Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          btXsgilE7Yo85//SY6LWhhsVrImLwmMcSlOATK1adwk=
Subject key identifier:   BA:52:35:80:20:7A:C4:60:42:62:35:A1:74:99:DA:13:98:0C:A6:4E
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       019FAA5060F9670FF2D29B10597E43AF6AF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          1965
Signing time:             Tue 28 Jul 2026 20:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:22 +0000
Files and hashes:         1: fePebiytxTMuGPH6fSC5E4YL5wc.roa (hash: yXbEU3IXKyJOB9RtZy0YOmQELScqMwS4Y+CH/uELRY4=)
                          2: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: i0kmmiAJJdXnjYUv46TxYebQ2e2QOKhx8M7jlKSAW6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:60:f9:67:0f:f2:d2:9b:10:59:7e:43:af:6a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: Jul 28 20:00:22 2026 GMT
            Not After : Jul 29 20:00:22 2026 GMT
        Subject: CN=ba523580207ac460426235a17499da13980ca64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:fe:50:63:db:3a:4e:7c:08:18:e9:a1:1c:
                    a2:82:38:50:11:23:43:63:58:b7:d1:4f:c0:de:15:
                    e0:de:09:7d:26:72:92:34:d9:7b:9f:28:41:90:11:
                    0c:43:c1:13:38:ab:80:52:35:76:5b:97:ed:36:d4:
                    d6:3c:1d:d1:e6:3c:8c:b4:a2:39:74:e5:ef:d6:ed:
                    c3:b5:da:e1:e3:0d:7c:1d:5c:30:06:e9:39:3c:c2:
                    b8:ac:4d:a1:1e:14:c6:58:ea:1f:a9:45:c7:f7:40:
                    59:ed:d5:55:49:dc:14:f6:b2:93:dd:30:ab:67:5a:
                    9e:64:bb:db:de:a4:24:9e:77:f7:77:44:d1:c8:5c:
                    55:b6:72:b4:25:ba:89:aa:cb:92:f0:4c:90:18:d2:
                    eb:76:d0:10:23:44:61:33:28:c0:06:8a:d3:8e:ef:
                    68:89:04:f8:0e:03:dd:43:d0:20:4c:bc:a4:a5:0a:
                    61:27:47:02:30:66:e9:4a:34:a4:92:69:56:57:ac:
                    48:67:3e:61:85:02:c3:65:3d:97:50:b7:4b:ea:ba:
                    f5:81:31:05:3e:05:13:00:b7:b6:8a:18:07:57:c6:
                    ae:b1:eb:a0:24:93:f9:f6:e5:e5:fa:f9:29:12:da:
                    9d:70:d0:f2:cf:c5:dc:77:d8:0f:bc:64:22:d7:5b:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:35:80:20:7A:C4:60:42:62:35:A1:74:99:DA:13:98:0C:A6:4E
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:98:25:c8:49:39:9a:ae:24:e7:6d:70:cf:d5:b2:c7:54:2c:
         06:3e:79:a9:9d:d2:be:2d:26:1f:93:17:16:88:1a:fd:8a:6f:
         30:01:1e:36:e6:8d:7b:22:0d:18:ed:dc:a4:98:38:84:52:31:
         47:e2:9e:40:0d:28:21:30:6b:31:10:61:bc:af:91:7a:6a:69:
         c4:59:a0:e5:89:cd:7c:fc:42:06:ef:9d:b8:65:0e:6c:d6:b6:
         00:bb:5f:64:11:2c:c7:ed:e4:8e:e6:4a:ca:87:2a:00:b2:db:
         dc:94:94:a6:c4:46:84:82:3a:30:d4:05:89:41:e5:24:24:19:
         6e:f5:7b:31:19:f2:29:02:e5:e0:c7:f9:b7:dc:4a:a9:e3:c2:
         2e:7b:66:2e:9d:ba:19:9d:ba:e6:7d:ef:06:11:7e:80:d1:de:
         e3:6b:b2:ce:10:16:9f:15:80:78:a3:dd:2d:be:8f:76:f4:44:
         6b:5d:01:00:ac:35:75:6a:8a:b1:be:d8:31:11:e3:bb:14:d1:
         19:32:bb:78:52:35:03:59:db:07:47:1c:ec:43:b0:48:82:0d:
         03:32:0e:82:5b:a8:f8:ff:4b:be:62:ad:69:a1:5e:3f:79:0d:
         ba:84:a3:69:6b:f6:e0:4b:11:0c:15:bb:01:1b:81:6a:05:ea:
         db:a3:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:44 2026 by rpki-client