Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File:                     xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier:          lCrM+B5PcK/bJYCohAaHQJAkS5v2aszepdMJz0e4dj0=
Subject key identifier:   47:89:A2:56:01:80:77:C9:86:C6:12:F4:D3:C0:0A:34:A7:4C:4E:EA
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer:       /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial:       019FAA886C323F5F23B90EA68DE6542A8EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number:          193B
Signing time:             Tue 28 Jul 2026 21:01:35 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:35 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:35 +0000
Files and hashes:         1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
                          2: HuBqJxrPz8cJIEhWPQ734TMtT-k.roa (hash: tQAxKG9Tf5jOtAxlSBHO2a2s2np2ioSUpEcr2kqOTv4=)
                          3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
                          4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
                          5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
                          6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
                          7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
                          8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: 8zbBoMZfPCWjTwaaOQbmcRHl62BziImlllghT0SYmXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:6c:32:3f:5f:23:b9:0e:a6:8d:e6:54:2a:8e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
        Validity
            Not Before: Jul 28 21:01:35 2026 GMT
            Not After : Jul 29 21:01:35 2026 GMT
        Subject: CN=4789a256018077c986c612f4d3c00a34a74c4eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5b:8e:87:cd:c7:3a:8c:61:50:7a:5a:01:b5:
                    26:82:f7:17:2e:e5:d2:70:ed:66:e9:06:6a:05:66:
                    aa:a5:e4:fb:05:b0:a9:8c:81:ab:ef:54:7b:05:95:
                    45:ae:28:44:d5:79:0b:3b:e3:37:51:40:7a:63:54:
                    28:4e:3c:a4:65:4a:88:36:7f:48:f0:2b:46:94:28:
                    23:cb:48:81:1a:42:f1:c7:83:ae:3a:af:70:80:98:
                    27:f7:d6:c1:eb:a4:46:8c:6c:a0:b6:1a:3a:ac:dc:
                    7c:99:dd:a2:ae:49:0b:90:7f:6e:7d:8d:51:0e:15:
                    1b:b6:4e:bf:ce:27:66:55:48:dc:19:ba:f5:f8:90:
                    be:e5:39:09:29:14:d3:8d:a0:d3:02:fd:9a:bd:67:
                    8f:ff:70:ea:b9:a3:e9:94:7c:1d:c4:31:84:30:99:
                    1d:c7:4a:08:8f:1f:d8:8d:0c:28:f9:83:ca:85:63:
                    a9:b3:5a:81:98:dc:98:74:42:87:f3:4c:d0:10:41:
                    09:9d:aa:4b:d3:5c:93:e5:34:72:71:25:d9:57:10:
                    23:12:d4:3f:e2:ac:f8:22:a0:47:44:87:87:7f:a2:
                    55:65:4a:a1:60:64:23:d3:26:43:03:72:b4:6e:6f:
                    6b:58:ce:2d:5d:6e:0b:09:74:78:c9:65:65:12:b1:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:A2:56:01:80:77:C9:86:C6:12:F4:D3:C0:0A:34:A7:4C:4E:EA
            X509v3 Authority Key Identifier:
                keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:7e:d3:b4:63:d7:fc:9e:bd:84:9c:97:7b:75:e8:86:0e:
         c8:50:c4:0c:55:2d:eb:fb:58:be:07:46:d7:b2:f3:cd:f5:d5:
         50:45:a1:b3:f2:2b:64:f4:5b:44:93:09:23:a0:ac:5a:3a:95:
         bc:e6:b3:36:b0:d8:79:4f:59:8a:d5:02:a2:eb:b0:e7:77:59:
         1d:8f:f9:73:c1:a6:90:87:8d:25:ca:38:58:d5:b4:93:a5:cd:
         f2:89:5c:f5:ae:23:9f:b8:04:29:aa:ee:59:de:fb:f4:e5:44:
         cd:24:03:5a:fa:c0:72:c5:be:de:d7:f1:ba:91:19:f0:ad:22:
         68:1b:be:8a:0e:e5:bc:db:ed:b5:aa:e6:81:f5:d1:f5:db:78:
         b1:ce:b2:54:eb:2b:a1:43:a2:0a:8d:e2:58:f8:1e:42:f1:2a:
         3c:e7:69:6b:2e:1c:a9:e6:02:67:09:e5:6d:82:54:6a:aa:cb:
         00:ec:dc:29:1d:0c:4b:8e:3b:03:a4:29:17:a6:9a:4c:fd:16:
         89:f4:7f:c4:58:07:56:2e:14:3d:78:3d:b3:bb:92:17:70:e8:
         11:4e:33:47:0e:4d:46:5a:f3:e3:06:eb:9e:0a:9d:b1:7d:48:
         06:3e:11:30:22:a6:64:87:6e:2d:2b:7c:4b:5b:53:f3:bd:9f:
         4a:ee:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:32:03 2026 by rpki-client