Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
File:                     cxr_GtmPWxpYwO179ZVNRqxpqX0.mft (raw, json)
Hash identifier:          BXu75x4dbbR6KSyLbuzsHEnYTmMdJC8Y9SP/futTtMI=
Subject key identifier:   2F:59:CA:30:9D:31:08:39:E8:38:88:39:38:0D:9E:6B:46:31:CD:35
Authority key identifier: 73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
Certificate issuer:       /CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Certificate serial:       01A02621401192DC7B62F0EC9608D9D230C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
Manifest number:          8D
Signing time:             Fri 21 Aug 2026 21:01:48 +0000
Manifest this update:     Fri 21 Aug 2026 21:01:48 +0000
Manifest next update:     Sat 22 Aug 2026 21:01:48 +0000
Files and hashes:         1: 6kl226BoKPatXqH-G4ESWpFt8PI.roa (hash: DAR9tJljAJznRmywtMPx4oPb201hbh/d1GIS4ZxDEnU=)
                          2: CpwJHamX3s4jWnYcAa8QCmKY4rg.roa (hash: 89U2iRmH/tQ9pJ58ExZmeppXf1oLInBv/nRgnRGClC8=)
                          3: MD01cmZnnlwsixl4zb4iNIv80Do.roa (hash: xZkexBZwyclrdYp0+CSreOyRAK1MNsO9cG6O13KYEhQ=)
                          4: Oa1C2BiJUB2DPinZHDtphEprA0w.roa (hash: INR06IqVsKSdmdf46tvWiLyHqQeLCDTxEJjybjAgDxs=)
                          5: cxr_GtmPWxpYwO179ZVNRqxpqX0.crl (hash: FFt6VZAiaXxiwOCuzJhtqtwOYDUDM2z05bF8HDLncXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:21:40:11:92:dc:7b:62:f0:ec:96:08:d9:d2:30:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
        Validity
            Not Before: Aug 21 21:01:48 2026 GMT
            Not After : Aug 22 21:01:48 2026 GMT
        Subject: CN=2f59ca309d310839e8388839380d9e6b4631cd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:e2:ae:bd:17:b0:68:52:06:89:ad:ac:1a:
                    b8:19:c0:d9:fd:4d:87:26:2b:a9:95:de:53:88:db:
                    a4:00:5d:15:19:53:58:a3:1c:a2:7e:b3:38:35:e3:
                    0e:ab:ac:16:e3:5d:a1:db:f4:bb:0d:99:17:16:d2:
                    5a:5d:88:7d:9b:56:e9:1d:b3:e6:00:1d:75:c0:36:
                    11:e5:a4:3b:44:a2:8b:80:3e:58:3d:6f:15:5e:e6:
                    83:53:56:8f:3b:0e:ef:ee:ef:03:cd:5e:d9:bc:fc:
                    5b:91:93:47:bc:c6:f2:87:de:c2:0b:10:03:e5:6a:
                    de:00:cb:01:d9:84:78:62:9f:24:f5:68:71:c9:38:
                    35:34:4d:a3:62:d8:a5:82:0b:21:79:bc:9f:4d:36:
                    70:a3:81:61:5b:13:ec:6c:bf:81:fb:0e:f9:8b:e3:
                    46:d4:46:d0:ea:31:a2:61:a8:ba:fa:9d:3a:94:c6:
                    32:ad:b1:59:a2:9b:4a:d0:63:58:ab:c0:49:b9:09:
                    f6:6d:8b:78:69:36:4b:e0:b1:37:11:10:f0:34:31:
                    2a:3f:62:b6:12:ed:bc:3e:eb:b7:3d:14:36:e2:67:
                    a7:7d:7a:e6:9f:65:c3:b8:55:aa:00:5e:c1:93:bd:
                    76:46:c6:60:a6:53:26:48:3e:0e:8d:1b:94:8f:61:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:59:CA:30:9D:31:08:39:E8:38:88:39:38:0D:9E:6B:46:31:CD:35
            X509v3 Authority Key Identifier:
                keyid:73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ce:a9:e2:73:af:66:bf:97:f8:eb:e8:9d:fe:6e:c9:49:01:
         aa:32:51:ce:67:2c:89:9b:8e:90:05:0e:1e:fc:c4:6f:1b:ad:
         ad:8a:fd:a4:1d:4c:fc:8f:dc:d1:6e:38:82:84:af:39:c6:a1:
         ac:24:68:12:12:63:67:3d:88:98:9e:14:71:56:d9:09:23:30:
         1a:00:ec:b4:f2:f7:86:75:c6:1f:e6:b8:50:da:8c:c4:ac:49:
         74:50:c0:f4:1b:4f:e2:3a:4e:d9:c5:74:42:c7:25:60:fe:d1:
         81:10:77:fc:57:63:10:fd:d4:cc:0e:3c:88:84:27:42:90:af:
         67:2a:41:ae:2d:b2:5f:39:3c:a8:02:ec:7d:a8:11:32:ba:1b:
         f7:e7:ff:d9:d4:7c:d5:e4:7e:d0:05:ea:fe:1f:0f:25:22:7d:
         0b:bc:33:64:d4:96:d7:a6:b7:c0:8b:d0:8d:32:04:0a:74:8e:
         58:d4:07:f6:1f:39:db:ae:48:12:7f:45:6d:15:49:0c:5e:46:
         c4:4f:47:24:10:a6:d6:8b:b1:e8:c5:b1:34:5d:ec:27:72:bc:
         7b:01:3a:24:f0:f5:c4:42:d2:c5:17:6c:e3:5b:b0:96:7e:d2:
         e0:3a:08:2e:fa:52:c4:f7:91:f8:1a:fe:ba:ce:ad:b6:6a:2e:
         e3:32:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:53:22 2026 by rpki-client