Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File:                     XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier:          rfOjjRcBXwXOOUPrGEDvOkQPeJtoEY4+uIsUm5kZ4ys=
Subject key identifier:   F5:6F:CE:F9:34:B7:DB:0F:85:66:56:E8:DC:92:CF:CF:72:C0:33:F0
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer:       /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial:       019F8F7EBDA94737F9C4E2CEAD077A20BFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number:          0916
Signing time:             Thu 23 Jul 2026 15:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:15 +0000
Files and hashes:         1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: KNPde5k58wgFf5ngzruErYQVO1YiTzX5pcNZwBj0dQE=)
                          2: _z_wVcXFgGyo2KL2OVSqBhSh8xw.asa (hash: /1A8zlKWYmqlgxFi5Pz0OpVqaauhxn3c+pURid2tACQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:bd:a9:47:37:f9:c4:e2:ce:ad:07:7a:20:bf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
        Validity
            Not Before: Jul 23 15:01:15 2026 GMT
            Not After : Jul 24 15:01:15 2026 GMT
        Subject: CN=f56fcef934b7db0f856656e8dc92cfcf72c033f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a2:2f:18:f7:5e:77:24:a2:ce:32:02:66:1c:
                    48:60:6b:a3:0f:08:00:c1:f1:26:fe:c5:c8:88:05:
                    aa:b9:7f:65:5c:c5:19:6c:75:d9:f9:07:57:a3:9b:
                    f5:5e:dc:64:50:31:c0:b1:00:89:22:73:4b:4c:08:
                    1b:de:b8:12:03:01:02:2a:ef:88:f4:60:77:33:27:
                    6f:1a:ef:68:a8:47:e1:b0:d5:64:32:0f:74:45:e8:
                    7f:ab:e8:9b:3e:7d:e8:67:e3:de:06:a7:60:41:87:
                    e2:ba:60:a0:62:0c:06:6e:d5:61:e5:c9:97:13:0d:
                    8d:e6:b9:7c:e4:ad:dd:cc:7b:7c:24:23:59:a1:ad:
                    17:88:73:19:ba:47:fb:4c:e8:5d:a0:54:e1:fd:81:
                    b9:ea:38:e5:08:48:83:c9:19:26:c5:f0:a2:5e:0e:
                    51:d7:1a:03:9e:b3:e1:de:d3:7b:85:e0:5c:50:28:
                    8e:72:ae:f1:fb:8f:7a:09:c4:97:fc:97:84:c6:91:
                    04:52:86:4d:5f:8a:f9:c6:d4:c1:eb:a4:00:f9:7f:
                    cc:f3:66:55:8a:d0:5a:c8:45:90:ab:07:8e:b2:da:
                    ea:23:9b:aa:c0:4f:de:f1:7b:80:ee:d1:f1:40:b3:
                    38:09:83:34:9a:4a:89:f3:15:ed:25:32:92:2d:1c:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:CE:F9:34:B7:DB:0F:85:66:56:E8:DC:92:CF:CF:72:C0:33:F0
            X509v3 Authority Key Identifier:
                keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fd:0e:fd:d2:55:bf:20:80:0e:13:6e:50:c7:84:45:fc:c0:
         b9:73:4d:a1:61:83:99:83:3d:27:8c:e5:d9:4d:ef:83:f8:ca:
         57:3b:98:20:9b:a8:b1:09:21:1a:b3:c8:4e:f0:03:40:51:3e:
         97:b9:99:3a:64:ae:19:7e:b2:c7:83:1d:62:39:5e:04:a8:e7:
         12:2e:57:2a:69:03:17:da:04:64:e0:8b:53:0b:08:38:9b:4a:
         b0:f0:e6:ef:1e:09:c1:c8:d9:af:04:26:04:53:ac:30:22:ff:
         19:83:a3:83:a9:a3:b0:72:88:bb:1e:c3:2d:81:f4:69:e9:31:
         97:41:6f:af:ff:42:3f:92:a6:82:31:6c:7b:36:99:72:89:7e:
         b0:52:14:dc:85:cc:43:d2:8b:03:5e:d5:fb:53:7a:f0:5a:93:
         ee:7a:31:c7:72:84:67:6b:10:0e:de:19:7b:4f:d0:6b:67:14:
         67:f8:32:78:ac:ca:c2:3a:9c:89:47:2b:e1:78:fe:5a:b8:f8:
         bb:fe:42:e1:c4:73:7d:c5:4c:4f:e8:b7:06:b4:88:07:57:6c:
         10:28:53:13:00:02:c0:44:52:95:78:af:ec:56:c9:60:77:4e:
         65:e1:74:80:22:63:54:cd:b4:e7:1b:fa:7e:3e:d9:de:a9:3c:
         91:c0:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:34 2026 by rpki-client