Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File:                     xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier:          5xvD/YyXC+J2pto/Q+d51qcrAfWG+arlIbiPm+NJX0I=
Subject key identifier:   A8:A0:3F:7A:0D:B8:80:D7:0A:12:E1:AD:C0:14:C0:5B:39:D7:5A:CB
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer:       /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial:       019FABD12EAA1D98C0DF6B3FD5C3B126044A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number:          17D6
Signing time:             Wed 29 Jul 2026 03:00:40 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:40 +0000
Files and hashes:         1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
                          2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: GOBSLF+66tvp2kyjFdkHDV6UZBL5Gdi+kNH4swho5JE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:2e:aa:1d:98:c0:df:6b:3f:d5:c3:b1:26:04:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
        Validity
            Not Before: Jul 29 03:00:40 2026 GMT
            Not After : Jul 30 03:00:40 2026 GMT
        Subject: CN=a8a03f7a0db880d70a12e1adc014c05b39d75acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:47:6f:21:ac:61:9c:ef:70:06:4f:29:c7:
                    df:8b:19:4a:2e:8d:0f:a3:0b:e9:8b:9d:c4:a3:a4:
                    06:11:41:95:36:b2:97:a9:62:c1:2e:03:00:e8:75:
                    f6:b3:ce:4c:2f:ac:52:93:fe:a4:8b:54:25:4f:a0:
                    62:c9:8d:87:20:45:8d:4b:ab:d0:53:f4:e9:f5:1e:
                    24:55:86:22:53:39:5d:1e:84:fc:9b:2b:78:98:4a:
                    e2:db:2f:aa:6c:1d:dc:99:f2:cc:3b:87:ad:f1:29:
                    49:cd:6f:b9:34:53:c9:50:81:c0:2b:0a:13:95:85:
                    47:32:30:33:a7:56:45:d1:a5:ca:24:18:27:a2:7e:
                    e3:33:f0:9a:47:99:2c:cb:10:85:40:32:2b:00:42:
                    57:8a:81:59:c1:38:b7:6f:95:30:f3:48:ce:d9:47:
                    24:e1:7e:64:66:a8:59:62:fc:83:22:b3:27:03:b4:
                    06:a9:7a:c3:57:12:63:6c:49:3b:63:0a:68:ab:0f:
                    4f:e0:1a:85:5a:2d:e9:10:f9:bf:4a:12:7c:26:93:
                    6f:93:54:b4:55:a4:79:45:f3:63:d4:13:bc:19:12:
                    8e:d7:52:a5:67:ad:f1:da:1d:60:4a:24:27:7b:af:
                    96:41:4e:02:7c:cf:f1:70:cf:c2:97:03:ba:88:9c:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A0:3F:7A:0D:B8:80:D7:0A:12:E1:AD:C0:14:C0:5B:39:D7:5A:CB
            X509v3 Authority Key Identifier:
                keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:a1:6d:0a:e7:82:51:20:33:f3:31:71:60:16:36:c2:a2:
         d2:c7:48:5b:5b:20:77:51:7e:7c:0e:f2:b8:c4:45:ce:4b:f0:
         6d:d8:97:c6:24:10:fb:c0:be:13:e6:81:8f:c4:1d:6b:0a:f5:
         15:74:12:25:78:88:d1:b4:1a:1c:0c:f9:34:e2:61:f0:aa:7d:
         d0:22:de:ce:72:2c:48:43:5e:db:6a:b5:07:65:59:05:cf:8f:
         a9:f6:96:da:e5:6a:1e:43:3b:8a:a3:54:52:81:d4:ac:72:f4:
         63:8c:cc:76:f1:34:b8:82:10:60:e4:09:4b:0c:cc:7e:5a:63:
         74:66:df:b4:3c:74:50:f1:98:70:6f:cf:7e:99:c8:72:94:35:
         42:46:36:5e:f9:32:58:3b:ed:ff:c9:3e:44:88:e6:24:84:9d:
         08:d6:ed:f7:e4:b5:97:6c:6b:4f:6e:ce:32:7f:03:7d:33:c8:
         28:db:fd:6a:b6:1f:2d:1e:2e:2f:94:e9:ba:cb:7f:8f:e4:a6:
         30:ff:1e:a5:18:8e:1e:8e:e4:83:74:1c:20:e4:65:11:83:c6:
         53:e3:b8:8d:50:f8:3d:d6:6c:e9:62:9a:41:ea:43:5a:43:1b:
         62:f1:ff:9e:7f:48:45:aa:30:79:5c:02:67:f9:58:18:38:60:
         be:38:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:32 2026 by rpki-client