Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File:                     xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier:          zNniOhMFLagbqxuAueLYrRP+KsIflPuGc4GghmRtC0s=
Subject key identifier:   86:1F:F8:0B:34:57:C3:99:39:8A:AD:08:64:B2:46:85:7D:EB:56:8B
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       019FA18419DF646F7126FEBB27328D686C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number:          19DC
Signing time:             Mon 27 Jul 2026 03:00:16 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:16 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:16 +0000
Files and hashes:         1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
                          2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
                          3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
                          4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
                          5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: hbeYAF/N7JcDRkRpSkrj2AlmcyuxlptTyMOScM9eKRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:19:df:64:6f:71:26:fe:bb:27:32:8d:68:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: Jul 27 03:00:16 2026 GMT
            Not After : Jul 28 03:00:16 2026 GMT
        Subject: CN=861ff80b3457c399398aad0864b246857deb568b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:21:0f:9d:ca:99:21:30:03:4d:e7:1a:de:
                    d5:9d:3d:46:79:f7:67:e2:5d:d4:b1:eb:74:0d:53:
                    de:5b:9b:08:8f:7a:05:f2:d4:9c:d2:0c:72:91:68:
                    79:13:95:d0:0e:a2:17:e7:5c:aa:2e:39:b3:1a:2e:
                    5f:9d:e2:a4:a8:4a:3a:e1:c3:43:52:21:a0:c0:fd:
                    e5:da:6c:9d:67:5e:de:41:75:09:a3:56:c1:e6:09:
                    6e:c7:ab:3b:d7:5b:fe:4e:a4:d7:45:4e:32:34:bc:
                    ab:94:5c:74:c4:95:5f:1e:69:f9:d6:0c:fa:d9:b8:
                    c5:dc:e1:9e:0e:a9:cd:ca:80:0c:06:c4:33:c3:02:
                    28:70:fc:61:b4:62:12:fd:e2:81:08:d7:f9:16:65:
                    46:b1:0b:f2:59:6e:e8:03:a9:92:4f:52:a0:89:66:
                    ef:a5:9a:7c:c2:3f:b6:e0:d6:78:16:a7:3b:14:37:
                    df:a1:70:b5:f9:33:e2:10:6f:86:92:25:d2:9f:22:
                    c7:2c:81:64:dc:e7:97:af:a1:d1:30:a8:23:65:1f:
                    45:b0:58:83:e2:13:c2:2b:d6:68:34:c5:f9:7c:97:
                    c0:9e:06:1b:f1:66:cf:db:ff:fc:fb:17:1d:43:6a:
                    34:6d:87:cc:3c:de:f0:36:e5:57:6b:d5:aa:06:ff:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1F:F8:0B:34:57:C3:99:39:8A:AD:08:64:B2:46:85:7D:EB:56:8B
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4b:d9:a2:f6:c9:59:e5:58:6a:be:88:2f:d4:05:f1:c8:f0:
         09:36:fb:4c:34:58:63:c6:c6:c6:6d:f9:d0:ce:b3:59:31:77:
         65:fc:59:d2:26:2c:fe:62:c1:50:93:21:d7:80:54:5c:81:64:
         7d:d5:45:71:d4:85:9d:4e:02:58:54:22:e2:af:53:2f:44:f7:
         f8:ee:d0:97:f7:b5:91:e2:75:34:9c:d4:6e:1e:f7:2e:8e:d0:
         b5:8a:0c:61:2f:f0:f5:70:43:ae:86:54:7a:91:18:da:43:5b:
         ca:ee:2b:94:0b:45:d5:4a:a6:fd:3b:1b:1a:0b:d3:44:ad:d6:
         57:0f:2f:e2:44:73:f9:24:95:e9:52:27:92:be:de:7e:50:f2:
         e1:2b:4f:64:75:dd:e0:82:aa:4e:1d:2f:63:5d:87:fa:1c:d6:
         2d:14:64:56:da:b9:cb:f2:d0:4e:9f:2e:79:3d:cb:f5:fe:5b:
         70:a8:99:64:ab:53:cd:0c:9e:73:a7:2c:0c:93:a1:a8:64:62:
         ca:98:04:9c:03:87:20:e3:85:df:88:f0:e7:89:6d:3c:3c:01:
         ff:9e:b6:32:6b:16:6d:74:5f:87:73:15:fd:9b:b0:d9:dd:f2:
         08:65:84:95:c5:ed:0e:5f:6d:22:4c:ac:a7:83:fb:65:2c:77:
         88:1d:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:18:37 2026 by rpki-client