Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File:                     Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier:          59UbBAB12GHj94daqZxigRimIc9efufQuFuKUAIG3Jg=
Subject key identifier:   83:98:62:C3:60:6C:C9:A0:41:E2:02:DB:CD:2C:23:AA:0C:77:F2:E0
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer:       /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial:       019FAB2C3C72EF1D55F94B1CD89921CE37F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number:          0B98
Signing time:             Wed 29 Jul 2026 00:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:30 +0000
Files and hashes:         1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: xikMo7dGT1NUsVomqKdEy6J5f5CaASbonkO/7pTG5MI=)
                          2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:3c:72:ef:1d:55:f9:4b:1c:d8:99:21:ce:37:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
        Validity
            Not Before: Jul 29 00:00:30 2026 GMT
            Not After : Jul 30 00:00:30 2026 GMT
        Subject: CN=839862c3606cc9a041e202dbcd2c23aa0c77f2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:54:eb:0f:1d:a1:20:62:01:2c:83:98:fc:
                    7b:ac:3f:95:94:21:fb:9a:16:f2:07:b8:5c:9c:2d:
                    13:44:46:7e:85:c3:89:5d:72:56:51:1d:ea:a2:12:
                    d6:5a:6e:2c:fd:2f:8d:f6:2c:db:70:28:cf:a7:f3:
                    0c:13:71:fb:25:b8:f5:4a:66:18:14:b4:92:a3:dd:
                    86:04:4b:3c:c3:c3:5a:5d:7b:1a:4f:16:6c:50:82:
                    02:bf:43:79:3a:34:8c:e6:65:80:64:c4:c4:9b:8f:
                    64:d4:91:ac:66:a0:83:71:d4:13:62:0f:28:e3:3f:
                    0e:3c:67:e5:22:9d:0d:8a:26:42:65:77:fc:2f:bd:
                    1a:b7:a3:de:4f:7f:4c:fe:62:25:a4:21:25:1e:ea:
                    16:c0:cb:0b:1a:bc:3f:e0:8a:ea:0c:0e:fe:5d:59:
                    72:af:6c:93:e6:bc:81:aa:69:11:e6:21:ae:ba:2f:
                    62:ed:19:73:77:bd:a3:90:e1:c8:11:4e:0a:4f:8b:
                    52:fd:da:c1:37:c4:59:76:7a:25:62:d0:c2:c4:f4:
                    78:d6:46:85:29:73:dc:d7:b8:09:5f:b8:4a:c0:72:
                    4d:ab:9b:a9:cd:27:64:f8:1a:f1:2e:64:bc:33:0a:
                    ff:a3:62:79:ab:9b:67:45:33:fd:32:e0:c4:cc:0b:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:62:C3:60:6C:C9:A0:41:E2:02:DB:CD:2C:23:AA:0C:77:F2:E0
            X509v3 Authority Key Identifier:
                keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f0:98:e4:75:36:e4:9c:a7:f8:df:6d:7f:14:f4:c9:74:f2:
         c3:81:e7:6e:e6:7d:cd:bd:d2:41:d7:32:f7:9e:10:2e:31:1e:
         7a:02:f3:ce:7f:57:c0:98:80:13:58:b9:83:18:a7:0f:4a:5f:
         c8:4f:b4:30:26:cf:b9:bc:04:90:22:90:4e:1c:a4:b3:b9:5f:
         39:74:41:2e:17:54:ab:12:d0:19:f8:1f:e0:81:6e:68:a0:88:
         4d:63:64:38:da:99:43:29:36:f8:8e:68:3f:5e:d9:8f:76:1e:
         c4:94:6d:db:0f:81:5e:06:db:68:01:52:af:b9:b5:a5:e6:1c:
         d9:83:43:af:60:87:12:e6:df:77:dc:83:95:d6:93:e2:08:17:
         ee:2f:50:28:19:9b:65:45:92:fb:1b:cf:20:06:04:c0:2a:bd:
         d9:54:21:82:c2:48:6a:1f:a9:9c:6c:fb:1e:26:34:0f:84:2c:
         ed:a2:1b:47:36:83:52:84:a7:0b:ea:f3:81:60:67:3e:17:81:
         70:f2:36:9a:ec:5e:19:2d:23:8d:76:77:62:e5:9c:0f:93:58:
         f1:7e:db:13:3d:36:dc:e2:77:ac:d2:66:95:4b:3d:04:e1:07:
         45:d2:ea:99:a7:65:81:8f:b5:b1:c8:b2:bd:06:c1:1f:d3:97:
         d3:53:6c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:27:55 2026 by rpki-client