Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File:                     XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier:          h07SD/KSwoE4NSrwKlV6D8NdCjGfCoWmg3+8eEBOOIg=
Subject key identifier:   B5:D1:9F:BC:92:62:DC:86:86:6E:A2:72:37:56:3F:8F:F0:E9:E2:2D
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer:       /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial:       019FAB6368B0AC76C0CA1D3342999AEE3DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number:          02FF
Signing time:             Wed 29 Jul 2026 01:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:46 +0000
Files and hashes:         1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: iQ4pDJif1poowSuUdYSGfbzlygKWdWA4J838YHofGI8=)
                          2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:68:b0:ac:76:c0:ca:1d:33:42:99:9a:ee:3d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
        Validity
            Not Before: Jul 29 01:00:46 2026 GMT
            Not After : Jul 30 01:00:46 2026 GMT
        Subject: CN=b5d19fbc9262dc86866ea27237563f8ff0e9e22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:43:d3:f8:9f:55:04:ef:30:06:c1:5f:aa:
                    7c:8a:02:22:dd:90:46:e4:16:ea:2f:0b:3d:25:20:
                    d2:b4:bc:ba:a2:ad:7e:fb:8f:80:cc:23:d8:1f:fc:
                    ba:ae:59:48:1b:bd:d8:73:1d:6c:2b:ff:37:b7:6d:
                    77:2c:0d:f1:94:e1:82:dd:de:10:cd:0e:40:15:f3:
                    04:fe:ba:a1:45:30:74:cb:78:27:00:c8:57:32:48:
                    3c:13:11:b9:69:19:fb:16:77:26:be:9d:1c:26:73:
                    9b:1c:01:81:d1:8e:5f:8f:95:84:8f:2a:8c:99:11:
                    05:1f:65:de:0b:e3:22:1b:85:ae:50:95:c2:39:65:
                    e7:83:01:8a:3a:cb:a9:c1:e6:28:21:08:03:1a:17:
                    28:ea:8a:77:c0:08:7f:cc:c3:ae:ba:28:39:3f:cd:
                    8f:0f:e8:f8:9d:41:32:c4:95:2a:27:09:59:5b:6a:
                    7a:53:a2:23:cd:98:6b:c3:66:f9:5d:c2:05:33:cc:
                    6e:3c:f3:1c:84:07:d9:80:0b:d8:29:c4:d3:c3:0e:
                    51:ec:5a:24:8e:64:81:2b:5a:17:4f:57:bd:f6:2e:
                    e0:62:51:d4:4e:cd:3c:c9:87:6c:75:83:a6:e5:3d:
                    1b:c7:4a:09:39:53:21:41:49:2a:88:fd:f1:06:9f:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D1:9F:BC:92:62:DC:86:86:6E:A2:72:37:56:3F:8F:F0:E9:E2:2D
            X509v3 Authority Key Identifier:
                keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:89:58:a4:1b:66:f6:8d:6d:93:e3:15:c0:f7:29:ee:10:fd:
         aa:f8:5d:e0:71:b9:ea:f3:37:8b:0d:d4:b4:b9:94:fd:85:6c:
         50:ef:dd:e9:04:12:a6:c7:0e:f3:2b:fc:17:ab:70:d9:50:36:
         eb:7d:83:aa:ce:72:f3:23:1a:ac:f3:0e:12:ee:3f:fc:60:9f:
         b5:f0:b0:f7:08:b3:cb:aa:71:25:93:2d:b4:db:ea:bb:69:c6:
         a3:dc:1d:65:31:a6:a5:9b:24:6f:96:d6:d9:ae:e9:9b:6b:25:
         ff:22:93:67:7c:f1:c3:c2:50:48:9c:3b:26:e2:69:e6:ee:f2:
         3e:1d:07:82:f5:0f:7f:57:34:ac:7b:8b:f8:5f:70:d5:ef:21:
         f9:21:81:5e:f1:fe:ee:5c:a2:d9:a8:b4:6d:bc:01:43:d0:8d:
         cf:3f:0b:b8:00:88:72:fa:fc:ea:af:e2:de:07:f6:fc:c6:52:
         36:31:da:1d:97:cb:ce:df:e3:ff:dd:d2:f7:48:ec:b5:e4:b8:
         10:88:39:4a:0f:b8:d9:d0:d2:5a:1e:a2:99:cd:a4:61:67:27:
         9a:7d:2f:4c:d0:8e:9c:fa:dc:de:7c:0d:d7:4e:6f:61:3b:e6:
         e0:b0:80:35:f7:35:40:c7:7a:48:2e:71:7a:c5:b1:51:f6:b2:
         a0:70:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:55:18 2026 by rpki-client