Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File:                     Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier:          w9PwwSrZ6loR4t6tdofUyz/oP4+P7pyCJ2hHfOEvkVM=
Subject key identifier:   A1:95:CA:B5:89:69:67:A8:90:DF:68:B3:36:4A:5F:76:FF:F9:BF:3D
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer:       /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial:       019FABD0DBB65E821762C3143D6B76A601C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number:          0DFD
Signing time:             Wed 29 Jul 2026 03:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:19 +0000
Files and hashes:         1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
                          2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
                          3: TAOBPT5H68OOFn-aKgpIl79l-88.roa (hash: r/7rpZ5+y5pBnxkFqNUutBAb1N4xvdrVCeNUer0qRTE=)
                          4: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
                          5: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
                          6: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: 5JBS43d4ZvEg2WjzbmSFA6JicWJWW2HWw9J2vIHWZNE=)
                          7: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
                          8: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
                          9: iTEBApGbXIQld6L8Gn4Udz3xB-U.roa (hash: HMQe1B8krTvbu6yUHhju4zyKwvmO6+uDtYtQV221HaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:db:b6:5e:82:17:62:c3:14:3d:6b:76:a6:01:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
        Validity
            Not Before: Jul 29 03:00:19 2026 GMT
            Not After : Jul 30 03:00:19 2026 GMT
        Subject: CN=a195cab5896967a890df68b3364a5f76fff9bf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:5b:3b:86:4b:1c:f5:7c:0e:d1:0b:e0:75:
                    b9:e3:5a:30:da:86:7d:42:76:9b:ce:a4:30:d0:42:
                    95:a3:17:f4:a1:f7:75:7e:82:a8:17:3c:5e:10:6c:
                    c3:99:26:d0:99:9f:23:f4:dc:a1:92:ad:02:d8:c5:
                    43:79:43:02:fa:84:19:62:8c:08:a8:cb:7d:0b:16:
                    a5:3f:05:8c:da:c5:6f:93:28:d1:b8:12:30:d3:d6:
                    c6:56:06:8f:9a:41:cf:c2:b5:2c:b4:d0:c1:7c:d8:
                    ac:19:a0:21:d6:a7:e1:ee:0f:89:53:d0:56:95:42:
                    d7:bd:7f:c0:23:24:d3:46:58:db:31:0b:54:71:11:
                    7e:45:52:93:64:d3:ff:c0:8c:31:6b:e3:0d:47:10:
                    76:7f:64:85:b2:be:a0:bf:e6:e6:4f:ca:bf:d8:1c:
                    9f:03:c5:33:cf:69:30:4f:c5:eb:aa:eb:6d:15:d6:
                    91:a5:ce:72:71:cb:e7:0f:1e:c7:86:d7:a8:b1:4d:
                    74:51:72:21:37:f9:e8:48:59:82:c9:9c:37:bd:99:
                    b7:fe:d1:d3:6f:9f:90:03:5c:d1:b0:be:56:50:9f:
                    e0:2f:41:20:ff:b6:cd:9f:4c:4b:4c:2d:d9:0f:8f:
                    0c:a7:37:3d:22:97:b2:49:e8:b6:79:a2:c8:9a:49:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:CA:B5:89:69:67:A8:90:DF:68:B3:36:4A:5F:76:FF:F9:BF:3D
            X509v3 Authority Key Identifier:
                keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9c:0e:ea:0c:d3:45:42:68:cb:69:0a:9b:ad:fd:e7:3d:19:
         90:d7:1e:db:33:2b:7e:5e:7c:e6:61:2a:d5:15:58:81:66:bf:
         51:13:60:8d:49:56:75:43:77:95:6a:6d:e6:0d:ca:56:de:0c:
         43:f5:f8:1b:a6:9f:18:37:5a:eb:e2:dd:ab:22:44:b1:38:b0:
         1a:b4:a8:fa:19:7d:12:f4:ce:8f:e1:d9:e2:4a:66:cc:48:5f:
         6b:20:50:07:c6:33:c4:7d:7c:e2:09:77:dd:aa:65:53:1b:71:
         bf:13:62:80:2f:a2:c9:cc:70:d4:74:a5:64:41:5c:c6:cc:b0:
         7a:57:b1:24:0f:af:1a:73:a3:48:82:17:53:03:a1:88:8d:aa:
         92:3f:d6:64:4d:32:8e:ac:fa:91:0e:82:92:1d:fe:e2:ab:64:
         d8:38:82:f1:03:cc:26:58:d2:34:94:d3:33:8c:54:0b:58:cd:
         55:60:f0:56:2b:36:0c:4a:75:05:d5:78:d6:05:b6:d1:20:90:
         43:ff:b9:e9:d8:03:28:17:f2:a0:17:f7:ae:ad:f8:8b:50:03:
         05:c0:c3:b7:98:fe:23:11:f0:78:19:4c:24:cf:90:f7:76:de:
         23:fe:f3:8e:57:47:2c:aa:68:0a:5a:74:20:0b:a5:f6:1b:6a:
         c0:31:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:35 2026 by rpki-client