Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          bV660IYvvzMvDCZ8aQerHXZH7HIS5iwghZ3myhBd1ZA=
Subject key identifier:   8D:A5:4C:F0:71:2F:18:C3:5D:CA:2B:95:A4:D4:54:96:EF:92:CD:87
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       019FA2CEB8FF77F37C2EA5E9F41294956E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          19F0
Signing time:             Mon 27 Jul 2026 09:01:24 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:24 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:24 +0000
Files and hashes:         1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
                          2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
                          3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
                          4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
                          5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
                          6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
                          7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: +qcojcETB5U7FZB7IVj08I29kZNdWmpSLu2AuJs0udM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 09:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:b8:ff:77:f3:7c:2e:a5:e9:f4:12:94:95:6e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Jul 27 09:01:24 2026 GMT
            Not After : Jul 28 09:01:24 2026 GMT
        Subject: CN=8da54cf0712f18c35dca2b95a4d45496ef92cd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:a7:2d:76:3a:64:25:26:8e:93:2a:4f:ca:
                    99:9e:77:f8:3d:37:f0:b4:65:af:2f:e2:85:b6:9b:
                    94:3c:37:5d:d0:2d:72:26:73:e0:ae:3a:cd:19:d3:
                    3d:97:b0:64:58:9e:b6:5b:f8:22:ea:51:6d:64:5b:
                    62:3b:3e:1a:2e:51:ea:f7:10:26:f5:44:e0:dc:b2:
                    9a:fa:a0:46:08:d3:72:cf:e5:a5:44:14:a1:b0:c4:
                    8e:db:0a:25:c8:60:a2:67:76:e0:8c:9f:34:5e:ac:
                    01:44:58:d9:44:cc:ef:09:53:1c:53:1a:77:92:ba:
                    dc:3a:0c:09:b6:b3:bf:c7:a6:af:19:f8:df:3c:da:
                    77:c4:f9:5f:af:80:5a:84:71:70:6d:85:74:69:01:
                    d6:85:bf:4d:08:f3:51:b0:6f:ac:2d:de:70:7b:6b:
                    d4:09:48:41:39:3e:78:d3:8b:ce:4d:e7:22:1d:7a:
                    fa:02:2e:1a:e7:79:53:46:4a:06:de:85:1a:a5:7d:
                    cd:5b:fa:dc:5b:77:3a:f6:2f:e0:ca:c7:a6:77:cc:
                    e2:67:e9:14:a7:97:4b:6d:6f:51:fe:0b:87:50:17:
                    be:2c:f9:c6:7a:5f:66:0d:76:0a:3e:cf:86:9f:ee:
                    cf:e8:f1:fc:35:cb:47:00:6f:2a:5a:dd:08:a9:9b:
                    6a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A5:4C:F0:71:2F:18:C3:5D:CA:2B:95:A4:D4:54:96:EF:92:CD:87
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:34:ce:6c:45:58:71:ab:cd:59:3a:71:5e:ec:00:1b:05:83:
         db:be:94:e5:c3:78:59:a3:16:43:e5:89:cd:6e:a9:e4:9a:82:
         a2:1f:36:ca:5a:58:b1:ca:26:79:e6:09:0f:ac:94:dc:7c:62:
         9f:d8:1d:ff:3f:a9:e3:3c:fe:df:f9:19:8a:37:77:06:dd:4c:
         a9:50:dd:d8:38:13:24:29:be:4f:9e:35:02:64:81:76:17:7a:
         be:41:50:58:d6:4b:1b:6a:01:57:0a:5b:dc:db:20:3b:dd:b3:
         55:dc:53:62:dd:95:cf:31:6d:0a:c0:87:74:08:a0:9f:fe:00:
         85:17:43:82:76:36:ce:ea:5a:56:02:3a:0f:09:db:a6:a9:c5:
         72:e4:84:01:24:92:4b:20:03:eb:d9:f0:94:40:6e:da:f8:dc:
         d3:d0:42:10:18:4b:94:fb:ae:6b:bf:bc:50:9e:ff:91:b5:e8:
         b8:26:72:51:6f:a3:95:ce:72:a5:df:e0:ab:fd:ec:95:0c:0b:
         17:80:37:a1:df:9f:2e:49:65:88:a5:37:64:c0:7a:56:c6:52:
         5f:5a:37:12:a0:f3:93:ab:16:00:c5:cd:8c:11:72:06:ec:cf:
         20:19:7d:5c:b9:2e:76:2a:5c:a2:1a:39:b3:5d:c8:70:c8:fa:
         2c:1d:2f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:25:28 2026 by rpki-client