Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          3UzzGbZGS4sHvL3CeYlv0XIHywtpyWw6XUT5Ov8pmVM=
Subject key identifier:   BA:09:1B:07:85:40:45:F9:F6:76:86:28:14:F9:31:9C:33:90:6F:EA
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       019FAB2CB3D683FC1BB1BF91C0070AB85540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          0FEF
Signing time:             Wed 29 Jul 2026 00:01:01 +0000
Manifest this update:     Wed 29 Jul 2026 00:01:01 +0000
Manifest next update:     Thu 30 Jul 2026 00:01:01 +0000
Files and hashes:         1: 4xfelhMyKjiAcpwxhZeIvv3Qing.roa (hash: M45T3Ux9RH0dWd2jQVba7oO9zhwgfDQ6pVLKhbaYTkM=)
                          2: LgD5htJGPPhQqKRT3OXosm95CvA.roa (hash: oCLNTeRXkZO9pSz62dS9ZHRdid9Os6l7QArra7xL/Dg=)
                          3: WM9dDCzCe6gGu2ODAykACZrFrbA.roa (hash: 4IvyYiGqHBx7zs5uBUW79nDrwRTJcNSRaHg9JrlQ3jo=)
                          4: kPRn4IPVWWUv814bPYd5aulY4vs.roa (hash: pu7rhb9GulQsSqKDEhgigUvr3uxyKt/XFbT+d2vYueU=)
                          5: oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa (hash: 4+asMob/DRGngq6GAVzO2x+uYasSdWuu4BCpYVlKFoo=)
                          6: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: rJWUL6WajKV99MVoxUpUaxNgOyFPbptHP4B2v3xX3tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:b3:d6:83:fc:1b:b1:bf:91:c0:07:0a:b8:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: Jul 29 00:01:01 2026 GMT
            Not After : Jul 30 00:01:01 2026 GMT
        Subject: CN=ba091b07854045f9f676862814f9319c33906fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:40:a5:de:f1:29:4f:83:a4:1e:35:84:ba:
                    4b:45:94:7e:7a:49:b7:40:90:08:63:2b:2a:b5:09:
                    f7:ce:ee:e8:79:74:9c:28:12:0d:1e:28:ff:0a:82:
                    db:cb:f0:dc:ae:8b:8e:23:ee:45:d6:0c:c1:1f:84:
                    27:b9:5f:c3:c9:fb:82:ef:34:a9:f1:76:d1:68:6e:
                    db:66:b3:37:9a:27:5a:68:ec:44:c9:7e:18:a0:8b:
                    ce:7f:55:08:cd:d0:a0:1f:57:a1:83:e5:c0:76:d1:
                    16:0e:62:3f:9d:80:00:a2:93:7a:1c:fe:f2:ca:ed:
                    57:8b:c5:ab:73:82:1b:a5:de:0e:67:7d:4f:84:96:
                    44:5c:b6:6b:62:64:07:e6:0d:86:9a:ff:ec:a3:24:
                    1b:0e:0b:86:23:c2:e8:c4:5b:66:e2:6c:23:6b:e4:
                    4f:f3:8d:0d:02:8f:69:45:26:2c:a4:a8:45:b2:3f:
                    0f:74:76:45:14:38:e3:3f:65:42:5e:df:52:cd:79:
                    e2:b0:39:90:0e:33:a1:bf:1a:28:6f:f6:d0:b5:7e:
                    5a:f4:8a:6f:b3:70:f7:2d:d8:52:7c:40:9f:f4:c3:
                    02:3d:ef:98:15:50:bd:41:d9:0c:53:55:5a:48:8c:
                    1e:ae:76:36:a4:d3:59:e7:b7:01:ec:fc:7b:c1:2e:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:09:1B:07:85:40:45:F9:F6:76:86:28:14:F9:31:9C:33:90:6F:EA
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:33:7c:83:db:6e:3e:9d:55:54:ea:a2:61:c2:ab:e7:8c:2a:
         8d:35:ce:25:11:ff:67:98:33:c2:8f:5e:16:bb:03:01:2a:a7:
         07:43:6e:39:23:41:1e:a1:a7:b3:7d:74:10:37:c0:36:44:72:
         ad:42:00:6c:22:d0:72:1a:2c:97:a8:18:cd:89:a6:bd:e3:10:
         b8:aa:8b:0e:b6:24:01:11:34:0f:18:93:02:53:7f:c2:cb:b7:
         4b:5b:eb:ca:05:ad:b8:18:c2:79:4d:9e:14:1b:c2:eb:24:bf:
         72:7f:0e:15:00:a0:12:9a:ae:29:01:71:7e:60:51:a2:4a:a1:
         08:72:39:47:e8:8d:f2:65:42:de:61:da:03:a4:81:17:60:60:
         f4:74:f4:8e:ff:e5:da:4d:c6:36:f4:5d:e8:58:04:59:9d:9b:
         5a:c0:7f:21:93:77:10:c7:25:ea:0c:26:3f:d7:73:58:30:82:
         6e:ac:b1:b2:4c:26:92:1a:51:4f:db:0d:ac:c5:93:e0:eb:ed:
         21:d6:bc:ff:df:dd:1f:59:28:bd:cc:a9:49:5f:06:81:1b:e6:
         a1:2f:cb:b9:cf:ab:01:b8:b8:12:65:f7:5c:37:0e:cf:92:80:
         a6:e7:15:92:c7:53:30:6d:c0:6d:c9:1d:7e:a8:39:8a:79:6b:
         a7:28:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:45:45 2026 by rpki-client