Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File:                     P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier:          XwHWtRr8aUFA5O555YkTDVbajvE0K690y5Q2bQz7ns4=
Subject key identifier:   7C:A1:50:63:81:B6:52:B2:77:17:72:BB:0E:A4:48:ED:B9:37:C1:69
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer:       /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial:       019FAB9A55E04034374546295ADB052296BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number:          05C5
Signing time:             Wed 29 Jul 2026 02:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:46 +0000
Files and hashes:         1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
                          2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
                          3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: 5KDnd9laKuScKmsot5sUBpcphZp+fRHeOL7BDZ5a7Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:55:e0:40:34:37:45:46:29:5a:db:05:22:96:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
        Validity
            Not Before: Jul 29 02:00:46 2026 GMT
            Not After : Jul 30 02:00:46 2026 GMT
        Subject: CN=7ca1506381b652b2771772bb0ea448edb937c169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:c4:90:41:65:6a:56:e3:a2:57:a7:75:a5:
                    02:52:3c:8b:f5:69:fd:65:d4:1a:6a:2c:2e:c8:4e:
                    89:00:63:4a:80:7e:96:8d:fe:ee:27:d6:5f:e4:7f:
                    d1:e4:19:72:f3:3b:db:09:73:3e:5f:e9:6b:26:15:
                    1c:a2:2a:c8:92:a6:f7:d7:14:63:58:a6:f2:0a:d7:
                    0d:e1:0b:76:94:ff:92:ae:0f:b4:93:11:00:8a:33:
                    2c:04:cf:e0:7b:9f:91:2a:0e:36:0c:35:54:b6:7b:
                    a8:e1:fc:50:9f:3c:3a:26:93:5a:c8:58:af:1c:af:
                    02:1c:ca:ec:7f:e9:d4:b8:68:68:e2:86:c4:e1:e6:
                    ae:86:5d:20:ab:9a:96:52:6f:1b:9a:29:41:78:d5:
                    0d:82:f0:66:79:d8:e3:b8:2b:cc:a0:91:34:2d:7a:
                    95:34:b3:24:8f:56:03:b8:3e:92:47:ea:4d:ed:d1:
                    35:f9:e9:d7:60:55:65:75:37:78:95:ea:41:18:2d:
                    bb:2d:2d:f4:9c:da:2b:0a:e0:f8:63:3d:0c:e7:e7:
                    a4:15:56:b5:c6:72:f3:8e:1d:ce:3c:54:7f:05:62:
                    6e:f8:8f:8b:20:47:97:5f:c2:36:fa:c9:c8:a6:57:
                    90:b8:c7:5c:ad:e4:81:f2:90:29:bd:53:b3:40:a1:
                    d9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:50:63:81:B6:52:B2:77:17:72:BB:0E:A4:48:ED:B9:37:C1:69
            X509v3 Authority Key Identifier:
                keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:7f:90:da:11:54:47:19:b5:3b:fd:8b:79:bf:a9:c0:e8:
         a8:cd:10:de:8c:be:1f:3f:86:71:47:8e:43:6f:91:68:f3:c7:
         75:37:37:12:f8:ee:2a:d9:6e:3e:d3:80:bd:97:bd:4f:fc:c4:
         5e:ff:8b:f9:6d:ad:28:3e:02:0d:67:f1:78:f3:49:08:14:d8:
         1e:1e:da:6e:20:d0:c9:83:78:26:3c:10:e2:55:41:3f:41:01:
         3f:73:42:c4:e1:91:97:46:9b:23:0a:94:de:65:53:3a:cf:96:
         69:88:32:98:fa:21:ea:40:78:db:42:24:83:bb:e3:8e:3e:23:
         0b:79:89:6e:38:e8:cc:f4:12:e8:48:26:70:e7:36:39:47:2c:
         be:08:d9:46:02:f3:5f:a5:5e:e2:f6:ff:18:fa:17:3f:32:b2:
         3b:dd:3e:a1:ad:23:53:db:a5:33:3c:0f:46:2c:f2:04:95:c6:
         16:5c:67:e0:b8:f4:bf:93:92:2d:f1:4d:1d:a3:d7:bb:6a:bf:
         da:4c:ad:8c:c7:c6:67:28:55:b3:73:b9:ad:bf:f2:5f:53:17:
         0f:b0:c7:cf:df:02:a5:d0:ae:ee:82:46:35:77:75:6e:98:f4:
         e0:0b:7f:10:2c:44:3e:a0:af:11:df:41:ff:83:0f:d8:94:08:
         df:73:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:55:58 2026 by rpki-client