Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          KYHQSeNuT4o535/bLk3Fd/AyZugzY7vMASgH9rMDysk=
Subject key identifier:   55:B2:42:D1:56:76:2E:3B:50:6F:48:38:BF:84:88:42:67:7F:FF:A5
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       019FA072642F94994E615D160B65DDD0D6F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          19FF
Signing time:             Sun 26 Jul 2026 22:01:18 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:18 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:18 +0000
Files and hashes:         1: 1e3KekH_6pDsdSbJKChbFqgwM64.roa (hash: kcR5DefkrtLdhNpAqQoaiAp5NeBNbTNXuk4C29Rdnm8=)
                          2: 9D820He12zEiGHJY2yEp95HuOYo.roa (hash: JgNweIsliEaUH1GQxpLBgGrSQ23iPTPHkKTdFr797ts=)
                          3: HPAT1MyeKAtUXfiwHelB0dU143I.roa (hash: MB/EaJsVrRQhtNPL6YNv0ijVFjc3MkwuTavJrFTSstk=)
                          4: P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa (hash: DDSuenDK/kT9T6J/tQTGQwxbDy3mpq7Bc6isbXiDO5I=)
                          5: TieuC1DoyThjRQq3uG3ihjLScTo.roa (hash: vC9rnpVx2T8cbVOPfkfZTZYOxBuzPINUpSnwkUZDkSE=)
                          6: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: +20g4b4yKigJ4bRljs4T4VMKOOQ9/4OGYjfMJJxoRJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:64:2f:94:99:4e:61:5d:16:0b:65:dd:d0:d6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Jul 26 22:01:18 2026 GMT
            Not After : Jul 27 22:01:18 2026 GMT
        Subject: CN=55b242d156762e3b506f4838bf848842677fffa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:57:5f:85:3e:fc:93:f8:79:1b:25:8d:00:
                    56:b3:84:40:01:e3:06:53:97:21:26:0c:e4:87:f5:
                    8f:cb:3e:ca:e3:fa:48:87:8e:d5:16:0e:ff:1c:99:
                    b4:63:43:6b:e6:5f:cf:2f:c1:7a:e2:ea:19:87:fe:
                    eb:c9:14:70:14:be:ab:24:31:61:f1:2b:2b:2c:3c:
                    c8:91:a8:29:f8:d6:41:91:dd:a1:bd:05:ad:1a:e5:
                    e5:c9:08:ff:a6:76:02:84:54:f9:e9:c3:55:58:ac:
                    86:33:89:49:90:af:52:39:46:80:1e:82:02:0a:2d:
                    3f:e9:75:6b:45:0e:82:bc:ac:71:c3:c1:de:ed:9c:
                    54:10:4e:fd:8c:5f:0d:9c:df:1b:60:f3:a1:bb:94:
                    dd:13:e6:4a:c7:8b:61:18:65:83:79:99:ac:cf:6b:
                    65:0a:ff:16:5c:a8:2d:2d:a0:21:e2:ef:ea:0c:69:
                    61:d4:e6:74:1a:72:f9:02:d2:56:cf:e1:4a:94:53:
                    b7:98:0d:f8:e2:b3:cb:06:36:e1:25:41:40:63:40:
                    c9:70:62:dd:75:a3:a8:d9:0c:90:08:1c:15:76:d0:
                    41:0d:4a:82:14:fb:67:85:d1:cb:05:7e:c9:71:67:
                    40:3f:4f:86:45:10:5e:bf:e7:32:fc:99:20:ab:65:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B2:42:D1:56:76:2E:3B:50:6F:48:38:BF:84:88:42:67:7F:FF:A5
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:21:ad:c7:57:cb:31:6c:10:02:4e:80:cf:25:3a:ac:fd:
         6c:f9:8a:e9:a8:19:7a:df:2e:25:a5:b9:d8:f1:a8:ae:01:ba:
         b3:a5:8a:d8:76:cc:6e:43:00:20:69:70:af:98:7c:28:40:49:
         b1:f1:73:95:7e:8a:4d:10:94:69:4b:a3:de:19:9f:58:6e:16:
         6d:64:24:08:04:d9:05:f4:f9:9c:53:6c:82:79:25:66:73:d5:
         9d:23:94:4e:f6:a9:ce:77:d6:f3:bf:aa:b8:e2:a7:f2:84:7b:
         9b:3b:b3:16:e0:6a:ca:89:47:7e:1d:c8:45:06:dc:77:70:9a:
         8a:de:b5:5a:80:d3:dd:d2:fe:16:41:76:3b:b2:d8:fd:48:36:
         5a:65:d4:7b:96:7a:a1:79:c6:71:39:67:f1:b5:d8:e7:3a:b1:
         dc:06:2e:5e:a6:08:4f:fb:e2:6c:4f:f4:68:89:86:45:5f:b2:
         88:1f:c1:17:a3:f1:11:98:a1:dc:42:32:c5:ff:80:ea:73:55:
         b7:40:c1:f9:4c:95:32:e5:c0:dd:06:de:6e:e7:31:bc:8d:5d:
         48:6d:44:37:31:18:04:11:e2:ea:5d:62:1b:1f:2d:b7:0a:45:
         c9:b4:2e:33:89:47:9e:97:38:1d:23:03:0c:28:ca:e4:0c:41:
         c1:02:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:06 2026 by rpki-client