Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
File:                     xcidUmDLNP27s7wlv0rbr0zcaKA.mft (raw, json)
Hash identifier:          y05p288FCoxfENmbkf4Ps5jgrc7SwLuSUMpkqj24Gz0=
Subject key identifier:   76:28:F1:B8:AE:18:DC:2E:70:B6:8E:E0:12:EC:81:B4:FD:EB:F6:AE
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Certificate issuer:       /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial:       019F8F46E91876950B412DC5FCAEB8B26E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
Manifest number:          0982
Signing time:             Thu 23 Jul 2026 14:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:16 +0000
Files and hashes:         1: JD_hILTLs5WiN-GGz9cnjaMmPmg.asa (hash: w3ngbPPlSEh0i5ZlPs9dJQ8lVMYy1vGnqLwn37EOyHY=)
                          2: xcidUmDLNP27s7wlv0rbr0zcaKA.crl (hash: TA9CAiGB5BgN6uxBUY/CNXjdcIlW/BZ3SO3d/tAIWd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:e9:18:76:95:0b:41:2d:c5:fc:ae:b8:b2:6e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
        Validity
            Not Before: Jul 23 14:00:16 2026 GMT
            Not After : Jul 24 14:00:16 2026 GMT
        Subject: CN=7628f1b8ae18dc2e70b68ee012ec81b4fdebf6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:7d:77:64:d7:9c:4c:4f:0b:cd:57:3e:d0:
                    07:fb:d9:4c:2a:8f:cc:08:92:e8:3f:8c:cc:f8:db:
                    2a:3a:3b:c5:cd:2a:c1:b8:70:da:5e:c5:a7:f4:8f:
                    de:6e:f5:b8:2f:1f:c3:c0:b6:9c:77:3b:9e:de:28:
                    a3:9d:2e:01:71:f2:52:c8:2f:85:1e:7b:42:5c:38:
                    dd:01:e2:d9:af:21:7b:e5:f9:63:43:f3:f7:fe:6b:
                    cb:1f:ba:b9:65:db:13:8e:f2:b2:e2:bf:f4:be:2e:
                    42:45:d2:90:bf:57:80:5e:10:c6:cf:fa:fc:28:6d:
                    99:28:4e:2d:70:03:5a:2c:6c:b1:e2:5e:ca:2a:ff:
                    2b:4c:6a:07:f3:93:38:03:4a:79:c8:d6:f5:7f:70:
                    bb:d5:45:37:d5:48:63:24:ae:ad:af:b9:a8:81:98:
                    8d:50:12:ef:1c:b5:cb:0a:07:74:81:49:bc:4e:52:
                    3e:78:7e:df:3b:f7:68:6b:dc:54:10:30:5a:b7:a0:
                    5d:4c:a3:c0:64:8f:01:1a:6a:77:0d:e0:8a:4b:76:
                    9a:e5:81:2f:8b:98:1c:e7:a5:bd:88:ff:25:4d:2f:
                    34:9f:a6:7c:08:3b:b0:2a:63:1c:fe:f7:b8:6c:2b:
                    ff:67:b7:dd:f8:07:84:04:2b:a6:14:a9:46:bd:dc:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:F1:B8:AE:18:DC:2E:70:B6:8E:E0:12:EC:81:B4:FD:EB:F6:AE
            X509v3 Authority Key Identifier:
                keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8c:fd:f1:3e:c3:d8:52:a4:b0:6e:cd:56:3c:b7:0c:30:8b:
         cf:b7:69:ac:ec:ae:41:c2:4f:99:a0:46:83:e7:13:c9:a3:55:
         da:2a:97:5a:33:ec:a1:43:0f:dc:c6:d5:10:2e:ea:02:4c:38:
         6a:75:57:f3:29:d5:7e:df:d6:41:a6:39:96:d7:8b:b4:45:17:
         a1:18:8a:fd:9d:92:5f:82:e0:b3:f1:2f:10:12:cc:84:87:85:
         c2:23:48:2b:e2:17:ab:64:f6:3f:b4:50:12:0d:e3:28:df:38:
         40:21:a0:15:d2:76:94:aa:c1:88:71:3a:65:13:de:ee:c1:28:
         ad:54:73:01:50:ca:12:ad:65:6e:f3:b9:96:1e:69:93:10:d8:
         c5:fc:06:a8:bf:2b:36:cf:8c:84:46:ce:87:f0:06:29:55:3e:
         e9:0b:01:ce:03:a4:42:93:8a:7b:18:3b:8b:10:d2:47:ae:e8:
         91:30:51:0d:75:97:3c:59:71:9e:d9:8e:78:89:2a:28:a4:a3:
         97:d4:08:fc:61:75:bb:f4:aa:1f:ec:0a:25:5f:bd:99:51:a6:
         37:a9:44:a0:b4:09:16:be:ce:0b:63:47:38:fa:99:da:74:c8:
         ea:41:7f:48:83:05:cc:00:e3:21:6e:35:e8:77:d6:41:1c:eb:
         4e:b3:22:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRukYdpULQS3F/K64sm4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Yzg5ZDUyNjBjYjM0ZmRiYmIzYmMyNWJmNGFkYmFmNGNk
YzY4YTAwHhcNMjYwNzIzMTQwMDE2WhcNMjYwNzI0MTQwMDE2WjAzMTEwLwYDVQQD
Eyg3NjI4ZjFiOGFlMThkYzJlNzBiNjhlZTAxMmVjODFiNGZkZWJmNmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6F9d2TXnExPC81XPtAH+9lMKo/M
CJLoP4zM+NsqOjvFzSrBuHDaXsWn9I/ebvW4Lx/DwLacdzue3iijnS4BcfJSyC+F
HntCXDjdAeLZryF75fljQ/P3/mvLH7q5ZdsTjvKy4r/0vi5CRdKQv1eAXhDGz/r8
KG2ZKE4tcANaLGyx4l7KKv8rTGoH85M4A0p5yNb1f3C71UU31UhjJK6tr7mogZiN
UBLvHLXLCgd0gUm8TlI+eH7fO/doa9xUEDBat6BdTKPAZI8BGmp3DeCKS3aa5YEv
i5gc56W9iP8lTS80n6Z8CDuwKmMc/ve4bCv/Z7fd+AeEBCumFKlGvdxCuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYo8biuGNwucLaO4BLsgbT96/auMB8GA1UdIwQY
MBaAFMXInVJgyzT9u7O8Jb9K269M3GigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjNiMTQtNGU2ZS00YzMxLTk2YmUt
OGViY2QwOWIyYmNhLzEveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82MjNiMTQtNGU2ZS00YzMxLTk2YmUtOGViY2QwOWIyYmNh
LzEveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4z98T7D
2FKksG7NVjy3DDCLz7dprOyuQcJPmaBGg+cTyaNV2iqXWjPsoUMP3MbVEC7qAkw4
anVX8ynVft/WQaY5lteLtEUXoRiK/Z2SX4Lgs/EvEBLMhIeFwiNIK+IXq2T2P7RQ
Eg3jKN84QCGgFdJ2lKrBiHE6ZRPe7sEorVRzAVDKEq1lbvO5lh5pkxDYxfwGqL8r
Ns+MhEbOh/AGKVU+6QsBzgOkQpOKexg7ixDSR67okTBRDXWXPFlxntmOeIkqKKSj
l9QI/GF1u/SqH+wKJV+9mVGmN6lEoLQJFr7OC2NHOPqZ2nTI6kF/SIMFzADjIW41
6HfWQRzrTrMiiw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:59 2026 by rpki-client