Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File:                     xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier:          FZoRR32TmWW1G49Vra9ys7anaG19FhO11rOxYkV5SNU=
Subject key identifier:   4C:2A:B9:4A:64:E2:E0:8A:76:06:7F:13:EF:34:7F:CA:C1:6A:A6:45
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer:       /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial:       019FAC083A4783E45874EF1E8A023AB1F347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number:          1821
Signing time:             Wed 29 Jul 2026 04:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:48 +0000
Files and hashes:         1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
                          2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: NVMxtSEaDhcV07RKqijx6D9NQ0QHhBWgeTNDhm26V7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:3a:47:83:e4:58:74:ef:1e:8a:02:3a:b1:f3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
        Validity
            Not Before: Jul 29 04:00:48 2026 GMT
            Not After : Jul 30 04:00:48 2026 GMT
        Subject: CN=4c2ab94a64e2e08a76067f13ef347fcac16aa645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:b1:9d:e9:4f:4e:de:0a:7a:42:0d:93:ee:
                    bf:55:ef:96:14:e2:b0:8b:82:1b:e6:4e:d6:2e:25:
                    a7:ad:86:95:5e:a8:15:4a:1b:32:34:92:c1:b4:89:
                    b9:39:b2:a8:84:49:5b:5f:1e:33:c9:18:6b:1f:0a:
                    8a:7c:0b:ed:46:b9:17:23:20:71:f7:c9:64:ac:f9:
                    00:0c:f4:9d:26:a7:71:85:52:6f:94:5a:03:bd:5f:
                    5f:31:bf:99:cd:68:24:3e:83:58:35:6c:89:d0:5e:
                    42:98:68:db:14:df:8a:ad:dd:a3:eb:77:85:b6:89:
                    6b:23:f7:b2:ab:f9:77:92:20:25:d6:87:f9:ec:83:
                    91:44:33:39:13:f2:07:35:75:06:0f:a9:11:24:95:
                    aa:df:02:d6:da:25:72:b6:4d:8b:75:7d:6f:a7:91:
                    83:13:c1:f6:a4:f6:64:bc:31:22:df:5f:b0:a7:37:
                    43:8f:06:4b:9e:3c:30:fc:7d:57:2b:68:4d:15:5c:
                    a1:f4:3d:62:8a:19:89:89:ca:23:92:9b:58:c2:9a:
                    66:cc:e2:5a:d1:95:82:eb:90:23:78:9f:6f:4a:03:
                    b7:63:68:fd:8f:4c:93:ca:01:60:8b:ee:ec:8a:b1:
                    51:ff:b3:13:99:2e:e1:b6:30:7d:39:40:d2:fe:be:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2A:B9:4A:64:E2:E0:8A:76:06:7F:13:EF:34:7F:CA:C1:6A:A6:45
            X509v3 Authority Key Identifier:
                keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:e4:d9:07:f3:84:00:21:6f:1d:92:8e:1c:c5:15:b2:84:
         f8:c9:65:13:f4:fc:c7:b3:25:b8:84:0d:11:8c:9e:5f:58:68:
         60:05:ff:c3:43:8f:8e:8f:58:a3:d9:32:ad:a1:80:a5:c8:fa:
         da:0a:6e:2f:ab:12:ce:70:90:a4:21:19:77:7e:a4:24:9a:c6:
         fe:c7:e1:98:09:e6:da:9e:73:8b:34:d3:df:76:f5:9c:0f:fe:
         d6:0c:e3:58:a0:16:e4:f0:7c:c6:86:ab:ab:be:73:aa:e8:5a:
         91:93:70:35:8a:05:60:bb:6b:7e:ab:04:af:61:9a:da:71:46:
         b8:a3:f6:7c:c5:ac:16:32:86:ad:07:a1:76:04:c6:64:29:1b:
         94:e0:35:c6:73:5b:3e:75:c7:f8:e1:0b:ff:bc:a8:cf:0f:e2:
         5e:88:65:ea:90:6f:4b:0a:71:99:8e:a0:77:cc:9f:e0:dd:11:
         22:cb:e2:8b:d6:ff:ea:c7:01:d9:da:77:9e:02:fa:81:97:27:
         67:68:8d:14:bd:96:b5:57:96:28:ac:c8:7b:48:d1:ae:e5:a5:
         f6:8f:6f:ad:9c:31:40:c4:a1:39:34:3c:62:82:ae:b2:14:9a:
         3a:3f:9d:68:f8:15:9b:da:97:92:40:eb:da:5d:ae:7f:d9:d7:
         17:2d:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:20:29 2026 by rpki-client