Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
File:                     Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json)
Hash identifier:          UUKJmwb0bNSI8Bf1n/eT+5bDQcL748ZtISrw/frJZXU=
Subject key identifier:   1D:65:74:9A:45:09:1A:91:1C:68:27:50:3D:F8:53:DE:40:14:CE:34
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Certificate issuer:       /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial:       019F916CB51E771A6A9FEDBAD7B4EA264D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
Manifest number:          15A9
Signing time:             Fri 24 Jul 2026 00:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:48 +0000
Files and hashes:         1: 00oBTfnWdUzIvMRCoDAsBiu6TY0.roa (hash: 2cUMeBAWg056ZrP6AEZcwET0ohxuoFacoijmfCtjIBA=)
                          2: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=)
                          3: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=)
                          4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=)
                          5: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=)
                          6: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=)
                          7: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=)
                          8: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: zRhT/fC2jhhYIflTW88BFB9iFUA7i/TsfBtPZ5zPBx0=)
                          9: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=)
                          10: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=)
                          11: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:b5:1e:77:1a:6a:9f:ed:ba:d7:b4:ea:26:4d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
        Validity
            Not Before: Jul 24 00:00:48 2026 GMT
            Not After : Jul 25 00:00:48 2026 GMT
        Subject: CN=1d65749a45091a911c6827503df853de4014ce34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f9:02:a2:b7:ca:46:de:1e:13:37:21:77:2e:
                    21:ff:27:30:87:98:1a:c5:9a:f4:d3:49:42:d0:8f:
                    f0:1d:a1:f0:9a:64:18:00:95:25:48:0d:89:82:1c:
                    b1:7e:3f:bd:0e:43:08:96:af:80:87:3d:cf:a3:6a:
                    2e:5a:ea:d1:67:bd:4f:02:90:d1:d6:c9:f9:7e:f6:
                    ea:7f:17:e0:29:e2:23:08:5f:2c:6d:0d:3c:f4:5a:
                    a6:56:0e:fe:8d:6a:79:c3:db:db:84:1f:37:65:bc:
                    fe:16:79:a1:e4:9e:89:69:37:0a:62:09:c5:4e:d1:
                    60:c2:1a:74:9c:ad:26:8f:00:79:24:39:41:7d:5f:
                    a0:62:7f:06:68:40:1c:41:16:7e:a2:6e:b0:10:d2:
                    de:e2:f4:93:c4:1f:8e:cb:57:e2:c1:dd:1d:76:94:
                    54:25:e1:0d:34:42:88:03:b9:04:b2:bc:4f:93:c0:
                    c8:cb:4e:ab:a4:f8:e0:b3:a3:2b:aa:93:48:c6:83:
                    62:5a:2a:8d:c3:55:3f:b6:8a:0d:13:77:a6:b1:59:
                    48:5a:04:f4:3e:2b:8a:51:18:c0:33:63:8b:03:77:
                    c2:48:47:d0:04:74:aa:99:72:ca:cc:27:de:7d:39:
                    53:2a:ac:2a:6b:0c:c0:b8:9b:1a:ef:cd:9c:a9:3c:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:65:74:9A:45:09:1A:91:1C:68:27:50:3D:F8:53:DE:40:14:CE:34
            X509v3 Authority Key Identifier:
                keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:13:55:87:17:eb:ad:14:90:45:64:04:c1:2e:ea:ea:8e:f1:
         d7:f2:55:13:eb:47:df:77:bc:3b:bc:d0:37:f6:f7:64:54:8d:
         4b:73:82:6d:30:cd:b7:e8:57:eb:c2:67:ce:c0:0f:9d:d8:22:
         1b:20:b0:42:fd:1c:da:36:bd:72:61:43:88:24:ab:de:eb:cd:
         86:b6:e2:b9:92:05:1f:c3:41:0b:b8:82:42:bc:49:0c:14:a5:
         e0:d7:9d:5b:40:a1:ec:bc:d3:b0:74:6e:b1:ca:76:d8:7e:28:
         40:6c:07:dc:fe:1b:d7:9c:cd:fb:f7:95:b2:b7:dc:98:89:07:
         01:9d:20:80:4b:92:01:b3:70:df:9d:ba:27:d5:54:13:12:67:
         2c:1a:05:b9:36:d3:ed:8c:d2:b3:84:f8:c3:0a:49:8e:9e:ab:
         f8:f8:fb:00:7e:98:85:14:62:db:52:34:7c:14:78:e1:c2:f7:
         07:77:d3:95:a8:8e:f1:fc:02:1c:e3:40:7a:af:d6:ea:94:13:
         72:e7:4f:1d:1d:88:2c:0d:0f:58:38:26:72:cb:ac:12:70:7c:
         18:00:ef:96:0d:01:d5:a5:81:ac:4f:18:ea:23:03:5e:16:49:
         68:ef:a4:57:50:19:16:78:c3:2d:bb:a9:8e:e2:05:fe:82:93:
         e3:f0:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:35 2026 by rpki-client