Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          x9YM1RSEDPgQZ1nQkYn4j4vEP1OgecFy/ErfdJ9cXl8=
Subject key identifier:   90:05:DB:0B:E5:28:4A:60:35:05:FB:61:58:B4:C2:EF:DA:51:37:6F
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       019FAAF54019B69E669F375DE63A1E60190F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1D89
Signing time:             Tue 28 Jul 2026 23:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:27 +0000
Files and hashes:         1: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (hash: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY=)
                          2: 28RKVVs5L70qaDfgNeKYKZtP2bY.roa (hash: LsRqiFo9vSqBUMfUHeG2KDSHphr9EeFlpCc9GJ2T6qU=)
                          3: 838zGYUvLSOnbOyvQCG3BmbHt6g.roa (hash: bIPDOLUdfK++4pnFNnItCxubZqKDVCPUPQRRiWDsuQE=)
                          4: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: oSITHrDMDNwcEkKAPFs2FPoNRcgeeLQg0VIn03Jcavs=)
                          5: onUcHcMkvFv3eRd2HH3aPRf6vhg.roa (hash: FMvdGW8G/i8Ujn/8ecIl88xpPzK27z5df59EqMBKxi8=)
                          6: zlLTIm7_QxUIi55M7RwMbt95iIQ.roa (hash: fDPF6ZEfEYsC4ffY8eEmFZICdqyb8tsUKaWPIRXssWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:40:19:b6:9e:66:9f:37:5d:e6:3a:1e:60:19:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Jul 28 23:00:27 2026 GMT
            Not After : Jul 29 23:00:27 2026 GMT
        Subject: CN=9005db0be5284a603505fb6158b4c2efda51376f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:9f:00:d8:46:46:68:12:fc:4f:67:21:45:
                    02:87:35:65:fc:d4:7f:51:6c:a7:a7:5d:50:5c:e8:
                    ce:16:f9:7c:bb:69:1b:03:4e:e4:ba:cb:37:66:eb:
                    ff:9b:6d:52:f3:46:33:07:14:78:6e:b0:a0:24:d4:
                    45:69:0e:ce:41:16:96:d8:20:d0:bb:a4:36:17:8f:
                    7b:d0:00:4e:b1:85:29:33:de:49:51:0f:f9:f5:20:
                    47:84:b7:88:03:d2:fc:8d:ee:f0:cd:b2:04:3a:52:
                    97:1c:ac:54:ed:8c:42:4e:3b:6f:d4:95:9f:92:2c:
                    5e:15:a8:20:14:db:0f:83:bc:99:a3:e7:78:6a:6a:
                    81:52:95:c4:9b:09:88:32:70:ff:5f:aa:1c:59:2d:
                    89:7b:83:30:24:3b:90:56:c6:91:a3:0d:37:cf:06:
                    28:29:3c:9d:41:a0:44:d9:dd:a7:52:77:45:39:38:
                    2b:e3:3e:c7:0c:3c:4e:68:45:8e:90:a1:f9:86:a1:
                    20:b2:5a:5f:db:9c:28:2a:42:c2:44:e3:fa:77:ab:
                    5f:5f:72:23:1f:db:9c:1a:da:39:3a:08:0d:ee:76:
                    3f:d6:30:e1:58:32:1a:8f:fa:3d:37:58:98:84:aa:
                    a8:20:6c:7c:36:59:43:2c:e9:f2:41:ef:cf:b7:48:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:05:DB:0B:E5:28:4A:60:35:05:FB:61:58:B4:C2:EF:DA:51:37:6F
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6b:bf:98:df:cd:53:af:dc:27:28:56:bc:5f:e0:47:9d:18:
         fc:8d:70:a6:ff:3e:10:b5:b8:a2:67:e9:87:ec:0b:13:d0:20:
         7c:75:a6:b2:ea:77:6e:43:2a:61:a2:d9:7a:5e:af:8b:d3:10:
         0e:84:d9:3c:9d:05:79:59:16:ec:6d:7e:7e:e1:21:50:38:4d:
         94:9e:fb:21:cf:70:85:d6:40:6c:38:04:56:d0:50:07:79:ec:
         2b:4b:b5:61:0b:85:b4:17:e8:fd:93:09:8b:ba:e3:84:64:13:
         78:de:d4:68:56:65:a8:5c:21:28:62:f0:4d:1f:54:d6:d3:db:
         4d:57:f4:36:ee:5c:73:93:4f:8f:73:f7:a1:51:ec:a0:f8:28:
         fa:af:76:34:02:92:d6:cf:83:ec:37:43:24:7a:07:c7:78:28:
         66:98:d7:d4:0e:b7:32:80:8f:d2:84:b8:41:d5:d8:e8:d9:33:
         f2:bc:25:94:ff:23:f5:f8:f3:b5:21:09:75:14:5a:9a:9d:3a:
         40:a6:c1:e0:f2:5b:c3:39:50:ed:bc:0e:21:04:4c:a5:38:60:
         fe:31:75:62:ad:2e:b7:b5:c5:05:7f:d7:df:f0:d1:65:83:07:
         a2:86:cd:5f:30:05:42:21:21:8b:52:a1:e4:ff:70:19:99:e5:
         0f:57:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:17:50 2026 by rpki-client