Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File:                     XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier:          lmiizxhP/PnrLi7EPmbpLwmQ75FLbPxv/YyK6Sn4vBs=
Subject key identifier:   4B:C5:D3:97:5F:1C:F8:41:15:46:2D:5C:70:91:99:A8:88:FD:5F:0C
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer:       /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial:       019F122E8CC7E105F7D35C3E7263DFDA665B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number:          1992
Signing time:             Mon 29 Jun 2026 07:01:08 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:08 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:08 +0000
Files and hashes:         1: T4TKJ7lG4tF42ufPB6RxNQs8WJQ.asa (hash: Kjqaf479WaS3CsL2tBcPzwtWTO1Y9exB7m341+fX/qA=)
                          2: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: TXtZ5ZZtN9JCWEcMPN3dymbbsqD2Ew764Q3gGtIIStQ=)
                          3: fsfsFG6c-uDOrtkFycj7XUTrSFs.roa (hash: /2iuoJT/Z9P4V0/09Vme7KEMEVlGA2pEZglck+m/U0E=)
                          4: obrcupVsssO_agB28qMpvHAxeW4.roa (hash: GS+FF6yB/em6e/eXYvpbII2ejEv9rt1t/93lekFQ52Y=)
                          5: royOJADOHC1NNGIUFUSG8i3BLQ0.roa (hash: 2PUXEpyjrcM46Q23bjPi20e6P3M7C3MjAxYWgm68WVY=)
                          6: xE39Ruj0m92ceMsS3LNfFTVLuDk.roa (hash: X8+e4gKAkSWFlzWGvgEu09Paqpm627rMwTZHilH3gFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:8c:c7:e1:05:f7:d3:5c:3e:72:63:df:da:66:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
        Validity
            Not Before: Jun 29 07:01:08 2026 GMT
            Not After : Jun 30 07:01:08 2026 GMT
        Subject: CN=4bc5d3975f1cf84115462d5c709199a888fd5f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:23:de:44:1c:6d:26:ec:4e:2c:77:29:c6:
                    d7:b6:80:3b:99:dc:4c:4f:f5:63:35:2f:e8:99:47:
                    25:84:4d:3e:e1:48:91:34:be:53:c7:ec:ff:5b:d3:
                    5b:29:48:14:73:56:ab:22:d9:2d:54:bd:d1:27:01:
                    a1:c3:7a:66:61:a9:80:8f:0c:66:93:dc:d5:75:1c:
                    df:c2:21:58:c9:76:0a:d9:aa:7f:8a:a7:b0:79:62:
                    5e:18:b3:30:d8:68:a0:86:76:c4:99:6d:b7:e5:6f:
                    b7:0b:27:49:4c:08:a8:22:65:3a:aa:c3:c0:6c:ea:
                    8b:08:00:71:20:d1:39:68:56:2e:d5:51:2d:80:e6:
                    a3:e9:f6:c9:0a:ac:92:62:3c:5d:60:4a:e6:05:e1:
                    0a:70:ec:d9:f8:69:8e:9f:01:1c:12:68:bd:31:e6:
                    4d:6b:6f:cb:16:a7:8c:ca:8b:3a:60:c9:97:06:d7:
                    3f:a6:06:18:71:80:28:c5:33:d1:99:90:56:b8:3f:
                    24:89:3c:92:2f:61:47:01:1c:f4:85:75:e8:be:44:
                    43:bb:b1:65:3b:1a:c6:ce:98:f0:4c:d1:e5:af:ce:
                    2c:23:0e:32:e3:a3:6b:3e:a0:4f:a2:d7:b4:82:6c:
                    46:be:ac:2b:4f:52:7b:63:dd:ab:24:ef:b0:86:9a:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C5:D3:97:5F:1C:F8:41:15:46:2D:5C:70:91:99:A8:88:FD:5F:0C
            X509v3 Authority Key Identifier:
                keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:38:25:6e:68:a4:cc:d7:e1:64:d1:12:3b:b5:2b:77:8d:
         11:61:53:80:97:1d:7b:aa:02:5b:0f:55:77:83:3d:bc:89:b6:
         27:43:4e:2a:20:5a:0f:63:db:cb:89:a2:7e:2c:7d:8b:ba:e2:
         6f:1f:61:6e:33:fd:93:24:45:ce:97:da:12:8f:f9:f7:31:2d:
         17:c8:46:17:a1:39:0b:2c:83:c4:50:75:f2:a7:6c:f1:77:48:
         d5:0e:e2:b5:89:f0:19:48:db:4d:58:70:a2:af:69:db:f3:20:
         49:fa:14:d5:6f:41:9c:9b:89:e1:84:0b:c7:64:ac:4e:00:12:
         af:aa:29:67:6d:d1:8a:03:cb:31:91:43:b8:e9:09:60:8f:03:
         f4:76:78:e3:a4:ea:2a:bc:d7:60:4b:e4:a4:9d:ea:3a:45:68:
         d0:d5:70:60:02:e6:dc:f8:09:7f:7f:63:17:df:25:f0:fa:6d:
         b0:e2:a7:32:fb:f5:e5:76:bd:1c:f3:11:2d:20:a4:20:76:bf:
         20:dc:6d:eb:96:7b:eb:d8:9e:02:a7:91:b2:a3:01:57:43:97:
         81:f9:25:5b:ac:80:1f:75:7b:fa:03:1c:53:f6:24:b9:9f:1c:
         ec:eb:8d:8b:2e:1b:dc:71:44:3c:80:41:64:12:70:21:63:f2:
         57:00:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:54 2026 by rpki-client