Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
File:                     _CIELXaLE__agpyz8dfSzz--ihU.mft (raw, json)
Hash identifier:          P4SH1nqL5NG/hMB8iR+rkJODYPhhwKzjZStyC3Zl324=
Subject key identifier:   6A:9E:22:CC:50:83:8A:88:78:53:72:8D:F5:30:A8:4F:66:83:C8:27
Authority key identifier: FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15
Certificate issuer:       /CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
Certificate serial:       019FA0E082FB02D70F6F9E756308BB22D0CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
Manifest number:          0298
Signing time:             Mon 27 Jul 2026 00:01:35 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:35 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:35 +0000
Files and hashes:         1: 4A6CcXXrSbIURymlP_OiEuUadzE.roa (hash: XB/aS0f5fLagh24RTymZ9tRIq1RWpYe8OmUQeqUA544=)
                          2: _CIELXaLE__agpyz8dfSzz--ihU.crl (hash: QkOIY6vQYcEwsqH1cwO7xEqX5odiG9jMrJ5MlSKK51Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:82:fb:02:d7:0f:6f:9e:75:63:08:bb:22:d0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
        Validity
            Not Before: Jul 27 00:01:35 2026 GMT
            Not After : Jul 28 00:01:35 2026 GMT
        Subject: CN=6a9e22cc50838a887853728df530a84f6683c827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:7e:fd:1d:e5:20:ea:1b:33:ba:6f:55:75:
                    ad:1f:a1:9d:15:cb:06:a5:d0:54:45:df:88:44:fb:
                    00:a5:68:87:be:d1:96:0d:91:05:f1:06:d9:70:fe:
                    eb:fd:86:2f:84:c1:c1:7d:ef:62:3d:72:19:bd:4e:
                    e1:72:a6:06:19:7c:7d:a8:4c:a5:7f:55:c8:e1:29:
                    52:da:40:b8:6b:67:c2:b4:d4:94:0f:1e:97:84:a3:
                    ac:47:03:be:f1:ba:a5:7d:a5:a0:00:aa:ee:c5:95:
                    eb:51:90:5f:6c:d9:2d:ed:36:c2:68:d3:b6:0e:a7:
                    7a:d3:ee:5e:34:89:7e:51:b6:b6:2b:b9:9a:c8:28:
                    59:77:d1:e3:e6:79:5b:0d:a2:6a:e9:f0:c1:5a:f1:
                    2d:1c:a1:98:db:72:0a:29:b5:03:e9:03:27:55:c5:
                    91:24:2e:1e:b1:c4:2e:17:86:a6:31:34:9f:7f:d3:
                    ad:b9:e0:4b:40:d7:64:b5:9d:1d:94:b4:e8:43:57:
                    24:bf:c1:ce:a7:ea:11:29:02:59:15:e0:8c:aa:37:
                    2e:66:c6:e2:48:76:fa:3b:f6:36:60:65:40:13:90:
                    c4:0a:9b:cc:9c:db:60:3d:ee:4a:56:e5:f7:74:cc:
                    f5:6d:5d:92:54:20:23:42:75:63:ec:a0:35:9a:b1:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:22:CC:50:83:8A:88:78:53:72:8D:F5:30:A8:4F:66:83:C8:27
            X509v3 Authority Key Identifier:
                keyid:FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:c5:57:a6:a5:52:2b:99:99:0c:34:57:e8:ce:ea:4f:64:
         a7:e8:03:04:37:43:68:56:77:37:16:ed:68:a2:aa:f0:c3:cc:
         c2:71:44:63:fc:6c:dc:cd:8a:a5:c5:28:3f:45:e2:99:62:32:
         17:6d:9e:7e:73:8d:c9:95:b5:5b:d0:e2:3b:19:6d:e4:3b:fe:
         f4:21:b3:69:f5:2b:64:74:f0:24:0c:45:a2:32:a5:e5:44:fc:
         6c:37:27:45:f5:6f:af:36:9f:16:ff:df:3c:52:e4:c9:c0:77:
         c1:38:7e:22:5b:ca:41:cc:da:b4:bd:39:f8:3b:3e:e4:30:72:
         0d:b8:65:ea:d3:9c:41:c5:99:ad:6d:e0:14:61:f1:11:ae:00:
         1f:9b:4f:db:c1:86:ca:e6:88:2f:47:1e:bb:4e:d6:cd:24:37:
         95:d0:1e:9f:11:c3:ae:31:3e:0b:42:62:e3:c2:2b:88:a4:89:
         29:6e:c3:8d:f4:e8:5c:4c:8e:64:23:fe:5b:b8:33:95:20:e7:
         13:fe:54:76:d1:1c:3a:e8:94:d4:cb:c7:78:f1:78:b2:0f:6d:
         c8:d0:e9:9b:76:5b:6d:dd:48:02:03:58:98:11:20:85:aa:2f:
         98:7c:5f:7a:0b:a8:9d:e3:dd:a6:ce:c6:a8:4b:da:ac:fa:46:
         26:0b:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:12:23 2026 by rpki-client