Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File:                     xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier:          UtLD4KXe0+7BCUQ3tSoFe1RvDpUP75tkzfd78qXn0Eo=
Subject key identifier:   91:70:26:56:46:F0:2A:2F:22:93:C0:73:41:C8:58:BD:75:5C:E5:7E
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer:       /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial:       019FAF08F429BF9D966F668700A80E82BA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number:          0DC1
Signing time:             Wed 29 Jul 2026 18:00:27 +0000
Manifest this update:     Wed 29 Jul 2026 18:00:27 +0000
Manifest next update:     Thu 30 Jul 2026 18:00:27 +0000
Files and hashes:         1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=)
                          2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: AYE6pgalgTiOm2656858yI+r7WL6mjCXQzAUNUYU0IU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:af:08:f4:29:bf:9d:96:6f:66:87:00:a8:0e:82:ba:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
        Validity
            Not Before: Jul 29 18:00:27 2026 GMT
            Not After : Jul 30 18:00:27 2026 GMT
        Subject: CN=9170265646f02a2f2293c07341c858bd755ce57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:6e:83:03:1d:a0:43:49:fe:7a:4d:43:ca:
                    15:33:2c:e3:05:ea:95:d0:9d:97:cc:57:d6:cb:e1:
                    9f:01:fa:1d:77:9f:3d:22:92:f5:07:f9:16:a4:43:
                    02:b7:b4:49:d5:15:1e:53:3a:6f:4e:79:f0:a5:a8:
                    a8:04:27:12:8e:1a:46:6f:eb:9e:20:5c:bb:7f:14:
                    64:cb:53:56:bc:12:74:71:79:5a:b3:ec:04:de:f0:
                    a7:62:e7:1f:ae:df:58:47:e6:a7:df:39:61:7c:bf:
                    39:5f:b6:1b:66:6b:a0:20:b7:c1:74:7a:1f:65:c5:
                    f4:84:be:55:11:d3:0b:80:5c:82:84:01:67:7e:7a:
                    da:56:a2:4c:f8:9c:d1:e5:de:b6:51:8a:6f:ff:fb:
                    58:aa:34:12:d7:76:ba:7b:ec:46:7a:93:38:ef:c4:
                    bc:0f:8c:99:6d:73:6c:b9:42:c8:9c:fd:a5:10:c2:
                    26:e3:34:79:da:e9:ee:79:9a:22:9d:ef:a7:26:ab:
                    ab:c2:5f:59:5f:bb:6f:e0:5b:46:bc:a9:1a:bd:ba:
                    ba:b7:32:5b:2f:38:28:f7:16:0a:67:f0:7e:0e:65:
                    af:d9:77:87:86:b4:64:0c:53:c3:a0:32:d5:27:99:
                    af:fd:29:ac:1a:83:a0:d1:f3:14:b1:7b:e8:38:67:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:70:26:56:46:F0:2A:2F:22:93:C0:73:41:C8:58:BD:75:5C:E5:7E
            X509v3 Authority Key Identifier:
                keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9d:b4:99:ee:ec:82:2f:57:70:1f:64:f0:16:8f:27:54:e4:
         8e:12:c2:36:4c:2a:c3:cc:13:46:67:5e:e2:80:fa:df:7b:df:
         e6:1f:f1:58:e5:1f:04:26:2a:0b:b4:d4:a4:21:f6:78:40:3a:
         d8:12:8d:7a:17:44:d6:0a:9d:53:cd:b0:be:45:88:80:61:75:
         73:d7:d9:f3:ef:0d:30:0b:52:d0:dc:fb:fd:81:0e:86:49:76:
         95:ad:34:9d:7e:0d:74:2b:66:a7:e9:a2:6d:8e:6d:9d:a1:bb:
         97:0f:f6:ae:b2:51:52:ae:2f:78:41:e4:dc:7b:3b:85:13:f9:
         d9:3b:bf:72:cd:14:71:7f:0f:a6:0f:c2:ab:aa:c3:be:8d:0d:
         22:a5:81:91:02:98:9e:3d:eb:df:91:c0:a7:3c:89:0f:3c:8b:
         51:fc:f3:cb:1c:89:62:9f:2a:2f:3c:e0:c4:4f:c5:fb:e7:b9:
         7f:5a:a9:25:ac:b3:27:01:70:be:05:b5:e0:d3:67:7f:80:c3:
         b3:f5:d3:c4:b0:80:4c:25:ec:0d:29:75:da:52:99:c4:01:68:
         48:3d:a2:7a:ef:ae:80:47:34:55:ec:46:cf:7a:e2:6c:1d:c5:
         f4:50:86:2f:71:86:ab:97:f6:c1:89:a5:76:8b:49:a9:f4:f2:
         ca:56:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:34:46 2026 by rpki-client