Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File:                     Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier:          +MpVjcErrjGYdp6yPJtgNjFIJSQIdkuwh2RZSI++jWs=
Subject key identifier:   CA:A3:4A:AA:B5:70:75:52:50:55:A2:89:5E:13:04:E5:07:F7:DD:F7
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer:       /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial:       019F859EF30E15F5E165EB5CF7C0B9A4C523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number:          0E66
Signing time:             Tue 21 Jul 2026 17:00:14 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:14 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:14 +0000
Files and hashes:         1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: ColpTymu1qRfMw5vraXjhLXpqWwWf/K19Dr0SzQdiIw=)
                          2: c0i8991UJCOly_bGDSBQG4Aot8k.roa (hash: fe/DfYOp9gMMpbSc+SphBLp4DkHzqjeSNzT9WK5FYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9e:f3:0e:15:f5:e1:65:eb:5c:f7:c0:b9:a4:c5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
        Validity
            Not Before: Jul 21 17:00:14 2026 GMT
            Not After : Jul 22 17:00:14 2026 GMT
        Subject: CN=caa34aaab57075525055a2895e1304e507f7ddf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:8c:04:38:81:b9:51:59:30:14:43:c5:ff:
                    51:af:da:e4:8f:28:3e:fd:78:a9:f2:0c:e4:f7:32:
                    45:49:df:3b:11:e4:6c:f9:99:98:21:c8:fa:4a:4a:
                    42:ac:1b:26:d9:95:bf:e1:3a:8f:b0:97:94:16:3a:
                    9b:7b:a6:f0:58:de:d3:45:17:f6:75:39:5c:fb:dd:
                    ce:30:af:cf:b1:45:20:0e:c9:5a:cc:cb:44:34:23:
                    fe:f0:34:f4:7a:97:4a:08:dc:93:a0:bc:aa:fc:a7:
                    8e:3f:9e:8e:fe:9c:d7:be:fb:58:76:ea:23:97:8f:
                    2a:f1:81:f8:47:ca:ab:24:ac:28:e7:6e:b2:d5:38:
                    e5:63:85:2f:8f:e2:18:f1:67:25:8f:58:6d:d7:ee:
                    7f:c7:60:2d:a9:bf:dd:f8:15:2d:b6:80:7e:0a:97:
                    fd:1f:80:3a:3f:aa:ae:e5:45:9d:6d:43:15:80:ac:
                    8b:40:95:36:1a:f7:27:98:a3:f9:b8:e9:41:cf:c3:
                    3f:b7:22:ec:96:89:8c:8a:6c:01:19:ff:24:53:f0:
                    0a:25:d4:ef:f9:d2:8e:24:56:de:36:38:f9:ef:16:
                    80:6b:24:5c:1c:00:69:b8:9e:07:e3:16:db:e7:66:
                    be:fe:d8:24:1d:7e:81:a5:41:f6:99:70:d4:b0:b0:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A3:4A:AA:B5:70:75:52:50:55:A2:89:5E:13:04:E5:07:F7:DD:F7
            X509v3 Authority Key Identifier:
                keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:de:e9:8c:f0:ee:ae:dd:6f:09:40:3b:4b:88:a1:d2:bd:aa:
         9e:e6:ff:8a:43:49:9d:4b:ed:be:68:49:66:40:25:c6:11:fb:
         13:de:35:d7:d3:c7:2c:43:16:da:41:82:07:2a:19:4a:18:36:
         db:98:29:b6:5a:f0:83:a4:53:74:3b:92:0a:e5:2b:cc:ee:94:
         6e:d5:0d:95:9a:bc:8c:d2:e5:24:39:bb:e5:8b:b2:d2:ea:1a:
         bc:65:f0:ae:3a:c9:ee:9d:9e:2a:b6:01:25:34:ca:68:0f:ce:
         17:9f:1a:bf:44:4b:fd:55:a2:1d:46:95:6e:58:7d:b9:4d:25:
         71:5e:0c:ff:c5:01:bb:d7:2b:bd:1d:ea:af:6e:4d:4c:b8:47:
         4a:bf:8f:23:2d:ef:dd:79:de:af:53:40:28:4b:72:8c:14:30:
         e3:d8:d4:b2:f2:a3:b7:2c:02:a4:42:93:9d:9a:99:f7:23:42:
         8e:43:9f:66:e8:46:c9:d3:c0:b7:47:3a:f3:af:f8:a6:f7:df:
         10:62:e4:4f:1b:cd:b8:ca:54:98:29:84:fd:b1:f0:e8:c5:b2:
         02:a5:a8:1b:e3:ae:36:c1:ba:49:2d:c0:7f:70:e2:ad:74:b8:
         d8:c0:dd:30:f6:5a:d5:60:ab:5c:ab:2a:80:ec:5f:14:40:8a:
         c8:b3:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:37 2026 by rpki-client