4:0a:cf:f1:24:6b:48:ff:
                    1a:37:a6:21:f6:ec:55:b5:38:4f:9d:b1:3c:8f:91:
                    83:6c:b3:8b:ae:df:66:e0:c8:dc:88:c6:ae:fd:b5:
                    dd:36:3d:68:d4:f8:13:b4:6a:49:4c:9a:75:61:5f:
                    4b:5f:99:a4:45:e8:40:f2:3b:97:ec:f5:0a:4c:3f:
                    66:e4:d6:bb:3f:8c:fc:51:17:9e:a7:da:56:a9:ec:
                    07:43:c0:7d:00:65:5c:05:b7:18:12:ee:fa:53:7e:
                    7e:72:81:d9:83:54:0a:3f:2f:7b:ae:3c:59:b3:b9:
                    35:d1:cd:f4:bd:e2:45:c7:10:e4:04:7a:0a:85:a4:
                    5b:e2:08:d3:c0:32:ac:ac:8d:02:f3:a1:3f:75:c4:
                    b6:4d:1e:87:25:84:49:49:61:f4:b6:92:dd:4f:23:
                    71:d9:8c:62:d2:43:cf:c9:11:e5:31:1a:a4:01:dd:
                    50:6c:d5:c8:a8:6e:8b:2d:4b:e1:31:e8:54:9a:d7:
                    16:ec:0a:f8:19:09:42:8f:4d:61:c7:ed:60:c4:3b:
                    4d:c8:79:d7:9d:d5:1b:b0:09:a9:66:54:49:bb:b0:
                    b7:ec:f6:4e:62:78:04:35:0d:20:d4:05:71:d1:14:
                    e3:76:fd:67:a7:b2:71:d2:53:17:8e:32:68:c1:ae:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:75:B3:84:75:9D:04:BF:5B:5F:AB:B4:4C:A1:A3:9B:E9:35:43:47
            X509v3 Authority Key Identifier:
                keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:c5:68:b1:02:6f:d9:03:c0:0f:9a:78:97:b8:a7:92:36:
         39:10:e3:54:ce:60:ee:a4:99:19:ad:7f:1e:c0:fa:d5:7f:a1:
         72:0e:74:a9:75:b8:40:6e:62:6e:b5:ec:48:51:2c:c1:96:8a:
         56:cc:8d:89:db:c1:b5:0f:f1:b3:ea:46:4d:8b:1d:07:59:e7:
         27:ca:ef:6f:50:a2:d7:12:93:4d:b2:a0:a2:f2:ac:3f:6b:0c:
         6b:f8:c6:f5:fa:65:f1:ab:15:e8:b2:2b:0a:51:0f:09:c1:96:
         fc:04:6d:15:a1:65:30:e3:0e:15:4e:00:29:9f:1b:56:2e:e3:
         5b:24:2d:6b:d5:96:56:6b:cb:68:e0:6f:e8:6a:d3:02:b1:aa:
         49:69:44:45:ea:9b:c9:48:ab:23:6b:8f:5b:0b:f9:c8:9a:c8:
         52:b1:42:d7:dc:6f:24:76:61:65:db:5d:70:07:09:7e:a6:5d:
         7e:2a:49:7d:19:8b:d1:b7:c9:d4:00:2d:43:a8:98:4d:f8:7d:
         87:8d:3e:16:3a:35:11:2f:3d:47:e3:a5:5d:77:3d:1f:c1:e5:
         03:53:99:cf:f7:5c:53:29:78:21:71:fd:fc:be:02:06:e4:5d:
         6e:b0:8e:62:65:bc:09:b5:8d:a0:fe:87:d6:03:fd:17:f8:68:
         bc:95:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:58 2026 by rpki-client