Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          5xams2A9axCOk0EbUdA8C+JEKDSzJmqiXRtASs/ftV4=
Subject key identifier:   EA:BA:82:E2:B2:8F:6E:A6:49:2E:65:32:4B:77:37:F5:66:9D:1F:A6
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019FAB9A6AF46B95C14CB841E407CADE87EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          0A88
Signing time:             Wed 29 Jul 2026 02:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:51 +0000
Files and hashes:         1: 4YRS6EEeuTI9ZfzO53iKNIfSN4s.roa (hash: Tv3HULU0Zra1BolAPc2Q/gu/Km7IonOCAUA8ZpZ63Jo=)
                          2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=)
                          3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=)
                          4: kt9wkvMfUjDBISQAMhIZ_H3acrA.roa (hash: 2eym/C1FIDZNxIwzhAk1LB/uLTJl3u4Wtgxo8cZEAdo=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: wN8tIXHsLMt5lrcE/7t5ar+j7xWtjkYZXLVTWu5Y35Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:6a:f4:6b:95:c1:4c:b8:41:e4:07:ca:de:87:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Jul 29 02:00:51 2026 GMT
            Not After : Jul 30 02:00:51 2026 GMT
        Subject: CN=eaba82e2b28f6ea6492e65324b7737f5669d1fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:13:10:95:3f:16:ba:37:42:a2:a2:69:c4:
                    c1:b0:4b:04:30:4a:e5:8f:83:32:b8:c2:5b:ad:98:
                    e7:08:70:54:84:31:75:c3:87:36:3f:f2:64:ec:81:
                    5b:a0:5c:e1:10:b0:d9:e4:aa:7b:84:be:e8:ba:af:
                    c4:d3:10:50:d2:81:e0:6f:91:bb:5c:46:70:cc:15:
                    80:48:f0:ea:32:f9:64:6e:48:ea:6c:43:e4:29:7f:
                    01:43:88:97:91:b5:08:37:ad:8b:c5:1e:5a:fb:07:
                    e3:a5:08:75:b8:55:1d:4f:f9:7b:a6:1a:a8:b6:85:
                    f2:f5:40:b8:e7:89:0a:d5:1a:75:6c:45:09:ab:e2:
                    35:4e:2b:94:72:16:07:b6:8b:64:c2:73:f9:14:a4:
                    a8:18:d5:96:bf:fd:92:13:62:e7:bc:da:7d:0f:80:
                    1f:25:4b:85:1f:ed:15:d0:e0:df:36:43:ea:47:52:
                    2d:6b:31:f8:e5:bf:bb:21:1e:2f:0a:9e:20:22:3f:
                    19:2d:fd:d0:74:f4:6f:b6:83:fd:b9:9d:0d:6f:f1:
                    72:36:38:bc:9e:4b:b3:8b:0b:43:da:ad:eb:97:df:
                    ed:77:55:42:5a:e9:22:bc:ad:5d:97:46:83:66:d7:
                    8a:a1:e6:69:a8:97:a3:01:0d:55:03:d4:37:f5:3d:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BA:82:E2:B2:8F:6E:A6:49:2E:65:32:4B:77:37:F5:66:9D:1F:A6
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:b9:12:c9:ec:4b:91:ab:41:83:45:a3:f2:88:80:01:02:
         00:2c:de:77:96:fd:d0:a7:09:1d:4b:9b:5e:b3:a3:92:78:77:
         5c:b3:55:5c:6c:82:8d:0e:3e:8e:74:e5:ed:52:20:09:58:e3:
         f4:e9:5a:ce:3b:4f:eb:cb:5a:f5:a1:32:83:af:58:79:55:b8:
         d5:ea:aa:b3:34:00:a9:c4:47:60:93:b8:c9:86:89:8c:b5:a2:
         f7:f1:e2:a3:2c:35:cb:52:a8:20:45:c6:19:23:3e:b8:7c:dd:
         ef:83:ae:62:b5:6b:76:60:9e:0c:79:72:a4:f4:cc:6a:3a:3e:
         2a:b5:1b:7a:dd:f6:de:42:c0:e8:d4:02:75:42:e6:b4:5a:da:
         4f:c6:40:69:22:8c:f5:1a:82:20:39:56:0a:91:30:cb:8a:f3:
         2c:0f:f2:73:36:ef:85:f5:be:f3:cc:da:71:8e:93:03:15:eb:
         39:73:a3:36:eb:a2:04:0f:ee:90:44:0d:3b:79:84:ed:71:05:
         ce:22:b6:0c:8b:24:b2:b0:42:ec:fa:60:56:3a:52:f6:d4:60:
         98:43:d7:1c:26:1e:f8:6b:8f:99:87:e1:30:97:11:f6:54:47:
         76:1f:71:c6:4c:2b:28:b5:6a:59:88:2a:22:90:79:19:64:e1:
         e3:a5:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:27 2026 by rpki-client