Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File:                     shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier:          GT3CJ+/9CGpgAS0jeJl3N51U42SyvufC3IbfVXA7VqU=
Subject key identifier:   A0:88:AC:0D:29:15:ED:3E:C9:69:05:13:3B:FD:02:89:BF:A2:4C:98
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer:       /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial:       019FABD1976E7A7C70155CEF459F8DA1F000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number:          193D
Signing time:             Wed 29 Jul 2026 03:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 03:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:07 +0000
Files and hashes:         1: p64_xVoksOfjBTpAEK-sqxOtfyo.roa (hash: Mpzgzqkjd9r2rYbbw0eBHseWMwAwQ2eJtwJ2+TbcIMI=)
                          2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: +6k1Rs1vbnV+7FVu8U90y3jnTGExCFzuP9OzVfFnsRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:97:6e:7a:7c:70:15:5c:ef:45:9f:8d:a1:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
        Validity
            Not Before: Jul 29 03:01:07 2026 GMT
            Not After : Jul 30 03:01:07 2026 GMT
        Subject: CN=a088ac0d2915ed3ec96905133bfd0289bfa24c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:a2:46:e5:7e:8d:d0:c7:0a:04:16:3b:17:
                    3c:14:3b:fe:bb:a9:f5:33:e6:8d:96:9f:b7:59:80:
                    a8:e0:66:6e:d1:ca:c5:84:e1:2c:a2:68:a5:94:b3:
                    44:20:66:65:3e:91:a3:e5:28:24:e8:61:3d:c3:44:
                    63:1f:7a:c4:68:6e:30:1e:a7:30:f7:e5:53:2b:98:
                    62:19:18:3b:fb:6b:d5:b8:9b:75:c0:08:94:d1:4d:
                    83:92:a8:d7:50:66:26:90:e2:8e:60:72:90:a8:7f:
                    77:24:20:c8:40:9c:03:a4:17:00:01:f4:32:47:08:
                    9e:14:a1:4c:8c:04:8f:12:3e:62:31:b1:50:a5:c8:
                    3b:19:7f:40:88:b2:8a:bb:9b:c4:21:f5:df:99:f9:
                    90:1a:cc:08:91:04:dd:b2:16:5f:fa:cb:38:06:02:
                    d9:11:49:e0:e6:71:fc:64:25:a0:86:be:c2:eb:be:
                    32:f5:ab:cc:4f:c2:b6:42:3b:70:d0:7b:82:8d:68:
                    66:8d:ca:3d:95:dd:de:f2:76:f1:b0:d6:24:5e:ea:
                    d2:89:4f:2a:21:bc:7a:40:4b:86:8c:65:8e:95:82:
                    8e:cb:78:38:16:7d:92:45:5e:fe:99:d1:22:eb:5d:
                    47:5e:33:26:ff:50:61:38:55:19:f8:10:e3:54:a0:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:88:AC:0D:29:15:ED:3E:C9:69:05:13:3B:FD:02:89:BF:A2:4C:98
            X509v3 Authority Key Identifier:
                keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:87:26:98:6a:6a:69:e5:c5:4f:b6:72:2b:c5:b9:0d:d0:94:
         46:5e:d9:4c:5a:07:eb:6c:35:89:ae:dd:12:8a:90:8b:ee:5a:
         2a:60:c1:d4:6b:53:da:b6:84:32:4a:3f:63:3e:8c:ed:07:d6:
         4b:62:d4:51:24:1a:47:b2:dd:f5:4f:fc:44:76:e4:a0:29:91:
         46:83:ab:86:b3:d3:ca:af:39:4c:b2:c9:3b:26:5c:27:7d:7d:
         42:60:b4:83:b3:67:b1:2a:d4:65:f9:bb:d4:61:3e:f6:a2:99:
         87:9d:3b:3b:15:af:52:a3:f1:10:67:96:a4:fb:dd:4b:40:f2:
         d1:59:00:68:0a:ea:42:7e:11:ba:69:bf:71:2e:a8:18:f9:35:
         46:e1:88:6c:2a:f6:47:db:f5:e8:78:b1:0b:87:21:cc:cd:ff:
         b8:8b:80:e7:1c:20:a6:77:af:8e:8f:67:91:f7:7e:9b:54:1c:
         43:49:60:d7:89:f3:87:0c:e4:a4:02:51:57:f9:2c:bb:9c:f3:
         2f:e1:78:4f:36:f4:d4:5c:af:4b:50:ca:28:67:b2:f4:64:ef:
         86:be:b3:cf:6a:20:b2:56:6f:77:d2:42:c1:a4:07:b5:28:32:
         55:0b:ec:c9:bd:5d:d8:26:7b:a3:c6:2e:c4:69:d9:4f:35:9e:
         41:f8:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:48 2026 by rpki-client