Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          m2qTxXr+JfGHZgP12FVY1GT3ZJKHPqugo2EWG1abaKw=
Subject key identifier:   C0:52:03:36:95:C3:27:4B:13:4B:15:B1:D5:14:4A:9F:0F:71:AF:92
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       019FA14D7A79AE6DA59A5B7F706A12F5659D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          08AF
Signing time:             Mon 27 Jul 2026 02:00:37 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:37 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:37 +0000
Files and hashes:         1: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: tx3QPuOijKtx8YObA+a84SmZ4vr7V5Xm1oPfTAsD2ao=)
                          2: ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa (hash: 3TzGgdPPeRvq5m4XrgUnNCdTHF2ADSRfiiLFr+IcrFs=)
                          3: e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (hash: hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=)
                          4: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (hash: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:7a:79:ae:6d:a5:9a:5b:7f:70:6a:12:f5:65:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Jul 27 02:00:37 2026 GMT
            Not After : Jul 28 02:00:37 2026 GMT
        Subject: CN=c052033695c3274b134b15b1d5144a9f0f71af92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:22:6a:db:4d:25:06:0f:0e:15:f0:72:84:
                    46:61:d5:9b:83:07:77:cb:1e:10:a9:24:a1:86:7e:
                    95:a0:4a:dc:23:41:70:7e:f8:ef:f0:6a:d5:13:9f:
                    ea:8f:12:ef:51:30:47:66:ee:b4:7d:ca:a3:60:b5:
                    b3:02:c4:bd:0e:38:da:86:1a:d7:3e:75:8b:8e:1b:
                    23:ec:77:87:c8:12:7f:e9:19:1e:de:c0:dd:2e:15:
                    a5:b5:ae:fc:37:16:8e:6f:69:18:64:49:32:0d:7b:
                    d4:5b:cf:f7:ae:21:23:03:23:4c:7f:86:c4:48:7a:
                    3b:e5:4d:8b:18:6b:fb:32:54:ed:02:e9:27:c5:26:
                    7b:e4:38:91:a6:de:6d:df:df:57:b5:1d:a4:6a:7c:
                    33:61:cf:a2:1e:76:25:21:c8:b7:f5:21:9f:43:98:
                    17:d3:13:49:76:c7:73:89:91:de:29:a8:41:98:6c:
                    6b:a8:bb:30:c9:7d:12:9f:52:68:56:19:26:ab:6f:
                    1d:bb:e8:53:e6:f0:99:4c:74:a5:95:91:31:3f:02:
                    82:7f:25:a0:ca:5d:40:36:e5:31:ac:15:be:f9:70:
                    d7:5b:ac:65:3a:e4:3e:01:78:c7:96:51:24:48:5b:
                    1b:b3:7c:45:97:7c:ee:55:34:e2:17:fe:b0:10:dc:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:52:03:36:95:C3:27:4B:13:4B:15:B1:D5:14:4A:9F:0F:71:AF:92
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:61:34:40:c8:ca:a3:ef:c5:c5:6a:fd:72:29:8e:4d:07:2c:
         ca:1a:76:26:d5:2b:a0:47:ca:fd:36:21:d1:6e:7b:aa:8a:b8:
         6f:d2:d4:65:5b:75:48:52:90:a6:0a:b2:f7:2e:c0:88:36:22:
         3a:cf:93:fe:93:19:77:15:de:92:4f:4a:1d:41:2b:4f:f9:39:
         1d:5c:36:73:6e:95:57:c0:3f:0c:6e:ca:03:35:0a:45:a4:29:
         09:97:7e:29:1b:44:0d:bf:c2:9c:1a:09:d6:1c:d9:b8:78:e3:
         57:62:d7:32:fb:6a:1e:bd:49:03:95:16:65:ec:15:d1:e6:37:
         af:8c:25:38:c0:78:c2:c6:b6:7b:2e:5f:a1:bb:88:f0:bc:fe:
         ab:ee:cd:64:1c:69:26:a7:b0:14:2a:d0:06:a3:91:d4:9a:5d:
         47:2d:5c:e5:23:b2:52:71:86:67:43:08:c5:fc:97:a6:f6:f0:
         4d:9d:fe:e0:c5:6b:b0:9f:e1:f2:54:fd:db:ef:f8:f4:20:bf:
         f3:cd:69:0c:d1:52:1a:42:a3:fc:c5:9b:d0:db:90:30:2c:24:
         65:a8:dc:31:cd:c4:33:41:49:ef:e4:58:63:6c:00:8b:f7:b4:
         98:93:50:24:35:7b:e4:d0:77:eb:c4:5a:40:14:a4:aa:b2:3e:
         0c:15:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:42 2026 by rpki-client