Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
File:                     XWsFtN3mw5OZctoT9iIH8ibeeSo.mft (raw, json)
Hash identifier:          hHQTNJkXTkYpgG8MiLHlWLJp0CWxpLgJunxMlaZLjA4=
Subject key identifier:   CA:E3:C4:78:BF:60:3D:B2:C7:01:F2:29:B4:FF:03:32:5C:E1:45:73
Authority key identifier: 5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
Certificate issuer:       /CN=5d6b05b4dde6c3939972da13f62207f226de792a
Certificate serial:       019FAC7662CBD680761CEB952B16570D3705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:07 +0000
Files and hashes:         1: O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa (hash: Ws/iiURmVab3uVGnOVSnKwKNuJfPQAcJDFZkcNjz5Ks=)
                          2: XWsFtN3mw5OZctoT9iIH8ibeeSo.crl (hash: E+QOXyk/wmyygAxQhEKfPv6Kbm1Gd+OlhgVPK+Uaihc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:62:cb:d6:80:76:1c:eb:95:2b:16:57:0d:37:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6b05b4dde6c3939972da13f62207f226de792a
        Validity
            Not Before: Jul 29 06:01:07 2026 GMT
            Not After : Jul 30 06:01:07 2026 GMT
        Subject: CN=cae3c478bf603db2c701f229b4ff03325ce14573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:fc:34:6b:3f:5c:aa:eb:b6:4b:66:e0:7f:
                    24:91:3e:3a:0e:7e:3b:09:b7:85:07:11:13:a5:1e:
                    08:9e:1e:de:1f:be:25:41:7b:e5:55:96:c9:d7:bc:
                    e1:ed:04:a1:c6:fe:00:06:ec:c2:1f:df:52:e1:38:
                    a5:f6:db:1b:c3:b0:df:33:14:78:be:9f:8a:65:c4:
                    bd:ee:53:be:3b:96:31:63:86:7e:f8:98:c6:95:c9:
                    a9:57:de:41:f3:61:b9:70:b0:db:b6:2a:a6:9d:27:
                    e5:f3:fe:3c:80:f8:8d:5b:dd:ed:8e:b1:9f:e9:04:
                    e7:90:2f:ab:4f:aa:23:90:ad:dd:8a:9b:84:48:04:
                    fa:db:53:5c:e0:d0:64:4b:49:ad:cd:ff:fe:26:f5:
                    a8:65:fc:38:87:c1:4d:3c:05:59:1c:07:b9:c6:40:
                    93:8c:a5:2b:cc:38:c8:5d:3d:a6:2e:f7:28:c7:19:
                    93:da:04:14:3c:38:2a:8b:ef:93:78:1b:46:93:f7:
                    13:65:72:ee:31:d8:4a:4e:08:07:81:18:82:f8:32:
                    46:55:82:f0:1c:e0:16:7c:85:b0:62:07:1c:67:f4:
                    56:db:6b:f0:d9:9c:49:fe:28:19:47:e3:b9:d4:7d:
                    26:b9:5b:07:0e:92:74:1f:57:86:63:74:b3:41:89:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E3:C4:78:BF:60:3D:B2:C7:01:F2:29:B4:FF:03:32:5C:E1:45:73
            X509v3 Authority Key Identifier:
                keyid:5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:40:21:1b:e4:25:7a:f3:93:ce:35:fc:31:db:11:0a:69:fd:
         02:09:a2:01:89:4c:ac:4c:e7:3b:5e:1a:c4:fa:dc:3a:e7:70:
         39:8b:b9:08:dd:63:2b:a5:10:c0:8c:05:7b:2a:fa:ac:ff:c1:
         0e:0a:fc:d1:ea:bc:6a:aa:39:0d:b9:8e:95:dc:45:f8:07:c2:
         8a:45:ac:e6:32:de:28:45:ba:d9:1c:fa:a5:67:ac:43:5b:76:
         b7:52:b3:55:a1:ce:a0:19:71:7c:99:93:0e:55:30:ca:bf:5f:
         29:0d:ba:91:14:8f:15:b2:b1:aa:14:62:64:bc:0b:ab:ee:14:
         c3:c2:df:60:f8:47:e8:37:f9:06:ab:f0:c4:9b:51:a1:3b:ec:
         f5:76:35:5e:0b:c4:c5:4e:0f:ed:b4:78:68:0c:56:45:e5:69:
         87:ce:db:33:53:64:dc:77:86:4b:09:e5:c1:30:55:65:92:f0:
         0e:70:ef:e5:16:46:3e:1a:09:66:87:91:73:db:d0:d1:00:80:
         e7:9a:78:26:f1:ba:7c:6e:8a:c2:23:7c:6b:b8:48:03:fd:16:
         37:8c:4c:1d:fd:a5:0e:10:3c:a0:39:8e:39:0a:16:54:7e:89:
         83:9d:d8:5b:c6:93:77:53:85:e6:60:6d:f8:ca:7c:09:62:64:
         16:8f:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:20:26 2026 by rpki-client