Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          G39Xr7CkCnPiHMCVuVATWvHpaTPsb3oM7Zce3dfKn2I=
Subject key identifier:   65:DA:16:B1:A1:7A:23:91:67:3F:95:50:46:00:24:EB:9C:C9:8C:C6
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       019FAC3EFE29E4ACA4A94FCEA7F5F444DC35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 05:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:37 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: lnwRClNulbxCZbeShI7agyUFT48IojNsxVHeihJ63xk=)
                          2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
                          3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
                          4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:fe:29:e4:ac:a4:a9:4f:ce:a7:f5:f4:44:dc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Jul 29 05:00:37 2026 GMT
            Not After : Jul 30 05:00:37 2026 GMT
        Subject: CN=65da16b1a17a2391673f9550460024eb9cc98cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:57:42:bc:0e:e9:71:d4:7c:47:69:22:cd:2f:
                    c7:74:47:46:67:11:ed:17:4c:20:24:d5:2e:b0:fd:
                    58:b2:79:3a:4c:66:f4:59:44:c8:67:fe:77:10:51:
                    c0:01:8b:6d:83:b8:c9:e7:9b:da:3f:88:de:1f:b4:
                    9f:5e:be:29:fa:06:a1:35:fe:6f:7f:b4:54:d4:4f:
                    41:f4:14:58:80:3f:cd:aa:31:32:ee:9a:6b:bb:89:
                    42:5d:6c:5f:69:85:8a:b4:57:37:35:eb:b9:63:cd:
                    ec:49:da:91:44:1c:f1:d0:ac:14:d6:18:a3:46:44:
                    8d:64:21:28:9c:bf:e4:96:85:41:b2:53:96:81:59:
                    48:28:de:4f:5d:ae:4f:7b:15:8c:bd:94:38:67:28:
                    73:b2:f8:df:76:68:f3:10:57:0b:66:f1:24:c9:e2:
                    b6:fd:b2:62:00:16:66:d7:54:82:b8:10:4a:fe:c3:
                    ce:73:78:71:2d:49:53:e4:12:43:08:30:16:08:de:
                    5b:dc:91:5c:be:b0:5d:e8:05:6f:27:20:65:0d:73:
                    11:6b:59:ec:07:cf:b4:98:4a:93:a4:20:c8:f6:90:
                    b5:11:f4:be:de:cc:92:99:2d:ba:f0:53:55:47:25:
                    7a:12:87:5b:17:6b:44:41:3f:9c:db:2c:94:86:3a:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:16:B1:A1:7A:23:91:67:3F:95:50:46:00:24:EB:9C:C9:8C:C6
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ab:d0:d2:cf:16:6a:7e:50:6f:dd:d1:0f:0f:aa:be:22:fd:
         a7:15:c8:6a:e7:2c:aa:1a:ba:b9:44:12:be:39:6d:05:29:61:
         d4:eb:ff:bc:fe:11:4b:83:d9:b3:31:76:a2:38:a1:fe:54:83:
         71:66:f5:29:5c:37:92:df:59:06:44:32:df:05:93:a7:71:f4:
         10:59:2c:d3:c7:2c:f2:c3:1d:f7:1f:95:84:ea:7a:12:d0:b8:
         85:67:ae:40:00:83:d1:2d:20:2b:9c:81:6f:83:af:9e:8f:0a:
         a4:ab:67:1f:5b:1e:8c:3f:db:f3:cf:a3:11:f3:aa:3f:76:b8:
         33:1b:3d:03:59:bb:ba:81:97:fc:8d:25:49:b3:0b:56:ea:42:
         6e:3a:d1:da:36:d3:97:33:98:62:54:ee:dd:6d:00:39:7b:d4:
         5d:c0:a1:7e:23:fc:ab:cc:b1:48:89:c9:bf:19:34:64:69:1f:
         f3:de:76:69:de:75:0a:e0:ae:17:f1:00:4b:c5:5b:93:7c:68:
         60:41:1c:74:bb:28:b7:65:03:fd:05:d6:56:4a:32:36:9e:a4:
         a5:87:89:2d:3b:ca:13:0c:0b:2e:9d:75:7d:47:9b:75:fb:ba:
         5c:9b:e1:af:40:d6:37:c2:21:e1:da:b5:fa:1d:a1:0c:d4:29:
         b3:dd:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:15 2026 by rpki-client