Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File:                     xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier:          WHb2ijwFnt4/okEU4kbV9cGOsRU1OpS0UbAr6r5Lk64=
Subject key identifier:   E6:20:3E:DF:4D:71:79:76:07:6C:D2:A6:AD:29:10:CF:C8:23:C1:42
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer:       /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial:       019FE4E57690D45E2D3517FDFBBC2BDD07D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number:          1985
Signing time:             Sun 09 Aug 2026 05:01:11 +0000
Manifest this update:     Sun 09 Aug 2026 05:01:11 +0000
Manifest next update:     Mon 10 Aug 2026 05:01:11 +0000
Files and hashes:         1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
                          2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: Vx8IHE72rezsiuNoReigbNMVSD1Rh7ApQTfiVgFw940=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Aug 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e4:e5:76:90:d4:5e:2d:35:17:fd:fb:bc:2b:dd:07:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
        Validity
            Not Before: Aug  9 05:01:11 2026 GMT
            Not After : Aug 10 05:01:11 2026 GMT
        Subject: CN=e6203edf4d717976076cd2a6ad2910cfc823c142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:0c:c1:33:42:98:26:cd:3d:54:3b:b2:c4:
                    72:26:47:30:ee:04:e9:10:88:6e:95:d9:01:81:8f:
                    7d:b9:bb:97:dd:ae:48:a2:72:34:88:58:a3:9d:d3:
                    b2:34:97:6c:26:82:a5:3c:a9:68:cd:48:15:55:bf:
                    9c:66:13:62:85:38:4b:1b:1e:ce:6a:4d:5f:92:1c:
                    62:38:79:90:39:96:27:e5:7b:5e:62:0b:62:6d:e5:
                    5d:92:06:e9:f2:c3:a2:84:4e:9b:11:4d:02:63:5c:
                    d6:89:a6:ed:d1:dc:e5:74:57:36:4e:5b:8d:e4:21:
                    a0:33:ec:74:5d:16:a6:54:56:f6:15:ca:77:00:3d:
                    29:92:da:eb:c6:ae:86:46:23:f8:29:31:e8:53:44:
                    f7:68:a1:74:c5:92:9b:83:2f:7d:c1:ed:3f:85:bf:
                    85:3f:51:90:b8:20:3d:ab:56:2a:62:b4:a5:47:aa:
                    fa:20:ac:e2:84:59:48:f1:7e:41:97:39:76:43:56:
                    d1:f6:b6:60:5b:5a:5e:5b:85:bf:f9:32:a1:c7:db:
                    20:25:04:a0:ae:05:11:29:cc:9e:80:59:61:87:65:
                    4e:9e:5a:36:6b:87:b4:d3:8c:cd:ec:44:0e:e2:5a:
                    17:5d:47:c2:95:95:ef:b3:cf:dc:72:f8:86:3b:c3:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:20:3E:DF:4D:71:79:76:07:6C:D2:A6:AD:29:10:CF:C8:23:C1:42
            X509v3 Authority Key Identifier:
                keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:51:b3:9f:b2:ba:75:8c:bb:77:a7:31:ea:84:ac:67:3a:3c:
         66:56:16:cb:d8:9e:eb:0f:85:de:88:b3:cb:17:58:80:9d:bb:
         2d:ba:90:91:d5:1a:3e:c7:5b:72:b7:59:9c:55:85:75:99:11:
         0a:c0:e5:43:f2:a5:4c:28:f1:aa:e4:f9:38:57:60:d8:86:a6:
         29:22:8a:7d:99:03:93:10:a2:2d:ee:3c:86:59:d4:d0:a4:61:
         4c:34:08:0e:4e:ba:05:a1:f7:94:84:1f:6f:b8:e3:dd:fa:41:
         54:03:4a:5c:a1:eb:c7:62:c9:5c:7b:30:15:d8:be:74:fa:e7:
         df:c4:fb:4f:e4:f7:7e:52:bc:b1:c4:b4:c1:21:2c:f6:cb:2a:
         a8:28:3c:ff:2f:69:47:d1:cd:ae:1c:45:62:12:7b:70:e3:07:
         cc:15:c1:85:ee:fc:9a:68:5f:04:f4:df:ae:f1:69:23:64:14:
         d8:4d:dc:5a:ef:d3:2f:1a:99:36:d9:79:70:35:f1:f2:13:d7:
         a3:cd:81:33:39:d7:32:e0:6a:10:7c:8d:3d:85:2a:a3:f6:d7:
         13:fa:9d:31:ff:86:c6:a3:f1:22:0f:ea:71:4d:f3:f8:50:69:
         e5:89:2f:fe:e7:35:8d:5f:51:fc:2b:12:7a:5d:ee:af:a5:f4:
         f1:17:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 12:44:01 2026 by rpki-client