Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File:                     xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier:          RzNla5GeU4ATjpJUqFY4PkDGbgVyLoOG2pLAHjceAIQ=
Subject key identifier:   F5:BD:7C:DD:11:EB:E9:0F:18:C6:C1:4D:98:64:E4:BF:E9:05:A6:BF
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       019FAB2C82B78B585BEC86072B91EB852F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number:          19E1
Signing time:             Wed 29 Jul 2026 00:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:48 +0000
Files and hashes:         1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
                          2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
                          3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
                          4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
                          5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: exe902l+wBBsdftiARBtKyhM+qFUvkl9/u+/RHOBjo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:82:b7:8b:58:5b:ec:86:07:2b:91:eb:85:2f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: Jul 29 00:00:48 2026 GMT
            Not After : Jul 30 00:00:48 2026 GMT
        Subject: CN=f5bd7cdd11ebe90f18c6c14d9864e4bfe905a6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:48:12:44:0e:a1:11:69:cc:2d:b3:fa:83:
                    8a:32:33:a9:3e:48:00:c4:ff:b3:31:6f:33:8b:e7:
                    d8:fc:84:be:fa:4d:92:34:7e:7f:04:73:08:90:5b:
                    29:0b:93:99:aa:50:4d:47:9f:1b:43:4f:9d:11:21:
                    42:fc:a5:5e:79:35:8e:d7:57:fa:b6:55:51:0f:da:
                    87:40:21:4a:c5:c0:b2:fe:be:5c:e8:01:ce:b4:e2:
                    62:21:c6:19:ef:39:c8:bb:67:cd:41:cc:2c:4c:71:
                    9b:d5:88:4f:ef:5f:e7:c3:c6:fa:05:6a:96:23:be:
                    9b:be:fa:43:f1:18:93:59:1e:3e:9f:9e:39:10:2f:
                    ab:de:30:2d:65:a6:cb:1c:18:57:76:5b:20:da:8a:
                    d5:d1:6d:b0:64:4a:3c:3b:d2:b8:a5:ed:96:29:31:
                    5d:b6:e8:01:3b:4e:0e:96:0c:8a:54:3e:8d:02:9b:
                    1b:b7:2c:9d:15:08:cb:f3:6f:29:95:3e:09:2f:68:
                    19:c6:cf:21:87:b9:70:a6:1d:34:aa:34:d9:47:13:
                    a1:e0:c5:d3:95:7c:0c:c1:69:13:4d:3d:26:37:bb:
                    3a:c9:cb:8d:ac:3f:16:20:ca:ab:67:55:96:64:ea:
                    5f:0f:72:db:41:57:63:9e:7b:43:3a:67:4f:32:0a:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:7C:DD:11:EB:E9:0F:18:C6:C1:4D:98:64:E4:BF:E9:05:A6:BF
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:93:dd:dd:04:3b:08:cd:ae:e1:49:9b:72:e0:31:58:b5:19:
         10:b6:8e:fa:7d:b1:0b:bf:7b:1d:d9:88:f5:a7:51:4b:16:0b:
         cc:7b:61:f7:8c:cd:a3:be:f9:38:df:f5:c4:36:8e:06:15:cf:
         65:95:25:82:d3:df:d8:b7:83:0d:29:71:f6:11:6b:0e:16:4a:
         4d:6d:0e:85:60:99:41:1f:1e:0a:e5:6a:72:08:00:e0:25:5f:
         08:37:be:13:71:d0:31:1e:7a:e6:5a:42:6d:15:fb:28:64:a1:
         5a:97:47:8e:e3:19:fb:af:93:25:a0:0f:96:b5:b8:31:ef:43:
         7e:a8:3a:87:64:c3:1f:57:be:53:1d:b9:bc:86:08:8d:8d:2f:
         e2:65:14:4d:8a:1e:85:10:4c:b8:7b:6a:f2:6c:dd:04:5f:81:
         32:d2:7a:7f:77:2c:bc:be:6b:33:85:44:01:c3:ef:54:0b:e1:
         83:15:89:4a:40:69:db:cd:a4:c8:61:1f:70:5c:a3:84:8d:34:
         8f:5b:92:1f:d9:b1:eb:5b:98:c9:60:18:54:be:aa:c2:48:ed:
         3e:e0:92:35:c7:2d:6f:be:47:9a:22:98:af:4a:36:30:98:21:
         2d:ec:94:bf:f9:ae:e1:de:85:23:d0:76:c5:1d:fe:10:35:97:
         bc:97:42:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLIK3i1hb7IYHK5HrhS9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjYwNzI5MDAwMDQ4WhcNMjYwNzMwMDAwMDQ4WjAzMTEwLwYDVQQD
EyhmNWJkN2NkZDExZWJlOTBmMThjNmMxNGQ5ODY0ZTRiZmU5MDVhNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrJIEkQOoRFpzC2z+oOKMjOpPkgA
xP+zMW8zi+fY/IS++k2SNH5/BHMIkFspC5OZqlBNR58bQ0+dESFC/KVeeTWO11f6
tlVRD9qHQCFKxcCy/r5c6AHOtOJiIcYZ7znIu2fNQcwsTHGb1YhP71/nw8b6BWqW
I76bvvpD8RiTWR4+n545EC+r3jAtZabLHBhXdlsg2orV0W2wZEo8O9K4pe2WKTFd
tugBO04OlgyKVD6NApsbtyydFQjL828plT4JL2gZxs8hh7lwph00qjTZRxOh4MXT
lXwMwWkTTT0mN7s6ycuNrD8WIMqrZ1WWZOpfD3LbQVdjnntDOmdPMgrP/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW9fN0R6+kPGMbBTZhk5L/pBaa/MB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5Pd3QQ7
CM2u4UmbcuAxWLUZELaO+n2xC797HdmI9adRSxYLzHth94zNo775ON/1xDaOBhXP
ZZUlgtPf2LeDDSlx9hFrDhZKTW0OhWCZQR8eCuVqcggA4CVfCDe+E3HQMR565lpC
bRX7KGShWpdHjuMZ+6+TJaAPlrW4Me9Dfqg6h2TDH1e+Ux25vIYIjY0v4mUUTYoe
hRBMuHtq8mzdBF+BMtJ6f3csvL5rM4VEAcPvVAvhgxWJSkBp282kyGEfcFyjhI00
j1uSH9mx61uYyWAYVL6qwkjtPuCSNcctb75HmiKYr0o2MJghLeyUv/mu4d6FI9B2
xR3+EDWXvJdCVw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:12 2026 by rpki-client