Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft
File:                     xycqvq1nwP4JQgt-PEOEwdkLOb4.mft (raw, json)
Hash identifier:          M8LGyl+WVzwsxQh+uhBUwJp4gi8XUzeHW+aPw6i9el4=
Subject key identifier:   E1:27:15:03:38:85:20:4A:F1:11:73:4B:01:33:A6:D2:CC:D6:1D:9A
Authority key identifier: C7:27:2A:BE:AD:67:C0:FE:09:42:0B:7E:3C:43:84:C1:D9:0B:39:BE
Certificate issuer:       /CN=c7272abead67c0fe09420b7e3c4384c1d90b39be
Certificate serial:       019FAC089846D3B594A6A78A3B214E5C01FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft
Manifest number:          3F
Signing time:             Wed 29 Jul 2026 04:01:12 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:12 +0000
Files and hashes:         1: sz_RURVVArJ2c0K_kIxh1TMdrjQ.roa (hash: 2vEISfxUPcn+xHZ+k4Ao76dl9RMN0Hg4rGFr03MSLWo=)
                          2: xycqvq1nwP4JQgt-PEOEwdkLOb4.crl (hash: Ihvl/lwY91C2C/KNJbqonkkG9Wlz0g4cDtEseh5Vu2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:98:46:d3:b5:94:a6:a7:8a:3b:21:4e:5c:01:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7272abead67c0fe09420b7e3c4384c1d90b39be
        Validity
            Not Before: Jul 29 04:01:12 2026 GMT
            Not After : Jul 30 04:01:12 2026 GMT
        Subject: CN=e12715033885204af111734b0133a6d2ccd61d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:f8:74:c3:b8:f9:c7:fd:47:66:34:e7:15:
                    d2:b2:2f:2b:83:69:a7:12:83:a7:a5:24:1a:90:d4:
                    2f:31:8b:d2:b3:a1:88:a1:05:7d:e0:a9:11:7e:fc:
                    f0:86:03:e9:72:ad:20:4a:b3:77:ef:11:71:c1:3d:
                    2b:b1:53:98:7c:60:87:03:9f:e6:e1:34:b8:37:f2:
                    b7:0a:3f:22:d2:3e:0c:8c:e7:6a:b2:13:fa:63:a8:
                    96:b0:f4:51:82:6d:fd:f6:cc:0f:6b:fe:33:8b:d3:
                    bf:44:0e:11:3c:10:27:da:9b:1f:73:d8:90:65:cb:
                    8e:38:9c:20:2f:d2:db:39:ec:6b:ea:b4:a0:8a:4a:
                    db:45:71:80:90:46:66:6c:f2:28:85:60:25:0c:ec:
                    a3:24:e7:05:27:89:4c:89:16:f2:31:22:c9:2c:43:
                    7a:5e:28:32:0d:e6:5b:97:3a:58:c1:2c:8b:4b:21:
                    d3:2e:bf:c6:29:f0:91:4b:f8:eb:e7:2f:3a:69:c9:
                    3a:82:e7:cb:7d:20:a0:25:66:3c:83:2f:54:64:e8:
                    70:80:92:81:dd:cc:c1:e9:d4:24:b8:58:47:c4:39:
                    b9:5c:4b:79:1f:ef:66:52:88:35:cb:a9:e6:f7:71:
                    d9:ba:3c:94:3a:a9:36:68:f0:74:af:fc:2f:65:7e:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:27:15:03:38:85:20:4A:F1:11:73:4B:01:33:A6:D2:CC:D6:1D:9A
            X509v3 Authority Key Identifier:
                keyid:C7:27:2A:BE:AD:67:C0:FE:09:42:0B:7E:3C:43:84:C1:D9:0B:39:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:7a:8c:e4:82:7f:73:f7:a4:f3:a0:ef:bf:4e:d3:14:c5:
         07:5c:6b:af:c5:6d:28:9a:ac:a0:d2:00:20:2d:27:ce:ea:ff:
         53:94:23:91:0b:94:0e:51:d8:b9:73:87:8b:1d:c9:46:0a:84:
         49:5d:64:53:49:bb:4c:3a:cf:c0:32:cd:3a:e2:0e:ae:4f:e5:
         9e:52:c3:20:b6:bb:30:1c:ed:55:4f:4e:cf:78:8d:4b:e9:24:
         35:c5:81:c2:45:d4:34:be:2d:ac:43:8d:1e:06:4b:dd:b7:24:
         fc:24:a7:44:16:08:5f:43:28:41:1d:d7:14:31:21:52:01:95:
         33:1b:44:9d:a6:c7:d7:b4:76:44:e5:79:5b:49:95:ce:22:73:
         fb:19:6d:4c:27:de:b4:a4:18:4f:96:a5:7d:b3:91:bf:82:e5:
         7f:45:9f:3a:50:49:29:92:ee:c7:06:a9:0e:57:4a:f2:9d:96:
         27:c6:0c:d1:a7:a9:1a:8b:90:3d:8f:ea:27:55:f9:be:0a:ed:
         3a:5c:d3:c0:df:42:8b:c6:f4:b5:4e:f1:99:dd:d9:ac:a3:2b:
         b2:20:2c:b8:d8:39:24:bb:d7:45:06:a7:d0:a3:8c:cf:a3:aa:
         db:5c:cc:51:f4:3f:de:5c:7d:4f:41:61:5d:df:4b:61:83:c4:
         d2:b3:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:18 2026 by rpki-client