Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          Rm0x0r1Qm42eINNBcU02PBz9SciQvJclKAixlDSMx6s=
Subject key identifier:   E0:DD:E5:29:2F:1F:05:67:AD:95:35:E8:84:51:D7:1E:CE:AE:86:2B
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019F92B5E8DA5BE6CB2EB674EC1C775DB6ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          19FF
Signing time:             Fri 24 Jul 2026 06:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:22 +0000
Files and hashes:         1: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
                          2: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
                          3: jdER3phX5mbgg6aj7xFihDYqyto.roa (hash: Gf4TEMTFntYzNK0gZEShHChZxR+vxTAfCM1wkhuszWc=)
                          4: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: 09Ej8FUHwA7/uZwKrOUp3WkQZWUoyIXDOJb4UKgyXYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:e8:da:5b:e6:cb:2e:b6:74:ec:1c:77:5d:b6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Jul 24 06:00:22 2026 GMT
            Not After : Jul 25 06:00:22 2026 GMT
        Subject: CN=e0dde5292f1f0567ad9535e88451d71eceae862b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:e3:4c:f8:1e:92:16:9f:57:f7:34:a3:62:
                    10:1c:c2:cd:03:1a:f4:e8:d0:eb:09:f4:46:75:2a:
                    a3:93:45:5c:2d:68:5e:b7:80:81:89:2a:a2:77:ac:
                    9a:19:44:ca:61:58:be:69:72:6d:e5:a6:dd:98:13:
                    19:d4:88:6e:ae:94:6d:d3:85:bf:fd:50:5d:cd:93:
                    e9:71:67:62:f2:c6:2f:ae:02:54:e9:c5:d5:e7:2c:
                    e3:c9:7e:86:db:51:87:b2:93:0b:90:02:ba:4c:10:
                    6f:70:f7:e1:4f:d1:d2:e3:19:1b:21:4e:70:3e:15:
                    c2:8d:7a:a4:f8:31:fd:8d:5e:be:9b:31:cd:33:d5:
                    24:42:32:80:33:f6:37:23:ed:f3:23:e8:13:db:1e:
                    b4:b9:dd:d6:cd:33:95:13:b2:fd:06:b1:ce:62:0f:
                    81:d0:59:ba:55:19:b8:b6:c2:62:88:b9:51:4b:76:
                    a5:e2:15:3a:06:1b:63:07:b0:c7:51:20:3a:d3:c1:
                    87:e6:9d:88:2e:78:58:85:22:a7:f8:ae:d3:ef:bb:
                    78:6e:f0:81:d0:c0:ee:c8:47:c1:81:98:56:e3:48:
                    44:d6:50:2d:e5:16:3c:17:34:62:14:3e:64:93:84:
                    61:05:c7:b5:48:3a:8e:82:73:ee:b6:55:93:6c:36:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DD:E5:29:2F:1F:05:67:AD:95:35:E8:84:51:D7:1E:CE:AE:86:2B
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:13:7b:d5:f2:cc:7f:83:ca:42:1c:7c:fa:82:80:60:59:
         13:73:56:96:1d:4f:99:a2:dc:49:ce:46:be:84:33:f4:4c:59:
         7b:e1:f7:ce:29:3b:b5:7e:5a:82:1d:cf:35:91:88:fb:99:35:
         e8:05:9d:90:4d:02:94:65:c9:10:38:99:9f:6b:5e:47:a5:01:
         02:13:a4:eb:82:42:ea:eb:1f:57:14:49:f1:2b:7a:fd:d9:a3:
         82:73:ef:a7:99:b8:c6:9a:cb:da:3a:c4:47:52:08:24:c8:ee:
         4e:c1:8a:61:12:1b:8d:07:24:d9:80:6c:28:c5:ed:b3:d1:bf:
         33:f6:ec:87:20:0f:53:f0:53:ef:ca:70:4a:ee:d9:a1:72:8c:
         0e:b5:90:ae:92:03:93:d5:86:a0:f4:fd:4c:5c:f5:77:04:40:
         0d:02:dd:0a:c0:30:81:01:36:fd:fe:cb:3b:50:36:0e:0d:c6:
         3a:6e:29:60:76:a7:3e:74:ea:55:fd:68:91:32:0a:39:91:3c:
         10:6f:a0:b8:9a:2e:6c:dd:43:75:77:ab:88:fa:6d:30:47:c3:
         63:f4:06:e7:3d:e4:fa:29:a5:e4:05:15:17:33:c2:3e:ce:60:
         db:53:66:08:1f:79:cf:ae:e0:c9:d9:3e:9c:f2:f0:9f:3d:76:
         d5:26:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:00:10 2026 by rpki-client