Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          UK0+7MQCF5q1gREm8G315Vym5r3BZJPRsG4EO1yyUGM=
Subject key identifier:   BA:CE:6F:7E:B4:3F:10:6A:71:51:43:04:8B:21:1F:EC:6B:7D:36:2F
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       019F8FEBDCB07E61F2D059D28E45609C898B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1D7B
Signing time:             Thu 23 Jul 2026 17:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:27 +0000
Files and hashes:         1: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (hash: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY=)
                          2: 28RKVVs5L70qaDfgNeKYKZtP2bY.roa (hash: LsRqiFo9vSqBUMfUHeG2KDSHphr9EeFlpCc9GJ2T6qU=)
                          3: 838zGYUvLSOnbOyvQCG3BmbHt6g.roa (hash: bIPDOLUdfK++4pnFNnItCxubZqKDVCPUPQRRiWDsuQE=)
                          4: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: tDPjhG8/TUorda0ZKQMSTTIC5dGlb6xHFs+zA2thRbQ=)
                          5: onUcHcMkvFv3eRd2HH3aPRf6vhg.roa (hash: FMvdGW8G/i8Ujn/8ecIl88xpPzK27z5df59EqMBKxi8=)
                          6: zlLTIm7_QxUIi55M7RwMbt95iIQ.roa (hash: fDPF6ZEfEYsC4ffY8eEmFZICdqyb8tsUKaWPIRXssWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:dc:b0:7e:61:f2:d0:59:d2:8e:45:60:9c:89:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Jul 23 17:00:27 2026 GMT
            Not After : Jul 24 17:00:27 2026 GMT
        Subject: CN=bace6f7eb43f106a715143048b211fec6b7d362f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:84:7f:f0:8a:ca:9b:fe:c2:58:83:a6:9d:
                    d6:50:3a:3c:06:52:5e:a3:0c:8c:7d:02:af:3b:0b:
                    bb:d5:63:ad:b0:82:18:d4:db:15:3a:be:a7:2d:13:
                    9c:89:42:8a:75:1e:53:c4:d5:51:c4:0f:59:aa:84:
                    b4:35:bc:58:71:48:90:5f:27:f3:78:c9:7e:6d:2a:
                    6e:0d:d7:b6:cb:e3:6f:a0:73:91:0a:78:21:3e:9a:
                    0a:c2:f2:d8:c5:2b:b8:20:5b:46:ec:6c:75:f2:9e:
                    33:48:70:7a:21:cd:cd:4d:fe:62:17:71:0d:9b:59:
                    ec:46:31:7c:68:2c:ac:2c:9c:91:af:93:08:49:49:
                    3b:86:7f:2e:c9:31:b7:8d:1a:52:8c:b7:ff:a1:e9:
                    19:1e:f8:47:d1:1b:44:17:03:68:1a:57:a7:a3:0b:
                    9a:71:6b:b0:9f:c6:b1:4c:08:31:56:91:88:9c:7b:
                    e2:a6:c0:7b:60:9a:bc:e5:b6:a4:c5:5e:16:09:70:
                    ee:dc:97:d7:28:46:8f:34:81:2d:cd:91:c4:80:18:
                    97:32:7c:06:26:f7:7d:9c:81:27:7c:92:d3:67:f1:
                    11:23:11:d7:00:51:a4:b3:44:7c:d2:01:b3:c5:27:
                    b6:41:6c:95:42:c2:45:82:b5:05:f2:76:4e:f4:92:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CE:6F:7E:B4:3F:10:6A:71:51:43:04:8B:21:1F:EC:6B:7D:36:2F
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:77:f7:e8:ec:00:83:28:40:b3:c8:ac:8c:70:70:1d:d9:
         8f:88:57:f2:a5:e4:65:31:3d:48:ec:a0:a1:ba:9d:df:56:ad:
         c3:cf:8d:99:25:ae:00:49:a2:39:64:ff:34:1a:7d:1b:f4:b8:
         7a:3b:c7:af:2d:0a:fa:46:a3:ae:11:4a:f5:58:98:d0:b1:a8:
         52:d1:dd:39:05:f2:b1:54:06:52:8e:21:dd:22:fc:c2:6d:a6:
         a2:b8:96:f0:46:4b:9b:9f:50:b8:2c:9f:47:57:03:b4:fe:d2:
         13:93:b9:79:51:3d:3c:8e:d9:52:e5:ae:b6:2f:1b:b1:68:42:
         2f:cf:68:0b:1f:65:77:c0:38:93:2d:fc:33:fb:83:5c:73:d8:
         aa:83:95:c9:2c:61:a9:37:a8:61:8b:de:07:4f:a2:7c:20:70:
         a5:1b:12:49:ef:9b:7c:01:05:91:90:17:23:7f:f8:67:0e:c3:
         18:54:e8:e3:25:47:c2:d9:62:6f:a1:2c:92:fb:35:76:7a:56:
         cd:4e:4d:97:b6:a3:93:12:30:5b:d6:99:16:1b:af:87:30:a4:
         4f:d9:25:7e:64:ec:e9:b7:54:d1:20:6b:39:5f:7b:25:4e:13:
         10:3b:91:de:54:e4:dc:f3:2c:c3:93:7d:17:4f:70:c2:f3:7b:
         ba:29:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:24 2026 by rpki-client