Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File:                     x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier:          AodCANcB3L2fBryhdS5W3y1fb+qjHxj3F6xxgOq7KPw=
Subject key identifier:   FB:C5:9F:A3:95:49:BF:A7:E0:37:AB:87:BE:12:F4:57:16:1B:E8:08
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer:       /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial:       019FAA50C589275CE8D061C7828D0C904F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number:          19D8
Signing time:             Tue 28 Jul 2026 20:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:47 +0000
Files and hashes:         1: 6adJkufM2vCd-z5ZhfO9iFInD5I.roa (hash: eStOI3RXAw0Itmdq+ACmIjyoC4OiC/7VPLcYAGLEjE8=)
                          2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
                          3: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: 6VCbNhsHrWGfcDNcJt5K4+9P3s6g1YNWG58oDU+/iy4=)
                          4: zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa (hash: T++koCK9BmrUNL9Ums78HVke+W3UNP2l17fVLv+FlR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:c5:89:27:5c:e8:d0:61:c7:82:8d:0c:90:4f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
        Validity
            Not Before: Jul 28 20:00:47 2026 GMT
            Not After : Jul 29 20:00:47 2026 GMT
        Subject: CN=fbc59fa39549bfa7e037ab87be12f457161be808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:1a:f6:f4:79:2b:40:70:64:0a:56:5d:80:
                    e1:3d:b7:27:9f:eb:ca:5c:5d:39:67:a2:ac:53:60:
                    97:38:e1:b0:2a:e5:67:b4:9e:f4:e0:94:01:40:ca:
                    b7:a7:81:7b:b6:49:1d:e0:f6:cf:1f:24:2d:a3:ea:
                    65:fb:3b:df:f3:e9:c9:ca:4c:7d:33:2a:29:73:75:
                    0c:f4:26:e4:df:4e:05:5b:88:98:63:e6:31:06:2b:
                    8c:7b:a1:23:ed:9c:a4:21:55:fe:e5:58:2a:27:7c:
                    73:65:a0:77:fe:fa:b5:ab:e3:09:91:33:94:9a:73:
                    e2:a6:37:30:76:c6:29:d3:b0:91:c7:e1:ae:2c:af:
                    26:d1:fc:08:de:ac:e9:6a:b7:4a:f6:56:0f:5c:26:
                    f5:78:97:83:95:b9:87:de:9e:b6:48:ba:fe:ba:ee:
                    c8:9f:18:7c:9e:2c:d6:1a:c3:48:33:cb:41:00:a4:
                    c1:ed:65:a3:ed:18:e5:0f:38:ab:6f:25:cf:a7:f9:
                    3a:0b:d5:1f:99:dd:a8:34:71:5f:9c:b3:ec:1d:30:
                    5f:a2:b1:8d:76:04:7a:5c:d6:75:2d:2d:73:54:87:
                    2d:0a:f3:f7:15:44:88:d0:c3:7f:13:48:fb:ba:d4:
                    6e:69:ce:0c:9b:14:bf:c8:1a:06:e9:98:f7:1e:99:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:9F:A3:95:49:BF:A7:E0:37:AB:87:BE:12:F4:57:16:1B:E8:08
            X509v3 Authority Key Identifier:
                keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:18:61:c5:d3:16:2e:2a:44:e6:74:0e:71:55:31:46:21:
         62:33:3d:7a:38:3a:41:5c:79:14:46:a3:06:3f:9c:c2:13:2e:
         85:40:81:a7:26:68:13:b1:20:c3:f4:70:b2:c9:67:96:01:ac:
         e1:dd:bd:ce:11:63:c8:da:f0:45:31:00:7e:9e:d0:6c:c3:6e:
         94:37:ed:a2:38:43:82:d2:54:0f:7f:d5:ee:0c:a4:b6:48:76:
         f8:d7:51:9c:29:1a:e0:35:85:f8:d3:02:08:20:81:d8:a7:51:
         c6:55:00:a7:5b:1a:0f:2c:e2:d5:69:4a:98:f1:29:f8:eb:ad:
         7c:a7:f3:ac:f1:1a:8c:dd:82:f0:78:80:c7:cc:e2:40:64:1e:
         99:cf:10:5c:3b:df:18:ee:b7:60:12:5c:01:a3:3a:80:7e:8a:
         7a:32:56:07:e0:37:8a:f7:62:aa:d1:b5:08:40:d5:3b:96:84:
         10:ef:ec:5f:0b:eb:5d:c1:ed:3f:69:ed:c3:7a:93:17:41:70:
         d3:3a:a5:7a:39:a7:46:77:aa:38:7c:e4:a6:c0:f1:15:37:37:
         cd:70:07:f3:19:c6:e0:db:a9:b9:65:ac:7d:03:fa:f1:52:9e:
         92:58:a8:d8:d6:22:c8:cd:79:d7:5f:42:71:37:8d:aa:03:a8:
         e9:bc:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:10 2026 by rpki-client