Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File:                     Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier:          k4achbiM3NLXtJM45RazUEhynYIQ3sJNDzsR6mLXwT8=
Subject key identifier:   5B:6D:39:79:99:BD:C5:96:2C:32:EB:1F:2A:9C:B1:C0:C3:48:10:AE
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer:       /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial:       019F927ED903D954DDD8C5ABBC370AB99B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number:          068C
Signing time:             Fri 24 Jul 2026 05:00:14 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:14 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:14 +0000
Files and hashes:         1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: sXZfkJHhEhljaYl1yR5EZms7pNrOLgIdAH85S/L+xRo=)
                          2: zrY1kiCbt_RCBDyoPeb6Gt-rfXI.roa (hash: 99km0sbg09Xs5uX9uuCKMjDG2dbDXHFkyqnyOKsmuE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:d9:03:d9:54:dd:d8:c5:ab:bc:37:0a:b9:9b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
        Validity
            Not Before: Jul 24 05:00:14 2026 GMT
            Not After : Jul 25 05:00:14 2026 GMT
        Subject: CN=5b6d397999bdc5962c32eb1f2a9cb1c0c34810ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:fa:0c:99:7f:24:76:02:6f:75:0a:76:1c:
                    d1:10:6d:9c:99:04:22:fb:aa:12:21:83:fe:9a:32:
                    59:f2:b8:7f:6e:f3:a3:0c:52:58:07:81:d1:28:64:
                    c8:38:f1:c2:99:dd:5f:02:62:bb:da:20:53:7d:27:
                    40:65:27:ec:47:1b:e5:54:4d:b9:cb:38:6a:d1:8a:
                    a8:78:92:4e:bf:5b:19:1a:00:63:d7:aa:7d:3f:2f:
                    dc:16:47:45:92:11:81:46:00:7a:b0:d7:8e:63:3a:
                    25:b3:da:91:68:bf:0c:94:f1:0e:ab:d8:71:00:eb:
                    bc:c6:32:16:a0:11:5a:e7:46:fd:c2:93:e4:8b:83:
                    dc:83:30:ab:49:7c:ad:5c:cd:29:d8:12:5f:f2:b3:
                    13:bf:09:0b:bd:a8:c0:5a:a1:f7:1d:fa:20:61:fe:
                    88:bd:21:8e:4c:8c:81:71:7f:19:c1:bf:63:29:80:
                    1e:12:59:14:37:4e:68:82:58:c7:86:c0:c7:75:90:
                    14:27:64:a2:91:4e:bb:b8:e2:11:4f:41:d3:dc:de:
                    0d:b2:84:7c:dc:3b:4e:90:6b:45:2c:08:da:a0:c8:
                    20:e1:e0:0f:88:62:f6:f5:b0:fa:6e:b1:59:ae:46:
                    dc:fa:85:08:87:53:aa:5b:a8:c3:b2:2f:b2:69:18:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6D:39:79:99:BD:C5:96:2C:32:EB:1F:2A:9C:B1:C0:C3:48:10:AE
            X509v3 Authority Key Identifier:
                keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:d8:34:8b:4d:9a:0a:a3:cb:a8:de:a0:20:ed:8c:64:6e:
         9b:91:67:e7:3f:6f:2a:49:09:2f:59:4a:e5:13:47:c1:26:ce:
         84:1f:16:d3:a2:0f:0f:88:3a:68:c2:1b:34:70:d8:33:55:5e:
         24:f2:5b:15:50:34:09:18:d9:2d:a7:29:d5:73:17:da:73:a7:
         9b:8b:e6:ea:89:6b:cf:28:8e:77:e5:08:12:1d:d9:38:20:dd:
         7f:9a:7d:09:5d:4b:74:2c:ab:db:58:75:a1:6a:22:2f:d0:0c:
         66:86:80:02:3a:e3:5d:a4:c3:22:b8:cc:b9:af:da:cb:7b:f1:
         38:60:8e:67:7f:21:6d:c7:0d:0c:1a:b7:6c:d8:38:12:a5:c5:
         bd:8d:73:cc:b9:da:b4:c8:bd:2c:4e:1c:90:5c:45:6a:31:be:
         d2:ff:f4:74:53:a2:da:95:34:4c:60:ea:b2:b2:55:a3:d0:a0:
         33:9c:c7:49:85:10:35:cf:6c:4c:7e:38:89:89:36:a1:97:cb:
         42:f5:54:1f:37:ff:c4:73:a7:4b:8e:92:c7:50:71:f7:fa:d6:
         91:8d:85:de:c5:9a:0d:36:1a:ee:dc:06:b0:14:5f:9c:ea:1f:
         a9:67:69:f5:0c:a0:1c:0f:85:35:87:3b:6f:f1:fc:e3:bb:1b:
         58:6d:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:59 2026 by rpki-client