Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          5+j2xS/1eECCXbH2E1YvEL8Y10PvTO+c0SW9rVw6c8Q=
Subject key identifier:   25:1D:3C:38:E2:5E:1D:27:F3:9F:12:B3:13:7E:8D:F1:7D:5C:50:64
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       019FAA8896EC3FF5CC4F103548D47CD9912F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0B0C
Signing time:             Tue 28 Jul 2026 21:01:45 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:45 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:45 +0000
Files and hashes:         1: 15TndIZ3xh3OI8ZFUhUnbaYgevk.roa (hash: BPYOif2l+lZ54+78+a+9qECWNl9BfYZrchXEIFBYQN8=)
                          2: 97z5LT1W4vZYavKPXg_O49_MY-s.roa (hash: gyOyoIXXJi4jWXdpeab8PuMwCqtDwMbIU0Xhxks68Zc=)
                          3: BgM7Z-hf4ZmFOJu6X5CdP5efJ28.roa (hash: 0PK12/6KwOapd3jaEkPiUknqIb57oljJN1nirZLOhCY=)
                          4: kYRR38ICq9ItDhQJiQSFEmuaZCk.roa (hash: 2GZZrZK8I9JcWijw4HIji3r5v/uDz5lVmOVbPE0wJAU=)
                          5: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: j0QSF/4iuWvttbeu7e5DiMJ1vOgNEfh4mIufrnC7e9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:96:ec:3f:f5:cc:4f:10:35:48:d4:7c:d9:91:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Jul 28 21:01:45 2026 GMT
            Not After : Jul 29 21:01:45 2026 GMT
        Subject: CN=251d3c38e25e1d27f39f12b3137e8df17d5c5064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:f2:6d:8c:f0:a9:4f:1e:77:c8:89:2f:38:
                    a0:89:95:34:49:8c:06:0a:ab:f3:a9:be:d9:8d:4b:
                    66:29:91:10:dc:fc:70:48:87:6f:24:cf:dd:1d:fa:
                    c5:2e:f3:9c:57:1d:5c:9f:ab:66:ff:7d:43:ab:33:
                    2a:63:73:12:25:68:09:4d:49:8b:ed:50:8e:25:ce:
                    f4:e1:82:2b:6e:00:72:a9:10:f2:54:0f:c9:3e:a0:
                    14:36:89:cd:5b:d8:4e:cf:88:18:42:68:b6:da:d1:
                    ea:c0:e7:f8:30:ce:cc:64:30:60:cf:d1:5e:78:07:
                    44:33:e3:ed:c0:ea:96:6c:50:a2:bf:d8:5d:e8:61:
                    cf:c1:f4:dc:27:fb:ce:74:e4:ea:86:0b:70:24:d4:
                    70:22:7e:96:4e:8f:fd:61:3d:4c:27:34:a7:dc:d8:
                    dc:8f:d9:4f:74:1f:14:20:e7:4f:ec:11:ae:f6:1c:
                    bd:18:33:ef:fc:cf:5a:5b:85:16:d5:4b:82:ee:f3:
                    22:6d:0a:90:bb:0f:b7:57:2e:9e:bf:82:c4:85:a7:
                    1d:9b:19:54:5e:42:a1:b4:ef:ea:66:cb:0c:13:6b:
                    3b:1d:a6:61:00:21:03:0f:6e:fa:dd:bd:23:39:70:
                    ac:bb:2f:ed:f9:e3:5a:58:92:47:9a:3b:e2:88:4f:
                    33:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:3C:38:E2:5E:1D:27:F3:9F:12:B3:13:7E:8D:F1:7D:5C:50:64
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7c:dc:5e:1c:47:91:b7:65:ce:03:5f:86:24:87:6a:c1:cf:
         ea:b4:d7:6d:41:c3:dc:d9:3e:12:15:31:56:e3:d3:94:63:09:
         b3:1b:74:16:ba:ba:3e:d4:81:f0:c0:0c:f2:26:8d:40:9d:98:
         0c:85:98:46:da:81:ab:bb:8a:bd:85:89:c6:c3:87:67:e8:98:
         49:26:ac:4f:24:12:8f:90:55:c6:25:de:16:86:8a:32:aa:75:
         ff:ca:61:28:52:19:ff:d9:52:9a:d0:6e:10:e9:1f:fe:e9:5b:
         9a:7b:d1:ce:60:d1:b1:5a:64:9d:88:db:e0:20:f3:56:e7:f8:
         01:f1:ff:a2:43:97:7d:12:d9:98:de:66:51:b3:0a:f4:ad:d1:
         5a:8c:56:59:3f:f1:8d:6d:ed:7d:a1:8c:5e:9f:57:ef:6d:fe:
         c1:b3:83:c8:a2:0e:41:1e:46:ed:97:0e:9c:10:78:2e:90:14:
         a5:be:cd:12:5f:4f:0c:32:48:70:fe:ca:b9:2f:f3:81:cc:4c:
         c9:16:15:8d:d6:99:54:50:b4:11:4f:ff:e0:52:43:62:8f:f1:
         3f:09:cb:1e:3b:97:e9:b6:97:c5:03:0a:32:27:25:12:f3:2f:
         db:2f:8f:f7:93:35:bc:8d:af:fd:f8:cc:63:de:62:7b:f4:46:
         6b:50:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:18 2026 by rpki-client