Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          Jpdi6WTrb3ggPGEtg+mSuBFJ+IWQtzp04crY+LsyW+8=
Subject key identifier:   AD:1A:00:52:41:A7:25:56:A2:75:35:A9:E0:61:71:8E:CA:09:2A:F2
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019FA1F2A9AD03D31CC09332512D8870B879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          0A83
Signing time:             Mon 27 Jul 2026 05:01:02 +0000
Manifest this update:     Mon 27 Jul 2026 05:01:02 +0000
Manifest next update:     Tue 28 Jul 2026 05:01:02 +0000
Files and hashes:         1: 4YRS6EEeuTI9ZfzO53iKNIfSN4s.roa (hash: Tv3HULU0Zra1BolAPc2Q/gu/Km7IonOCAUA8ZpZ63Jo=)
                          2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=)
                          3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=)
                          4: kt9wkvMfUjDBISQAMhIZ_H3acrA.roa (hash: 2eym/C1FIDZNxIwzhAk1LB/uLTJl3u4Wtgxo8cZEAdo=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: 60241TBXLutzBfJKXGWKgZozRWJl9rWw6Wr65gAR+e8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:a9:ad:03:d3:1c:c0:93:32:51:2d:88:70:b8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Jul 27 05:01:02 2026 GMT
            Not After : Jul 28 05:01:02 2026 GMT
        Subject: CN=ad1a005241a72556a27535a9e061718eca092af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:3c:8a:de:69:51:ed:90:03:21:b1:ca:9e:
                    7f:73:d7:75:5c:25:4e:b5:f3:96:3a:ba:bc:aa:2f:
                    0d:f3:27:35:ba:99:db:64:f3:88:6a:7c:35:07:a4:
                    a8:94:e8:26:01:d6:90:54:2e:a2:7d:d9:8f:79:2c:
                    29:90:49:d1:f3:9a:64:f8:98:86:a0:fa:9f:7f:52:
                    ad:31:c9:b1:c3:79:b6:af:9c:f5:54:74:d7:9b:6c:
                    8f:bd:5b:49:8f:6a:67:ea:aa:d5:2f:d7:96:53:93:
                    4d:86:2a:fa:e3:d9:2e:0f:05:54:df:d5:cf:d3:58:
                    d3:bf:58:22:57:f3:84:7b:75:c4:d4:4c:e1:5b:54:
                    9d:29:9a:4f:96:cb:83:1f:8c:76:15:da:74:5b:cb:
                    47:d9:e1:39:5b:3c:71:4a:0d:e7:bc:51:d8:c2:d3:
                    de:ed:eb:76:b4:5e:1f:62:22:93:ed:e2:0b:16:9e:
                    d2:05:25:e3:25:e7:5f:af:e1:4b:14:f1:99:8b:39:
                    89:27:75:dc:6f:f3:c4:85:a3:0c:0b:46:88:84:41:
                    a9:9c:bc:30:d4:b2:45:4b:97:d1:d3:35:09:f5:ad:
                    7c:1b:5e:e4:bf:bd:32:4a:ea:ab:18:1e:a4:ab:da:
                    9a:e8:b0:37:b0:0d:58:35:66:a9:4f:3e:a9:9b:53:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1A:00:52:41:A7:25:56:A2:75:35:A9:E0:61:71:8E:CA:09:2A:F2
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:f2:93:00:a2:06:d4:ae:be:5e:96:fc:41:6c:c5:a8:9f:
         86:c1:b8:8f:10:ac:06:be:7f:23:22:ad:2d:9d:dc:3e:e9:71:
         03:dc:72:b6:ae:ff:d1:d9:fc:1b:01:82:7a:86:76:98:43:19:
         a3:4b:fc:31:11:e4:e0:0a:60:3a:3a:28:b4:84:97:64:75:91:
         e4:68:f5:87:e9:d5:5c:42:46:01:30:18:41:e9:33:5f:c8:f4:
         f0:27:bb:f7:1c:07:62:73:c0:b5:4f:9f:70:f2:70:81:b8:e6:
         bd:b8:a9:2e:01:13:20:9c:59:b9:53:f7:4e:09:4a:5a:28:54:
         61:f9:40:9b:15:9c:34:38:36:bb:40:0d:ac:80:17:7d:dc:a7:
         b2:3e:a5:5c:ad:1e:99:28:82:f2:7c:a7:00:d6:87:31:cc:92:
         ec:e7:21:c7:e4:4c:80:65:97:ea:75:19:c9:c8:81:37:dd:33:
         67:b2:4b:99:f4:e9:83:ac:2e:a1:7d:2f:88:bc:ab:96:4c:69:
         d5:1b:c1:c6:ec:19:56:bc:de:91:59:fb:4f:ab:86:22:ac:b2:
         36:bb:39:f9:a1:04:06:a5:ba:05:fe:fa:ac:46:4d:35:20:99:
         f6:b8:b8:c9:c8:e8:41:05:42:e0:55:71:39:d1:11:61:08:d0:
         21:99:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----