Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File:                     0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier:          riHkwfxWnsmS9wtYjfcoNDb4nRuhAH4/mVLQenctKGM=
Subject key identifier:   01:CD:5E:26:F3:6B:04:3D:DF:6B:40:FE:A2:C0:C2:13:6E:4A:29:A0
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer:       /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial:       019FA9071470E1A9BD8FCBEA4C41D302D1C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number:          0958
Signing time:             Tue 28 Jul 2026 14:00:41 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:41 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:41 +0000
Files and hashes:         1: 0HODiJ6zETUxB5V-7gVm2tivJwY.roa (hash: qGeG3nhf+YLEqzJKX+7cT8wuG9iiTSfd9cCIvKbcpI4=)
                          2: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: xDJhnA88NTNi1F8/hm6Lq/Yr+flTMh0k6dGyOm1gszo=)
                          3: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
                          4: VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa (hash: 2cduIqBhGdf+BQ9zIXwABKUp5BhlSqCikGKIR7rcdp8=)
                          5: jguZW_JXxXZXEs7UeDtL_uxFA7E.roa (hash: Di5fz7I66QZtyKR+rBwTjQSM3JlDgDmbsZZusapxtVw=)
                          6: s3WGIAUoxaXezGvnamEPgxxSe6s.roa (hash: m+UVZt/8nZjpbFNEjpwY5nsDKhbrb260ASrF4yP760c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:14:70:e1:a9:bd:8f:cb:ea:4c:41:d3:02:d1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
        Validity
            Not Before: Jul 28 14:00:41 2026 GMT
            Not After : Jul 29 14:00:41 2026 GMT
        Subject: CN=01cd5e26f36b043ddf6b40fea2c0c2136e4a29a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:5b:b4:e3:82:f8:f6:76:a9:08:de:55:34:
                    ea:01:93:d3:18:d6:51:a9:05:9d:d9:0b:f0:d9:d0:
                    ad:77:10:a3:1e:6e:2a:55:6d:83:37:dd:02:c8:1d:
                    fd:4b:e4:06:ee:61:dd:0b:8f:3b:84:f9:ef:ae:50:
                    be:21:a7:07:ed:d5:e1:bc:36:bc:39:90:4a:9f:70:
                    04:29:9c:fa:65:f1:65:b6:13:a7:f7:68:bb:f2:a0:
                    6a:cd:a5:3e:59:bd:86:93:39:6a:87:19:0e:8c:dd:
                    cb:09:fa:0b:f2:8a:86:95:74:d6:b7:ad:f7:60:9f:
                    e5:cd:6f:f3:4a:53:25:a7:c0:12:99:48:7c:4f:d1:
                    af:ef:4a:79:09:04:16:f7:44:03:af:27:d6:0a:cc:
                    ce:bd:f5:b6:98:ed:19:71:6f:94:84:dc:22:2d:73:
                    1d:31:11:e1:ee:46:3e:76:ca:11:ca:e8:04:d8:44:
                    38:fa:a7:be:e2:f8:b5:1c:e6:a8:a2:fa:b6:d8:e8:
                    88:07:be:65:36:ef:ce:2f:2c:00:ca:2b:10:3b:88:
                    1f:cc:1d:e6:cd:62:81:85:88:1a:6a:f9:db:23:93:
                    64:57:15:ad:96:1b:83:63:e8:05:6e:08:f6:e4:47:
                    2f:28:aa:49:00:1c:d4:7d:77:44:7b:5e:c3:53:04:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CD:5E:26:F3:6B:04:3D:DF:6B:40:FE:A2:C0:C2:13:6E:4A:29:A0
            X509v3 Authority Key Identifier:
                keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:df:ab:b8:9f:a5:5d:7c:09:95:c2:5a:63:59:4d:6c:99:ed:
         5c:df:87:e9:ed:d6:ae:a2:6c:bc:9c:8c:af:b6:8e:b5:12:3b:
         93:0b:51:91:52:cb:ad:bb:f7:a7:ec:44:d2:3d:fb:8b:4a:7e:
         7b:4d:31:17:ef:1d:26:57:2d:93:6f:1d:2f:ee:a7:a2:71:9d:
         d7:2a:8b:55:72:b0:16:43:36:62:29:eb:b0:b9:01:4f:05:75:
         57:e4:96:07:a1:c6:d5:0f:f6:1f:46:2b:32:9d:3e:f0:f2:6b:
         d3:16:ba:67:ee:34:56:9b:4d:c0:b4:41:9a:81:15:c6:a9:a6:
         ae:9e:58:34:db:ae:c6:66:f1:9e:b3:22:bb:b2:5c:18:e3:06:
         45:4f:af:38:dc:f6:6f:d5:7e:f1:94:fc:8e:fd:41:6a:45:4a:
         fd:6a:3d:aa:b3:50:f9:2a:e5:f2:14:53:db:d7:81:fc:1e:0d:
         82:35:55:82:02:f4:32:a9:e7:95:ce:46:03:0e:84:b7:bc:83:
         d2:71:6a:2d:5a:59:f6:a4:c9:5a:c3:cd:a4:ad:1a:c7:20:58:
         c5:32:38:fd:cc:05:5e:f2:9a:4a:e0:c5:ab:3d:03:18:83:5c:
         2e:51:88:d1:8b:b5:77:62:65:84:9d:ff:1b:c0:e8:2a:ef:7e:
         e8:2f:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:08 2026 by rpki-client