Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
File:                     1XEqnWm0rsl4nBTLBStxObBuddo.mft (raw, json)
Hash identifier:          Agqw44cFjTSfAGizCfiml3P8KNIcGIx6E3XJumJX2dg=
Subject key identifier:   3F:6C:4B:A4:FF:53:CD:51:9B:D6:B7:8C:98:5F:BD:E5:E1:C0:77:18
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Certificate issuer:       /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial:       019F45AF080F7FB0AE5EE43E38BBCF05075B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
Manifest number:          17
Signing time:             Thu 09 Jul 2026 07:02:06 +0000
Manifest this update:     Thu 09 Jul 2026 07:02:06 +0000
Manifest next update:     Fri 10 Jul 2026 07:02:06 +0000
Files and hashes:         1: 1XEqnWm0rsl4nBTLBStxObBuddo.crl (hash: zafu7g1HkvBVwqAfM540lqx/7FmYj68rWxH46pyHxuY=)
                          2: xZ59-pNTc7ezOemP3gmY_8tZ3KA.roa (hash: +8eOBSGGw03CBaqRTg+4T+O7Q/El7GL/vSuip22cJd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Jul 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:45:af:08:0f:7f:b0:ae:5e:e4:3e:38:bb:cf:05:07:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
        Validity
            Not Before: Jul  9 07:02:06 2026 GMT
            Not After : Jul 10 07:02:06 2026 GMT
        Subject: CN=3f6c4ba4ff53cd519bd6b78c985fbde5e1c07718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:db:67:e8:db:10:3d:11:d6:03:7c:23:e1:
                    ce:09:13:1a:ea:5c:6e:f1:d2:ac:c4:1c:e3:2e:78:
                    70:31:97:ad:80:15:2a:5b:6b:8f:bb:75:53:5c:49:
                    13:e8:d2:f3:c6:cd:26:71:08:ef:2b:bf:39:37:87:
                    ad:23:c5:10:80:d6:e9:ab:c3:bd:9b:f9:22:9b:56:
                    e8:cc:0a:25:bf:d1:29:f1:22:03:ae:20:be:cf:85:
                    09:37:91:ad:14:21:f6:3b:84:ec:66:9b:8d:e0:09:
                    92:31:93:2d:c2:6e:f4:3f:ec:b1:e6:8b:52:54:59:
                    74:b4:2b:41:2f:e8:49:c1:3b:13:74:71:4e:55:e6:
                    f3:8e:62:e6:bd:92:11:3d:25:ed:05:4a:a3:59:e2:
                    7d:be:44:f2:2b:7d:4b:50:c0:bc:29:8f:4d:52:36:
                    93:9d:c8:49:c6:9d:2b:71:5b:d9:7b:e3:77:22:8e:
                    7a:f0:13:18:48:68:8b:ce:f0:60:e9:a7:f6:de:18:
                    b2:3d:bf:46:5a:16:15:85:8e:66:03:fa:51:25:2e:
                    16:79:e2:43:08:74:b7:19:57:1b:fa:71:02:70:f4:
                    8d:8b:4a:99:18:88:5d:4f:e8:ab:20:33:33:f8:83:
                    52:e9:92:dc:ce:23:c1:76:4d:c1:b3:a2:d6:6c:02:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6C:4B:A4:FF:53:CD:51:9B:D6:B7:8C:98:5F:BD:E5:E1:C0:77:18
            X509v3 Authority Key Identifier:
                keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:75:99:a8:44:8b:68:7f:07:bd:68:9c:32:74:07:4a:7e:7c:
         9a:ba:fa:ab:9f:48:23:44:04:bc:de:54:27:d0:8a:a9:b5:4a:
         5a:c0:3a:68:2d:66:e8:0c:e1:35:6f:1f:96:70:3a:2b:67:de:
         da:92:1b:88:85:4e:18:03:73:65:6d:51:25:fa:6d:85:2f:85:
         d7:8e:13:ea:a7:e8:a2:62:c9:a6:c5:99:87:bd:8e:c7:ab:dc:
         f3:f3:b9:9e:c7:cf:bb:41:b7:88:0d:3c:1a:7b:95:ce:13:47:
         74:ad:a5:92:35:ed:0c:39:43:51:b5:40:98:4e:f4:0d:4c:8a:
         a4:d1:3c:a6:e7:d5:b3:1f:e1:16:4c:b9:a6:8e:84:f9:de:8f:
         eb:0f:49:77:7a:16:af:8b:4d:ed:79:91:2b:a4:fc:f1:56:f5:
         c2:ff:fa:7f:2c:50:62:1b:94:d4:f2:7a:e2:b2:9a:68:48:ce:
         6f:20:b6:36:20:ce:94:92:eb:48:5c:26:9d:d2:ed:c0:74:cd:
         c6:e0:55:d0:27:d9:21:1e:11:74:e3:ab:f6:93:21:f7:5c:69:
         6a:81:58:8e:46:98:ee:e7:7a:b5:a0:7f:bf:dd:20:cd:99:2a:
         2e:2e:62:c0:bb:56:75:0e:e0:bd:cf:3b:15:8e:63:ff:7e:f8:
         a8:85:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 13:35:41 2026 by rpki-client