Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File:                     XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier:          fK1VKLfZFYOpx0eMh8LD/JEquVrCMQmSFaS9rdbgYDg=
Subject key identifier:   1B:8E:DF:68:0E:AE:16:08:17:B4:B7:90:66:F4:72:16:C9:E3:5B:67
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer:       /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial:       019FA14D845CCB5C8CC70F153C3FA67B555A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number:          048F
Signing time:             Mon 27 Jul 2026 02:00:39 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:39 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:39 +0000
Files and hashes:         1: GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa (hash: afD0B4wX8ENk5NOyojNKqywcV5cJB2IJVzbUoTBJNnw=)
                          2: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: IaV3qXIk2YUVAIPdvAATUTIPmbWe++AkgD4C/fZTNfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:84:5c:cb:5c:8c:c7:0f:15:3c:3f:a6:7b:55:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
        Validity
            Not Before: Jul 27 02:00:39 2026 GMT
            Not After : Jul 28 02:00:39 2026 GMT
        Subject: CN=1b8edf680eae160817b4b79066f47216c9e35b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:c5:25:f5:99:d6:fd:34:bb:69:25:a4:e7:
                    08:55:4a:a1:0b:3f:6a:45:5a:12:2c:14:02:20:dd:
                    7b:5c:32:06:41:5b:31:3b:b5:16:35:85:12:f9:39:
                    9f:75:c1:85:6e:78:48:4f:e0:6f:5a:8a:ea:c9:61:
                    ba:c8:cb:f4:58:f8:eb:9a:24:18:9e:fc:8b:27:00:
                    d7:24:e9:77:88:e3:38:8a:5c:ee:df:ee:0f:76:e6:
                    43:af:8d:cf:5c:51:dc:ee:b9:bc:9b:cc:c1:8d:10:
                    2e:c6:83:2e:d7:39:d5:1b:8b:a5:a3:3c:75:5c:bc:
                    32:32:0d:e1:c1:b8:10:c4:58:7d:3e:96:27:28:96:
                    43:51:e9:f0:9a:4b:a4:44:51:1a:28:35:6a:1e:12:
                    37:98:fe:63:13:85:d6:a4:d1:1d:76:5b:ca:65:3f:
                    87:af:b0:90:37:d3:bb:18:69:c3:8f:7d:0b:00:28:
                    cb:99:f7:0a:39:1a:48:cd:ac:17:0c:c4:29:66:58:
                    14:25:0c:11:6b:7b:ad:e6:fb:23:ab:09:8e:9f:f5:
                    23:56:03:90:6f:ff:2c:f7:50:cb:bd:86:54:77:a8:
                    d4:90:ba:d9:71:7f:d4:b9:1e:11:a9:17:5f:5c:44:
                    da:b8:36:e0:78:3d:3c:bb:fc:00:4a:71:59:3a:ad:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:DF:68:0E:AE:16:08:17:B4:B7:90:66:F4:72:16:C9:E3:5B:67
            X509v3 Authority Key Identifier:
                keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:65:47:3a:9b:d9:a6:76:9f:3a:62:98:42:55:0d:21:72:2c:
         83:fb:0e:38:63:d1:1c:f8:a7:43:b1:f3:71:7d:0e:ef:ad:3e:
         11:23:cc:83:23:ed:d4:cd:8f:7c:e1:91:90:bc:0b:25:d1:f2:
         6f:3c:af:33:05:c0:51:14:9a:c4:a1:f2:4d:c7:e4:c3:ef:b8:
         9b:87:db:a8:af:8a:a7:f0:02:d0:47:03:66:cf:df:92:bf:dc:
         8f:09:17:dd:77:eb:8c:2a:10:53:1b:a5:08:10:0f:4e:c4:a9:
         e5:23:d0:44:37:ca:d1:f5:c7:24:fb:4f:97:da:cf:a4:c9:d9:
         98:62:99:24:e4:9f:af:06:93:d4:30:57:23:4f:c8:7d:76:e4:
         28:a6:4b:31:c0:f6:43:19:53:6f:6a:5d:e2:38:6c:1c:7f:69:
         0b:85:42:29:1d:7d:b2:7c:0f:2b:3a:c3:41:9e:94:10:23:d5:
         08:08:20:87:d5:65:5b:51:63:60:78:6d:ee:f2:31:fb:17:85:
         d2:fb:2c:f4:94:19:e4:6a:52:c7:a8:25:b6:df:c6:53:68:ad:
         30:30:d7:55:e8:f4:c2:d3:73:6d:4c:52:68:90:c4:ec:2c:a8:
         23:8c:84:3f:f5:76:cb:ba:23:53:8d:86:92:86:ea:b9:85:6b:
         91:3f:e0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:39 2026 by rpki-client