Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File:                     xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier:          H5vFVRe/nRfvHvnEtr+U6bdHkExV0OStAKSEdAPbJrY=
Subject key identifier:   1A:EC:15:7C:0E:31:BC:BD:D8:E2:3D:10:AC:35:05:27:2B:0B:92:90
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer:       /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial:       019FAD51D866DF53FDECF6B0382D184FF382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number:          059A
Signing time:             Wed 29 Jul 2026 10:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:49 +0000
Files and hashes:         1: MBR4X9txb_DAPbAumwTsJqubBTw.roa (hash: 3GXUKqS4uNcGQw91JnWr+7X42phsItesfGJzuOIsuBE=)
                          2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: S89PCc9oT/yw+OgBWNl9v1k3naHSrD4bFpLH0mTKhXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:d8:66:df:53:fd:ec:f6:b0:38:2d:18:4f:f3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
        Validity
            Not Before: Jul 29 10:00:49 2026 GMT
            Not After : Jul 30 10:00:49 2026 GMT
        Subject: CN=1aec157c0e31bcbdd8e23d10ac3505272b0b9290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:e0:f9:51:9c:ca:5e:ea:ad:a3:34:a4:05:
                    79:8d:85:45:a9:d1:a8:d3:8d:ec:c2:f0:39:a8:1c:
                    c4:f6:c2:23:c3:47:79:9b:72:d0:fd:fb:b8:ba:f8:
                    32:63:cc:9a:55:a5:4b:f3:13:24:2d:e6:40:9f:57:
                    0d:b0:45:ec:a7:85:bd:61:e3:8a:07:2c:bc:6d:0a:
                    7e:a7:9d:20:a6:12:df:24:3a:0a:df:fa:b8:2c:13:
                    05:ce:ae:3b:1d:a4:8a:aa:52:bb:df:0a:ac:ed:49:
                    17:40:f0:fc:1e:a6:77:74:23:92:30:9e:3b:95:e3:
                    3a:39:8a:a1:33:f1:4e:f5:a9:b6:cc:2d:cf:b8:8a:
                    03:88:f4:86:5d:24:f0:dd:0f:03:fe:8d:e2:96:be:
                    6e:a5:99:07:2b:39:68:0d:76:5b:b0:e8:a5:2a:4c:
                    ae:1f:e8:02:33:a0:e6:13:d3:64:54:39:fa:ae:e3:
                    5b:3f:77:ba:08:47:43:eb:87:4d:75:4c:29:4d:22:
                    d9:01:6c:02:1c:26:46:21:16:f2:5f:3f:97:4b:97:
                    bf:ab:5e:10:4f:3b:75:a9:e9:7a:24:1e:3c:49:eb:
                    bf:13:4f:af:23:39:c5:6f:e8:ac:66:df:ef:f7:5e:
                    6b:40:3f:d6:47:ab:2a:52:39:ac:b1:37:52:b3:d0:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:15:7C:0E:31:BC:BD:D8:E2:3D:10:AC:35:05:27:2B:0B:92:90
            X509v3 Authority Key Identifier:
                keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:43:70:f4:1b:0f:50:55:fe:e0:45:97:40:c1:81:ad:41:
         77:e1:85:a3:af:5d:01:b1:58:29:6e:7e:fa:d8:ee:3d:43:c2:
         2d:d8:73:fc:a3:97:9d:80:f6:98:93:9e:c3:df:05:67:a6:1c:
         57:75:74:4c:bc:09:c4:ba:20:63:39:e1:cc:62:36:6a:83:96:
         bd:8f:d4:b6:e4:9d:12:96:9f:ec:e2:d8:a9:df:c5:1e:69:de:
         4c:1d:d3:55:dc:e1:f4:51:90:45:cd:9a:08:01:50:04:f2:98:
         1e:b0:a7:1a:54:f7:67:62:35:57:8e:a4:66:bf:a9:aa:12:c7:
         57:44:f7:19:f7:8d:c0:05:9d:85:a1:2f:52:34:20:6e:98:31:
         e8:bc:f4:2b:5c:f1:de:1e:78:5d:86:3a:10:7a:dd:d9:5c:2b:
         8c:0f:b2:17:04:d1:83:03:27:75:7c:f8:e9:0c:ad:6a:72:5c:
         73:17:6a:a8:41:f3:c9:3d:4a:05:80:f9:fc:db:aa:25:e4:62:
         73:99:7d:cb:d9:92:2c:36:32:0b:eb:e7:ac:60:72:6b:39:b0:
         b4:c3:7f:15:fb:41:cd:a8:85:d4:79:69:87:35:c2:c9:6d:81:
         a5:ae:52:fd:86:65:c5:50:d3:99:01:65:4e:7d:45:51:7d:90:
         bf:d0:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:30 2026 by rpki-client