Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File:                     xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier:          8KW256PjW46nzI5GpLfY8Y52MtcFDGnKBGwl16NFD/A=
Subject key identifier:   77:4F:9C:CD:D2:16:73:EB:EF:6E:C6:9A:C0:47:5A:99:DD:14:45:99
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer:       /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial:       019F93C89DBF73C09B02B137E32D41CEC258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 11:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:26 +0000
Files and hashes:         1: 3cbC9vEeA_OfonVqz4nPVMIodpI.roa (hash: IGj7kwjiWovmIKkao+Fqphubf76yFz/hI4+0oTX7zU8=)
                          2: HRkMr8-Sqbu9H440GtqWqBMvrRY.roa (hash: u8W2AOx3ZvteH41TI9EbqMt/z7mq+kc+OzabEJ0zUCM=)
                          3: wemV0d9_X9NASzk5HBev3Xd67ss.roa (hash: xfH5MjrkqijIT96yucgZV5bkcjqDyV5OtrwCabRA68Q=)
                          4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: PTISpjC9BllOm8KzdqiD0BDcUSy9GiuzgUOyTfR5xHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:9d:bf:73:c0:9b:02:b1:37:e3:2d:41:ce:c2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
        Validity
            Not Before: Jul 24 11:00:26 2026 GMT
            Not After : Jul 25 11:00:26 2026 GMT
        Subject: CN=774f9ccdd21673ebef6ec69ac0475a99dd144599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b4:c0:24:9f:d3:6b:52:9d:29:bd:14:f4:a4:
                    af:ee:f9:46:f6:1d:16:c7:73:c0:02:4a:e7:ba:6d:
                    06:f0:83:63:d1:8c:eb:be:4c:8f:cb:dc:f6:4d:5d:
                    2f:c4:8a:02:52:f7:8f:d8:c1:9f:fd:d0:fb:24:63:
                    34:96:70:0c:23:7a:59:6f:34:88:1a:be:3b:3d:65:
                    75:6d:f3:84:1f:8c:13:3f:17:84:a2:b6:76:44:9c:
                    e8:c0:92:04:a7:22:14:bd:93:09:a0:50:70:88:c7:
                    e2:59:8f:59:83:28:7b:73:3e:81:e7:66:55:f3:43:
                    9c:a2:c9:71:d3:a9:79:4d:3e:24:39:ce:75:6a:76:
                    0a:81:ef:83:1c:51:c6:26:51:db:97:0a:cb:2e:c1:
                    4c:f4:dd:5b:4a:c0:4a:16:4a:8e:f2:e9:9f:f3:48:
                    bc:bd:af:8d:fb:98:c5:d5:5f:36:4f:68:f0:c2:38:
                    ac:2d:fa:f7:5d:25:11:2d:92:ca:ce:b3:e0:95:34:
                    c3:8d:fe:c9:c3:d9:d2:38:30:c9:1d:6c:92:ac:7f:
                    73:d6:74:e6:b2:e2:ef:57:58:36:09:22:f7:74:51:
                    ef:05:4d:37:98:86:46:a5:30:0e:1a:1c:a8:1b:0f:
                    9f:ef:cf:86:d0:62:a5:77:e5:d0:c6:bd:8c:41:24:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:9C:CD:D2:16:73:EB:EF:6E:C6:9A:C0:47:5A:99:DD:14:45:99
            X509v3 Authority Key Identifier:
                keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0e:c0:e9:b4:41:18:75:63:b3:61:a4:e1:71:96:40:61:23:
         85:ff:4c:9b:44:2a:af:70:36:35:98:f6:d2:55:80:c4:de:c7:
         21:e8:4f:6a:1a:cd:45:e6:02:d9:01:92:e9:68:18:d4:f1:5d:
         12:3a:cd:22:d4:8c:13:01:a2:10:69:e7:70:44:c9:a1:ac:70:
         84:78:35:13:68:80:17:08:da:19:af:5b:83:81:12:33:5b:a9:
         99:c1:90:fd:37:d1:fb:a6:6f:7a:6e:d5:09:b3:eb:0d:b5:f1:
         3f:45:b2:56:a0:07:04:50:67:57:83:ca:1c:45:1e:4c:c1:a8:
         45:1b:13:59:ea:ad:80:48:d2:6c:22:53:3f:4e:9f:ac:b7:76:
         02:35:29:30:c3:89:b5:31:b8:51:ff:13:13:0e:a2:5a:7d:1b:
         03:e3:a7:2c:e5:20:50:4f:0f:b7:9c:cb:7e:ff:fd:14:ab:3d:
         3c:d6:1e:e4:fb:ad:1d:1a:ad:7e:12:28:71:1a:f1:20:19:59:
         72:79:03:f9:21:e1:1f:da:0d:f9:12:1f:0b:98:df:9b:8a:08:
         b7:fc:b8:89:a0:9a:86:6c:95:22:fc:10:cf:92:e9:bd:92:d2:
         aa:e7:3d:24:35:67:58:6f:92:a5:15:4c:49:22:19:7c:a9:ce:
         21:b7:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:15:57 2026 by rpki-client