Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File:                     1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier:          bXH/u+Ga9pgYeSYuxkdck1MBcoVT5FAz49GSIqLhClQ=
Subject key identifier:   75:BE:99:FF:2E:C4:CE:8B:87:78:DE:22:95:8C:B5:8F:D1:11:2C:C7
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer:       /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial:       019FAA87DA0BD4D461CFF4DB40B752544454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 21:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:57 +0000
Files and hashes:         1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: 0WKqpu4d0KLUe6+Vuvnb5Bd3rDeAVwYXi5JW6vwt9u0=)
                          2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:da:0b:d4:d4:61:cf:f4:db:40:b7:52:54:44:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
        Validity
            Not Before: Jul 28 21:00:57 2026 GMT
            Not After : Jul 29 21:00:57 2026 GMT
        Subject: CN=75be99ff2ec4ce8b8778de22958cb58fd1112cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:7d:1d:82:af:86:d1:a5:6e:56:25:23:02:
                    c2:d8:96:40:fe:e1:ff:74:5e:40:95:ea:14:d9:b1:
                    fe:93:d1:3d:47:83:a3:2f:98:81:9e:e3:60:00:94:
                    eb:00:fb:04:b5:7b:a2:8e:ab:ed:2f:c2:08:a7:ec:
                    9e:4c:09:32:43:32:58:27:ee:cf:19:7d:2a:ad:0e:
                    ed:4a:52:2f:7e:e2:c7:18:b5:cd:f7:5a:4e:b0:7d:
                    3d:80:82:b9:60:ea:3b:2b:9c:5e:eb:99:48:a1:49:
                    44:48:d5:1a:25:34:84:af:e6:73:a6:99:f1:93:b8:
                    78:f6:63:b7:08:a1:31:90:27:a1:77:81:35:86:85:
                    f9:ff:31:d1:75:ee:d3:00:fb:3e:c8:4e:72:67:db:
                    bd:2d:ed:de:3f:9b:73:3a:0d:3b:0c:64:f1:e4:ef:
                    04:9c:6f:fa:df:a3:43:79:08:3b:58:c6:ee:a9:2d:
                    a8:07:7d:21:94:30:a2:34:03:91:a1:54:8f:9f:59:
                    62:3b:b0:60:c0:d0:71:10:0d:c8:ac:99:f4:8b:2a:
                    f2:2e:41:07:fe:c8:45:13:87:bd:84:e7:3e:78:38:
                    8c:b1:f7:28:7b:00:2f:1e:24:e3:96:33:0f:2d:61:
                    55:7d:95:c4:89:c7:ad:e5:83:b8:20:01:61:f2:13:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:99:FF:2E:C4:CE:8B:87:78:DE:22:95:8C:B5:8F:D1:11:2C:C7
            X509v3 Authority Key Identifier:
                keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:09:71:19:bb:08:f4:98:e1:77:b3:8e:3f:f2:a9:b6:72:a3:
         14:c7:0d:e6:62:93:c8:8f:79:c7:41:69:02:bf:07:80:47:27:
         db:45:9c:32:9a:aa:75:49:3f:b8:e1:8a:8c:0d:28:72:3b:9d:
         f0:ab:a3:59:c2:39:d4:d3:a7:65:be:21:b6:1c:0c:c4:e8:e6:
         24:95:c9:7f:63:b8:15:1c:84:cf:7f:c5:f0:7a:8e:16:c3:a5:
         65:07:99:c0:20:0e:f4:9a:f0:77:69:bd:0c:7e:ee:36:70:07:
         03:db:dc:44:9b:7b:a4:e2:79:4f:82:8c:40:81:ac:f4:06:dc:
         80:1c:ac:42:e6:05:93:45:29:c1:2a:18:22:28:cc:5e:7c:34:
         21:65:6b:72:b8:6a:3a:e2:c2:2f:f1:31:cd:7f:19:dc:f8:aa:
         77:6a:18:c8:30:ff:6e:fb:33:9a:df:49:a3:5b:21:90:9e:41:
         16:f6:e1:68:db:4a:da:43:ab:3c:f4:47:13:37:de:ff:98:c8:
         65:ba:65:0e:be:c4:98:77:7f:01:72:16:1d:05:b9:2c:49:80:
         9d:cc:7d:cb:10:e4:e1:f5:14:f2:f1:0c:0d:ce:6b:b6:eb:ff:
         a3:57:99:85:03:bd:ac:94:51:37:98:03:a5:82:3d:23:b0:ee:
         bd:eb:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:09 2026 by rpki-client