Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File:                     XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier:          qCa/1vwo8W5bjRN0XyEdDzDcwHSr+Hev1ubaRq2lojk=
Subject key identifier:   8D:6A:28:61:0D:86:D2:66:61:4D:F1:5B:8E:90:E4:62:8B:67:57:6E
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer:       /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial:       019F8F7E2ECB7EEA587A3EDFA3E8BF35E7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 15:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:39 +0000
Files and hashes:         1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
                          2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
                          3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
                          4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
                          5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: ikkB/tce4VDY+pM1rP7i8Gsd5ExOvqM4r6/tUlpHyB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:2e:cb:7e:ea:58:7a:3e:df:a3:e8:bf:35:e7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
        Validity
            Not Before: Jul 23 15:00:39 2026 GMT
            Not After : Jul 24 15:00:39 2026 GMT
        Subject: CN=8d6a28610d86d266614df15b8e90e4628b67576e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:6f:43:78:30:5d:5b:d0:06:bb:a2:cc:07:
                    18:38:32:0d:95:84:a5:c6:e2:d0:ca:2a:62:4f:cf:
                    74:b2:c2:47:92:32:46:c2:9e:4b:a1:d6:73:dd:a8:
                    46:02:1d:66:bd:5e:47:54:2c:19:8a:82:6d:b4:3b:
                    83:14:2c:4b:b9:f6:dc:bb:71:c4:bc:b8:f7:bc:a8:
                    68:66:cd:7c:c9:12:b4:61:0f:88:8d:cc:ec:e2:c4:
                    37:0c:dd:5a:6a:23:8e:39:87:df:88:e5:a6:7a:58:
                    36:87:db:fb:49:0a:8e:25:67:78:3b:52:0b:21:c3:
                    bf:cb:23:32:a0:b2:c2:07:eb:00:6f:e1:32:cc:35:
                    c1:c7:89:e3:d2:9b:44:32:a0:d6:93:a9:22:5f:e1:
                    8e:2d:32:75:c2:c6:e5:4c:60:f9:fc:64:4d:ba:aa:
                    fe:aa:75:0d:b8:1a:e8:2b:e9:f5:a7:a9:1e:5f:fd:
                    2f:7d:63:94:9c:55:77:b5:33:46:fa:a0:ed:03:3e:
                    34:fb:d8:de:dd:2e:df:69:d7:28:e0:15:21:0e:7e:
                    3b:d2:24:f4:3c:75:ae:25:86:e9:08:0d:a0:0b:db:
                    29:92:73:b5:10:68:44:ed:da:dd:c2:c4:63:ba:b9:
                    bb:82:c2:0e:6f:0b:ad:fb:f0:33:c4:fe:95:88:1e:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6A:28:61:0D:86:D2:66:61:4D:F1:5B:8E:90:E4:62:8B:67:57:6E
            X509v3 Authority Key Identifier:
                keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:a4:7c:7a:d4:b6:33:0f:69:48:af:14:aa:9c:68:d2:d6:
         c7:20:cd:ea:9a:c0:e1:c7:df:22:b7:5a:2a:bb:3a:a1:09:2e:
         35:32:78:29:96:85:24:de:2d:85:04:a8:84:95:d3:d1:c0:7f:
         3b:fe:6f:fd:72:8d:fd:3d:93:f6:8f:2f:bf:07:2c:0e:5e:3e:
         ac:60:a6:55:d7:da:2e:a4:21:dc:80:4d:46:7b:df:59:eb:09:
         24:e2:d9:9c:2d:98:d7:5e:f7:62:f7:3d:b2:2a:04:8c:d8:36:
         6f:6d:e9:f4:39:18:98:95:10:df:ec:fc:f1:ca:d1:09:41:ec:
         fc:9c:70:03:23:32:bb:f6:59:d8:ce:e7:8d:70:66:69:07:69:
         11:71:e0:a1:3b:42:3d:32:a5:21:82:8f:e9:5f:99:19:79:69:
         4d:05:f1:ea:00:4a:8b:45:53:42:44:b6:1b:68:0e:bb:14:c6:
         30:f7:f3:d3:8a:18:22:65:cc:93:b8:1d:a3:ec:26:8d:60:ea:
         b4:68:b4:e3:c8:1c:44:ed:51:82:c0:42:11:17:fd:c1:b7:84:
         65:7f:cc:7f:6d:e7:33:b4:4e:f6:2a:de:20:8b:9d:d6:13:32:
         63:77:fb:51:1f:f0:19:59:bf:ab:f3:4d:5b:cf:27:fb:27:0b:
         67:38:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:35 2026 by rpki-client