Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          0/c8qRQNd7mEO9oVUseFIjFapMm1LgX6cfDD7PCIyns=
Subject key identifier:   9D:B0:71:25:3B:CD:D6:DD:D6:1B:07:5B:8C:1A:D5:2D:CE:2C:2F:33
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       019FAB2C5269DF17D56C7F6FE9DBC67118F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          18E9
Signing time:             Wed 29 Jul 2026 00:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:36 +0000
Files and hashes:         1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
                          2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
                          3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
                          4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: Nv/IULz0ewXWfu9vmS2xaN8tJ4JkJHRwmOcmupgWDOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:52:69:df:17:d5:6c:7f:6f:e9:db:c6:71:18:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Jul 29 00:00:36 2026 GMT
            Not After : Jul 30 00:00:36 2026 GMT
        Subject: CN=9db071253bcdd6ddd61b075b8c1ad52dce2c2f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:b8:3a:2a:92:11:22:ae:c2:01:ad:60:13:
                    02:c2:b1:69:a6:0b:b3:c5:fc:34:2e:0a:26:60:de:
                    a4:8d:f0:50:7c:33:e9:51:29:d4:8b:ff:df:3e:50:
                    a3:db:ec:28:23:44:83:bb:d8:0b:22:96:2a:8f:ce:
                    4e:d8:bf:91:24:86:dc:6b:1b:39:68:8c:48:63:b2:
                    b8:08:e8:64:86:73:3e:7a:fb:69:b2:b2:9c:cf:f4:
                    76:dc:22:47:b6:89:53:7e:72:82:a1:85:16:29:37:
                    9b:bd:0f:b6:5f:81:b3:c3:9c:e2:73:21:cc:fb:9c:
                    1b:55:13:8b:62:d0:bd:ec:70:bd:d8:b3:1d:8c:12:
                    47:c3:2d:dd:d8:f7:3a:dc:d8:c1:77:ba:06:c6:8b:
                    ac:5a:f3:bb:fb:82:47:8d:4d:94:e5:39:f6:66:c8:
                    e4:b4:2b:40:59:b3:d2:0a:ac:45:a3:f8:8b:fc:7a:
                    b0:e1:d2:e4:48:4d:17:02:ec:40:49:4e:ac:89:23:
                    b0:95:ea:4f:5a:cb:73:40:a0:c1:38:58:34:89:80:
                    dd:00:69:ba:81:01:69:ed:f5:55:1d:68:79:b9:3e:
                    79:3e:d0:82:6b:cd:a3:7e:7d:c8:87:eb:ef:b3:24:
                    ba:ef:2a:d4:9f:a4:05:89:46:7d:07:01:e2:12:f1:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B0:71:25:3B:CD:D6:DD:D6:1B:07:5B:8C:1A:D5:2D:CE:2C:2F:33
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:20:8a:84:28:fe:ec:a5:31:05:04:62:2a:43:cb:fc:1b:c6:
         52:59:39:a0:1d:79:c1:0e:d0:dc:9a:20:bd:4c:e1:ff:34:c1:
         07:c8:cc:d9:0e:7e:c9:d7:a6:c2:e9:fe:4f:80:76:5a:66:0e:
         18:20:47:57:5e:30:f0:c5:f8:d5:49:1d:e2:5e:23:db:0f:a3:
         f7:7d:53:e1:c5:8b:1e:7e:23:4d:37:80:68:36:b3:7b:38:a9:
         33:7b:39:66:46:3c:1e:6c:ec:3c:b9:65:58:35:e8:4a:ea:13:
         37:db:35:28:27:53:ea:38:ca:a0:f4:07:11:83:15:d6:52:1f:
         20:7a:54:a1:23:60:e1:2a:c6:ac:50:ba:74:ae:ad:74:c3:34:
         2a:10:39:0b:38:7d:f4:dd:f0:f0:81:a8:2d:11:4f:f2:54:97:
         4d:b3:3f:74:95:88:fc:2a:c9:48:6b:da:eb:fb:21:b3:ad:df:
         fd:a1:64:ce:9b:ec:8c:39:c9:5d:25:d9:9d:81:69:63:52:c1:
         13:7b:da:f1:30:00:32:cb:d3:1f:df:92:9a:6b:db:f0:85:5b:
         b0:55:78:3e:0a:19:f8:2d:3e:41:b8:8c:40:55:26:18:8f:32:
         2e:be:33:26:42:db:e4:04:80:02:bc:23:8f:e9:db:02:80:09:
         0c:72:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:42 2026 by rpki-client