Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
File:                     xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json)
Hash identifier:          WmLrO4N8g5GKHF0yhxx4kZHqVtGTJu5QxaqF2lEN9Kc=
Subject key identifier:   E0:A9:D4:FF:0D:0A:0F:82:4C:9C:B7:EC:DB:E6:1E:10:89:CE:61:AE
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Certificate issuer:       /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial:       019FA3049A6FAA62EFD17A612E4EE584BF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
Manifest number:          19DF
Signing time:             Mon 27 Jul 2026 10:00:15 +0000
Manifest this update:     Mon 27 Jul 2026 10:00:15 +0000
Manifest next update:     Tue 28 Jul 2026 10:00:15 +0000
Files and hashes:         1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=)
                          2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=)
                          3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=)
                          4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=)
                          5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=)
                          6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=)
                          7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=)
                          8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=)
                          9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=)
                          10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: JLVt64Z2r5MGr6m+IFOzseOJecTirlPNe6OEiOQVX38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:04:9a:6f:aa:62:ef:d1:7a:61:2e:4e:e5:84:bf:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
        Validity
            Not Before: Jul 27 10:00:15 2026 GMT
            Not After : Jul 28 10:00:15 2026 GMT
        Subject: CN=e0a9d4ff0d0a0f824c9cb7ecdbe61e1089ce61ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:33:2e:ca:e5:85:2d:6e:59:77:28:58:d2:
                    c4:52:26:f7:58:84:99:a2:a6:48:31:5d:5d:d2:e4:
                    76:31:18:86:43:02:64:d2:20:f5:90:77:ea:23:51:
                    be:2a:b4:0a:3c:c0:13:5e:45:2c:74:9a:fc:00:fb:
                    cb:9e:4b:17:4b:2c:df:14:83:0c:83:11:82:c1:f8:
                    c7:e4:cd:9e:e2:ae:f3:1a:92:79:5b:08:cb:cf:2e:
                    52:3f:13:af:07:4e:ec:c8:7a:9a:c9:52:d1:dd:7f:
                    47:45:ac:b5:68:c2:fe:c4:df:62:51:2c:a6:29:b7:
                    cd:21:ff:54:68:9f:b1:89:d2:35:fe:9a:2a:d2:62:
                    cf:5e:37:d0:a7:be:48:fd:96:ab:b7:bc:5f:dd:60:
                    c2:44:43:84:1d:64:df:da:4e:70:40:20:5e:c7:5e:
                    90:bc:4b:d0:89:28:3c:c3:a2:ee:d8:17:e1:3a:23:
                    62:09:98:1a:ec:49:74:0f:b1:c0:53:e8:ed:ad:e6:
                    3d:d2:9b:40:96:f1:3e:d4:fb:39:2e:a0:7e:3c:25:
                    b3:23:b3:98:34:40:ca:24:37:df:b9:85:3c:0e:29:
                    17:2f:2d:d9:3b:83:b1:3b:96:ee:17:a0:c0:5f:47:
                    77:54:1a:69:af:c2:b6:27:81:55:1f:d1:e8:8e:97:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A9:D4:FF:0D:0A:0F:82:4C:9C:B7:EC:DB:E6:1E:10:89:CE:61:AE
            X509v3 Authority Key Identifier:
                keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:77:a2:3a:b6:8c:79:c3:a2:78:73:64:01:63:b8:2b:ad:
         a2:b9:da:d5:4d:aa:66:0b:62:bc:7f:3f:07:4d:31:27:c0:5a:
         12:6b:20:08:12:f7:72:75:55:1c:ca:3b:53:a6:70:05:d8:97:
         5b:58:4b:23:70:d3:c8:7a:5e:ac:b0:e7:f7:67:e7:3d:ac:84:
         7a:8e:57:2f:f7:6a:1a:e8:74:f2:92:c1:6f:0a:5b:57:60:44:
         d7:8d:b5:ee:f7:48:cf:b8:e2:ba:21:a1:8f:87:1e:d2:db:9e:
         2a:0a:f3:ec:0a:04:ee:08:8a:31:d9:50:83:13:9a:bf:72:ba:
         8a:9b:e6:40:46:25:c4:eb:20:bd:ce:3f:97:d1:34:92:8f:d7:
         e1:9c:41:eb:64:b6:39:99:31:02:a1:5a:ee:a2:fe:86:20:a3:
         98:2a:cf:9f:9f:6a:0d:47:b8:37:4e:26:df:e2:92:d2:f5:c6:
         d4:7f:42:14:96:a4:57:b1:6c:cc:cf:aa:20:9f:d7:f4:e2:be:
         90:4a:89:01:50:b1:61:20:68:b1:50:0a:06:4f:bf:e6:5a:fc:
         16:fc:81:24:47:af:0e:8c:6c:2b:34:e3:60:b6:f6:43:d7:d5:
         74:f3:e4:15:22:f3:8c:cd:7f:d3:67:a7:56:95:87:a2:5e:9e:
         eb:2a:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:20:11 2026 by rpki-client