Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File:                     Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier:          elQNmCp6+P9GDYBSOH5vYD+job5yNBt4dQaZaVgRWEg=
Subject key identifier:   C6:44:83:6C:82:42:A3:53:4F:1B:42:FA:44:0A:85:73:7A:3F:30:11
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer:       /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial:       019FAD5204DCF89CE71ACA505C9E6FB8657C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 10:01:01 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:01 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:01 +0000
Files and hashes:         1: 1-KKEOWBhq-Xin1u07sp8fmHrvqc.roa (hash: PYl3rvHgnbdTXI4oGxGWGnIZl/efX3OeaWnZ83sqU1U=)
                          2: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: YzC6XnzLXFKOLVNb1fkG0EA8g46sIz+eAH1ddKrd05k=)
                          3: hRCE6LdZkeQzF92rmCQdMQvaaL8.roa (hash: UB0DT/MFY2dNlWf8e/9nwn7NarMnjJ7fyxrd+zzOII8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:04:dc:f8:9c:e7:1a:ca:50:5c:9e:6f:b8:65:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
        Validity
            Not Before: Jul 29 10:01:01 2026 GMT
            Not After : Jul 30 10:01:01 2026 GMT
        Subject: CN=c644836c8242a3534f1b42fa440a85737a3f3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:36:6f:ae:3e:cf:06:b9:9b:9a:6b:8d:a9:
                    36:68:e8:b6:8d:10:3b:3c:9f:5f:8a:71:2e:41:4c:
                    88:79:f7:d5:5a:11:9d:4b:1d:9a:73:93:59:dc:d0:
                    2f:e3:86:fd:da:2f:ae:01:72:8d:ed:98:b2:5d:70:
                    1c:e8:35:2c:f1:ca:78:cb:2b:5c:40:8d:e0:8d:7a:
                    e5:d1:f4:ba:21:37:8d:e3:b5:23:7f:38:4d:32:0e:
                    3f:25:b0:e5:95:fd:34:0b:23:02:56:6a:1f:a0:f8:
                    11:34:60:fa:ef:74:0c:0c:90:4d:1f:c4:a2:11:5b:
                    67:14:1c:16:b1:60:ea:75:1b:da:90:6e:fd:14:5b:
                    26:ef:fe:c6:57:5b:80:1e:e3:96:15:fe:3a:fc:50:
                    e3:73:91:b8:f4:a5:a6:97:0f:a1:99:cf:aa:f4:a7:
                    60:12:3d:23:87:71:12:9b:86:46:82:a6:17:8b:2f:
                    0c:50:fe:a0:56:ef:36:0b:99:3f:60:dc:75:11:b4:
                    63:e5:bd:93:96:7c:9f:59:21:ee:eb:c6:81:c3:ad:
                    bc:38:2c:b8:4f:bf:77:54:82:41:fd:78:4a:89:0a:
                    ef:4b:9a:f4:40:bc:3c:54:c5:b5:f7:d1:59:ea:fd:
                    ac:a5:d6:f3:7b:6a:39:7a:db:15:af:cb:04:ce:ad:
                    a3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:44:83:6C:82:42:A3:53:4F:1B:42:FA:44:0A:85:73:7A:3F:30:11
            X509v3 Authority Key Identifier:
                keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ce:db:e0:e9:39:b5:bd:ae:32:bf:84:af:26:a6:ca:0b:28:
         48:c0:18:f6:ee:c0:12:fa:a2:28:03:ef:7a:f6:97:1a:6b:d5:
         83:2e:7d:8d:0c:df:34:c8:0a:e6:68:bf:45:de:f7:9b:b4:05:
         5e:25:37:d8:c4:00:9b:ab:ce:e3:c2:79:4e:bf:2d:6f:9b:a9:
         f1:39:ae:68:4f:a9:ed:4a:1e:84:4b:50:15:38:0e:81:99:bf:
         4f:53:ae:ec:4d:5d:cd:43:3a:00:4c:0d:f2:89:4c:d2:6d:4d:
         01:3a:5a:0d:72:f3:6d:9a:29:ba:d3:14:93:ae:0d:2d:52:01:
         27:d4:07:67:64:58:81:2e:58:ed:0c:7d:97:00:f7:bd:ec:84:
         a2:9c:11:72:67:d1:b3:f8:2d:78:43:77:45:c2:19:07:ea:d7:
         f6:e0:ca:fb:f0:d3:cb:4b:6b:9e:16:f4:9d:39:60:83:be:dd:
         31:e8:24:e1:82:0c:ba:0c:9e:04:32:b4:48:eb:81:ef:2e:7a:
         10:84:48:51:8a:24:f6:e6:c6:52:e5:88:68:a0:61:1e:21:c4:
         c3:22:f5:ff:5d:14:87:aa:6b:b8:4b:d7:fb:e0:4d:f4:12:9f:
         fb:a8:c7:7b:56:2f:52:41:c4:b1:a2:d0:4f:97:70:17:b5:bf:
         ed:cf:99:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:21:44 2026 by rpki-client