Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File:                     xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier:          6qML9vVvm+/l1qv5bdtZqGhgs0YwDvbTZDvoVwrW/uM=
Subject key identifier:   7B:78:EF:FA:57:EA:A3:40:9B:67:50:F2:DC:A2:EA:0D:D2:DE:9D:DC
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer:       /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial:       019FAC080217836B395C1F7D1A0746418C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 04:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:33 +0000
Files and hashes:         1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
                          2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: /yaof0ehCtG9OFIPj7K4T/9SIKaOEPEsqdcDCvx1Kos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:02:17:83:6b:39:5c:1f:7d:1a:07:46:41:8c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
        Validity
            Not Before: Jul 29 04:00:33 2026 GMT
            Not After : Jul 30 04:00:33 2026 GMT
        Subject: CN=7b78effa57eaa3409b6750f2dca2ea0dd2de9ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:94:27:6c:62:3f:7e:09:59:2d:e3:f6:f2:
                    3f:44:71:b0:7e:84:94:91:68:1f:af:72:f5:fb:8a:
                    86:8c:a0:45:3a:3b:6e:4f:26:9e:fb:65:fa:5c:38:
                    6d:a8:ea:1d:ce:b8:1e:e4:e7:d1:1b:67:04:4e:00:
                    8e:b7:36:88:2f:aa:50:44:4e:41:a7:a6:e2:c1:73:
                    ba:58:80:8f:12:89:03:55:9c:32:dd:a2:1a:f3:f0:
                    11:37:a5:99:e1:7a:05:05:06:0f:24:d2:65:3c:72:
                    65:f6:77:8e:d0:08:28:b5:24:05:84:2a:9f:d2:b4:
                    6c:72:cc:28:4f:4b:30:7a:00:35:19:a0:02:f9:a0:
                    40:18:2f:0e:9d:ee:a3:44:bf:ef:da:c2:bb:35:78:
                    4b:8c:a5:5c:81:09:79:90:0c:31:e8:16:48:c7:12:
                    50:da:9f:0d:8e:d4:52:a3:03:a1:c8:1d:c1:b2:39:
                    89:94:41:e9:ce:16:78:cc:48:09:fc:c1:d4:11:55:
                    0c:d4:56:dd:9e:60:1a:83:8e:ed:9c:cf:69:06:08:
                    73:00:7e:9d:09:2a:0d:ef:8b:32:40:96:9d:ff:b4:
                    b5:97:b6:8d:75:d8:2d:b8:67:1f:8f:b0:64:92:c1:
                    36:2d:ea:82:0d:82:19:fc:ae:db:ce:1a:a5:c0:a0:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:78:EF:FA:57:EA:A3:40:9B:67:50:F2:DC:A2:EA:0D:D2:DE:9D:DC
            X509v3 Authority Key Identifier:
                keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:31:e2:3e:f3:36:fe:00:f5:de:e9:c8:12:70:21:a1:54:f1:
         d7:4d:9e:51:f8:c2:b0:38:45:c0:0e:a2:93:7b:1d:01:54:10:
         79:93:17:c2:b6:3c:3e:a8:db:73:82:a0:95:dd:20:9c:e7:a5:
         5c:4f:e8:a5:5d:4f:fd:36:88:b1:a4:47:69:3f:c8:9d:29:41:
         57:0b:77:0b:b5:71:c6:92:2f:58:04:d8:e4:77:5b:6f:f7:4a:
         8e:91:32:21:6b:ef:2c:f9:19:ae:57:89:d3:ca:e7:50:88:8a:
         71:2c:6d:31:a0:b1:93:29:64:ac:76:1e:3c:a0:b6:11:5b:19:
         62:e3:91:2a:c4:e5:1b:c5:ec:7c:69:f9:f1:d0:84:49:7b:88:
         a9:bc:ab:b3:36:d1:3e:01:69:ee:b1:2e:ca:10:a6:49:2d:88:
         2d:6e:2d:b6:da:87:09:47:46:33:9b:81:8b:85:50:04:48:18:
         7e:c9:08:7e:b9:68:6c:82:55:ae:46:f4:0d:5c:fd:7e:bc:05:
         eb:77:8f:d8:a3:16:61:03:51:df:3d:63:94:23:c7:e9:b9:8e:
         e4:26:ca:36:cd:69:ea:96:9f:b2:15:cd:14:b1:30:83:7a:7a:
         fa:ab:dc:04:21:61:93:b0:e9:5f:59:42:0c:72:25:cc:0c:a9:
         3a:71:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:26:07 2026 by rpki-client