Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File:                     XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier:          WnsAPHwqrwiJ9xTih2a7eG6DQ6AQUYDi/+SymIH+LE0=
Subject key identifier:   3F:84:86:0D:78:0F:1A:EC:22:C7:10:3E:9D:A2:7F:7B:05:41:FA:7D
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer:       /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial:       019F9FCD4C037FA3E0A67B82BCFB44983CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number:          07FE
Signing time:             Sun 26 Jul 2026 19:00:59 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:59 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:59 +0000
Files and hashes:         1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
                          2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: l9XTBv9V6ZW1yka+g5g22PI2q8jxiqL6j7JsaDGS4P4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:4c:03:7f:a3:e0:a6:7b:82:bc:fb:44:98:3c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
        Validity
            Not Before: Jul 26 19:00:59 2026 GMT
            Not After : Jul 27 19:00:59 2026 GMT
        Subject: CN=3f84860d780f1aec22c7103e9da27f7b0541fa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:a4:52:dc:d0:3f:ed:97:96:77:3b:79:7f:
                    d7:1a:7c:1c:13:6b:d7:32:5e:14:fc:3d:70:e8:8b:
                    74:a8:92:75:8f:ee:c6:7e:67:43:a9:de:b8:ca:c8:
                    2c:99:cb:87:50:82:3c:3a:13:e4:e7:97:2b:ec:cf:
                    67:ee:7d:bd:c6:3e:19:bf:e3:a1:b8:76:5e:07:1b:
                    df:47:d1:6e:c5:e0:d0:b0:7f:78:8a:66:92:58:bd:
                    59:97:a3:ff:07:e0:93:23:66:2e:81:2c:79:59:5e:
                    01:99:b0:b8:59:5f:7c:61:f9:c7:5e:98:56:3f:d6:
                    a2:5b:b2:75:62:1e:2a:b8:f5:ea:5d:d5:83:b6:39:
                    54:94:a4:93:71:d2:37:09:93:d1:a8:2a:e2:3c:23:
                    d9:0c:8d:42:ea:d0:2b:1e:e1:3b:c2:2c:3d:d0:d1:
                    cd:0f:b4:bd:00:d6:cd:fd:e8:6e:32:bc:63:29:ef:
                    f9:33:fc:1d:90:16:7b:0c:a9:68:53:fd:76:e1:ec:
                    ba:d5:e6:47:22:d9:1d:c0:73:be:47:27:6f:2f:2b:
                    b9:a1:eb:1e:d6:a7:7e:11:d5:4c:d6:c6:57:de:ba:
                    02:66:f3:50:1c:7e:ab:72:65:72:2f:53:5d:e2:d4:
                    56:98:63:48:70:f1:d5:74:9f:1b:fd:0f:db:1c:0a:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:84:86:0D:78:0F:1A:EC:22:C7:10:3E:9D:A2:7F:7B:05:41:FA:7D
            X509v3 Authority Key Identifier:
                keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:14:62:77:2c:98:d7:40:76:5e:03:16:a8:76:48:8f:ad:01:
         43:e9:9f:10:62:db:3b:7b:b2:36:e6:88:2d:f2:5c:8a:fa:67:
         5e:3f:03:02:e9:e2:ca:b3:1e:45:cb:73:f1:f1:96:2d:56:5e:
         a3:ce:26:07:e3:e6:08:7b:32:8b:f5:9f:a9:cc:84:9a:04:80:
         f2:e5:5e:21:e6:98:32:ac:d7:60:be:7b:23:77:72:86:cd:0f:
         a0:92:98:17:73:73:4a:f9:a1:a7:14:34:7d:ee:ad:6b:75:9c:
         5c:dd:7e:8c:3f:e5:f5:f4:6f:c2:51:2b:52:8d:60:a9:59:38:
         23:2c:c2:cc:a7:3d:82:98:73:7a:94:2a:d3:2f:1c:fb:1d:44:
         49:0f:5d:ce:80:4f:33:47:b3:10:b9:69:03:e0:bd:7c:3d:cb:
         86:37:ce:bf:8f:8a:b9:c0:44:d7:64:60:e0:dd:55:4e:cc:17:
         6a:16:d1:35:77:33:10:2e:95:44:67:ea:67:16:c3:ae:53:5f:
         e8:73:a3:b5:24:5a:6a:14:ef:15:3a:d9:2a:b2:a0:a9:81:8f:
         57:5c:24:da:db:e8:30:65:f0:a1:ea:84:0f:7e:0b:67:a9:c7:
         69:32:82:c2:ba:3e:4a:3f:f0:f6:09:2a:19:be:60:b8:7d:79:
         04:bd:58:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:13 2026 by rpki-client