Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          s1EVgxN+wTT9P6VEY8uwmN1y6lWszr51XZdXHVS4pjI=
Subject key identifier:   E8:69:4D:89:E1:6E:60:68:92:53:36:DF:5F:14:37:C9:B5:F1:32:3F
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       019FAC3F1E3526A4AF82FFB4DEDD1C382931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 05:00:45 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:45 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:45 +0000
Files and hashes:         1: 4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa (hash: +7cyCy/NdgEzdqXIvMYXBG6PX6qWy1L3JHGAtDMeS30=)
                          2: IVJmRlo_N7uujpHOQ1PY0oGuwPE.roa (hash: HId6QIpCvryq7pzO2cSpzlsjWi8B2cu2NyD1dmCRRqc=)
                          3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: 1zqL2UhadyDAYBJ9kZHBO5dM1S+xorOoDv1DvC+pvK8=)
                          4: YU7DQQUK3WS2GF1fwXGzic4CVRE.roa (hash: 5Kaf0g8MgSwJ+dws3X5JQrcvkrcgCUQzsjR1OpBYhtw=)
                          5: cJHyNL6n_BStyxq8HQ3hJvNAMq4.roa (hash: V4roFS8vi9SUabC+vIIX/fQMu7+uk5jkREg7A/YHemc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:1e:35:26:a4:af:82:ff:b4:de:dd:1c:38:29:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: Jul 29 05:00:45 2026 GMT
            Not After : Jul 30 05:00:45 2026 GMT
        Subject: CN=e8694d89e16e6068925336df5f1437c9b5f1323f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:27:0f:05:43:61:2b:21:14:6a:c7:7e:e3:
                    2f:97:63:c4:7c:4d:76:4f:6c:39:58:8c:84:ad:cf:
                    96:42:dd:24:82:6f:2c:a1:98:9b:9b:1b:b4:ee:14:
                    a6:50:fc:f6:6e:ed:01:b3:1b:9d:b7:51:cc:67:6b:
                    28:d4:3c:72:78:0e:94:aa:f6:55:be:a9:96:39:03:
                    31:c5:17:d6:21:7c:f7:07:fe:d1:a7:18:24:9d:75:
                    53:61:b7:3c:3b:2a:a2:a3:69:39:d3:7f:fe:4d:7d:
                    94:e4:85:c4:b2:eb:df:4a:b5:3a:6a:04:b9:60:3d:
                    dd:03:9f:2e:23:f0:72:bb:25:d7:b5:45:94:41:71:
                    df:70:c5:8f:f6:4d:ef:8b:ec:6e:00:c1:0f:83:79:
                    05:2b:bc:d3:96:3b:73:f8:66:10:4d:de:9c:89:44:
                    93:7d:f9:5f:d7:17:e0:a9:6a:53:30:96:41:e2:49:
                    9e:90:39:5c:31:d6:fe:ac:ac:99:a5:7e:62:82:f2:
                    2f:fb:ca:c4:cb:c3:4c:80:02:5d:40:bc:e9:b0:0f:
                    55:4f:31:8a:4e:ee:01:f2:46:58:aa:2d:59:0b:49:
                    90:3b:5d:0c:52:52:60:db:59:99:b9:23:dd:7f:2e:
                    e2:3f:7c:f5:ef:92:29:48:24:b9:ac:cd:27:44:51:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:69:4D:89:E1:6E:60:68:92:53:36:DF:5F:14:37:C9:B5:F1:32:3F
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0c:3d:43:df:55:24:27:2c:2f:af:7b:9f:70:19:fa:56:c0:
         7c:82:6c:08:8f:08:bb:bb:27:d7:62:fa:97:c0:70:31:c1:b7:
         30:4a:c5:9c:d4:db:61:ea:9c:81:0a:5d:f5:14:46:cc:ce:65:
         cf:25:e8:2b:cc:87:64:ca:9c:65:6b:bd:f7:18:57:88:21:db:
         1c:3f:c0:29:74:3c:d4:ab:6f:6a:c3:ba:38:56:ee:54:41:a7:
         3d:b3:65:dc:3c:4a:f6:e0:57:1d:00:08:87:fc:64:f1:3c:e3:
         73:76:b2:ad:bb:a8:6d:5b:af:65:b3:13:a2:34:11:5f:10:12:
         a2:e9:dc:ec:53:3c:ee:c1:1d:a7:ee:a1:6c:70:f7:a8:e8:2e:
         73:c4:3f:14:7c:49:41:13:0e:67:cd:27:c4:4a:69:bc:b4:1a:
         ed:ca:4c:8a:ee:99:ff:08:13:15:89:46:c4:a9:de:8e:14:cb:
         fb:8b:9b:32:3c:76:17:99:98:c9:50:d5:3b:f4:95:08:e3:7f:
         1c:c4:49:af:cc:14:2c:4f:fb:ab:26:6d:9b:81:5a:cb:35:b2:
         8b:e6:91:96:ae:7f:24:77:59:2f:99:85:28:d2:de:84:0e:89:
         f7:b9:63:10:36:b3:9d:0d:ba:cf:2c:cc:7c:d6:a1:b6:35:55:
         9f:7a:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:19 2026 by rpki-client