Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File:                     XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier:          Klk1C15CQMXvQ9y4BweDps5FP1G6+MwGurPu7Hw2CLk=
Subject key identifier:   31:3E:46:36:63:C0:E5:D1:12:DE:06:31:3E:16:EB:12:2E:8E:DA:32
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer:       /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial:       019FAD518E75F529ED4C3F6EED8765AE52CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number:          0805
Signing time:             Wed 29 Jul 2026 10:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:30 +0000
Files and hashes:         1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
                          2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: S3Rl86NYQVgilla15+46UUzKKtGJB8wGtWoAPFhmuqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:8e:75:f5:29:ed:4c:3f:6e:ed:87:65:ae:52:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
        Validity
            Not Before: Jul 29 10:00:30 2026 GMT
            Not After : Jul 30 10:00:30 2026 GMT
        Subject: CN=313e463663c0e5d112de06313e16eb122e8eda32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:a3:46:54:74:58:44:c1:4b:93:92:26:d4:
                    92:e9:b4:dd:8c:a8:50:4a:48:8c:00:3c:4c:d7:d6:
                    a8:41:dc:0a:ec:5a:92:62:df:1f:6d:0a:33:8f:01:
                    07:c1:c7:6e:a2:dd:90:a4:73:a8:4f:26:a2:d7:72:
                    66:37:50:ab:f7:ad:ce:11:1c:1a:54:c6:e8:74:2b:
                    49:53:88:0d:9d:e3:ef:e3:90:ec:33:a5:fc:b7:4c:
                    b9:7a:4d:11:b7:f1:8d:48:ab:56:a5:f7:89:3f:49:
                    4e:a7:b3:5a:3e:5d:4c:33:44:d6:08:b9:a8:c6:b1:
                    27:6d:0a:d8:8e:e0:97:a3:74:5b:d9:21:c6:b2:28:
                    4b:68:e2:77:13:60:9d:5b:ca:41:5a:e6:51:3f:f7:
                    77:39:a3:fc:75:92:9a:22:86:96:c6:f0:04:43:67:
                    30:f4:fd:cb:bc:73:cc:cd:dd:cc:0a:5f:bf:bf:ca:
                    98:db:2e:f2:bd:f4:3c:3e:dc:4a:cb:5b:fc:49:01:
                    11:e8:97:1f:c5:2e:eb:91:da:e8:46:9c:3c:9e:6f:
                    37:8b:55:c9:04:23:28:53:56:3f:70:3e:e7:a8:3c:
                    e0:a1:63:e3:cd:38:b1:e1:f4:a4:57:7d:66:4e:47:
                    11:c4:f9:f8:93:d6:a5:8d:41:34:0b:d0:8a:c8:fe:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3E:46:36:63:C0:E5:D1:12:DE:06:31:3E:16:EB:12:2E:8E:DA:32
            X509v3 Authority Key Identifier:
                keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:0c:a4:15:17:29:e5:41:8d:a3:53:c4:3c:26:27:1d:98:
         bc:df:d9:0e:cf:b4:3c:45:48:ce:2b:91:c3:2d:60:bc:0a:0e:
         ff:08:bf:6b:77:ba:da:d3:84:ef:0a:fb:fc:20:40:02:10:5b:
         cb:fd:b7:cd:02:e7:e4:4d:81:ca:b2:e8:c5:ac:e3:6f:21:2a:
         41:81:de:95:43:85:8b:4c:05:34:7e:16:1f:8f:00:ad:44:2a:
         0d:27:92:be:7a:2a:62:8c:3a:1f:6a:e1:e1:c7:a7:2d:0b:9c:
         22:75:69:e7:ec:f2:11:e5:70:aa:50:f1:1a:f5:83:34:8b:71:
         d0:75:8c:e1:9f:15:92:cc:1c:6d:d0:b3:fc:8c:34:7a:5b:30:
         df:6e:29:3d:10:46:88:c7:76:a0:6c:05:c4:70:87:bb:0a:a7:
         1f:a7:fa:b6:be:c9:39:0c:fb:b6:60:04:f6:c5:9c:a9:b1:26:
         e5:bb:8b:55:0d:46:12:f4:6d:e8:66:9e:c3:af:36:9f:bb:e5:
         cd:9e:78:24:5a:81:99:f1:fc:f4:8a:f4:03:7c:59:57:ef:d8:
         5f:46:a7:43:0a:35:97:9d:df:54:f0:34:57:84:7d:d8:0d:6d:
         e9:95:63:97:67:c7:8e:e1:f1:23:d8:0c:19:66:d4:9a:b5:75:
         2e:e3:67:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:04:16 2026 by rpki-client