Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File:                     xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier:          EH9JQBFvpj0pOgGSCd4e2VNmrPCQrVkcMyXW89jTsZA=
Subject key identifier:   72:60:EB:AA:5E:80:E1:31:8D:88:A3:76:11:FF:59:A7:3A:EB:7C:36
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer:       /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial:       01A002EF815532FA2FBE3E8FD24DF9B46AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number:          1934
Signing time:             Sat 15 Aug 2026 01:00:45 +0000
Manifest this update:     Sat 15 Aug 2026 01:00:45 +0000
Manifest next update:     Sun 16 Aug 2026 01:00:45 +0000
Files and hashes:         1: IPWrOvsWgguYWB7Nl_gTONIzrpI.roa (hash: K/fllT4qGMJT3KoDnyrWIczoizT4y2FZ0kvxUQY8R7c=)
                          2: LbZzVT40yf25Ha7iF2B6O1RvYF4.roa (hash: f9AuhT5EpMpRv8pZmA+KFqXspnh60tIOSzMIN9FFIDk=)
                          3: pN_P1IlTK7N9Tsyo-7qDne3seo8.roa (hash: 4JuBbaWoHsvx0AsZc9fY1wPJc+hsLORDmTae2tdrxYs=)
                          4: vCRnh4F_lljPYv3DYF0shQI8Bbo.roa (hash: qW582UkFyFw7De0dFAxA/OIbguYJh97E6vsR4Z29UJE=)
                          5: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: ZQ5pW9VLlEhTIFGbTju14/TYJPQMCHgzs93QYHR4RpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:81:55:32:fa:2f:be:3e:8f:d2:4d:f9:b4:6a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
        Validity
            Not Before: Aug 15 01:00:45 2026 GMT
            Not After : Aug 16 01:00:45 2026 GMT
        Subject: CN=7260ebaa5e80e1318d88a37611ff59a73aeb7c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:13:8a:a7:58:64:48:dd:0d:47:82:9e:17:
                    51:11:c9:26:64:77:bb:66:33:b5:0c:e6:b4:fa:d4:
                    af:ac:32:f3:14:84:32:a5:3c:70:ad:2c:24:5f:c3:
                    47:26:4d:d1:bc:fa:c5:ac:1b:5f:eb:44:91:cb:5e:
                    b5:be:f0:ac:d4:1d:20:7b:b3:ca:d2:0f:af:59:28:
                    68:8a:41:3c:44:15:57:f4:57:36:13:00:67:5c:86:
                    ef:3c:42:0b:99:f3:16:b1:fe:cc:06:93:1a:e5:cb:
                    9b:6b:8e:05:65:69:b2:8a:22:17:47:a7:fc:23:aa:
                    82:02:19:b5:25:52:7f:55:17:c4:ed:d0:79:5b:2e:
                    71:0b:f1:a7:a5:ed:eb:8d:5a:5c:56:ea:a4:b6:c7:
                    27:c2:87:68:23:75:60:9c:6b:78:48:a3:43:ea:e5:
                    ab:54:b3:53:57:e8:13:99:2c:ea:e1:f3:a1:8d:3a:
                    a2:8f:a4:24:48:38:41:9e:1c:db:ad:3d:b3:fd:a0:
                    2e:4a:2a:b8:ae:18:a2:3f:9f:11:9a:44:c7:c4:2a:
                    e4:a4:21:84:1f:8a:1d:ae:de:03:f7:a6:18:dc:d3:
                    cb:62:66:67:e7:0c:cb:00:b6:34:e3:b2:7e:23:3c:
                    35:ee:08:a3:22:78:c1:f8:af:67:f0:2b:64:4e:e4:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:60:EB:AA:5E:80:E1:31:8D:88:A3:76:11:FF:59:A7:3A:EB:7C:36
            X509v3 Authority Key Identifier:
                keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:6a:6e:70:a9:ce:dd:99:fe:31:08:ff:3c:33:0e:60:a9:
         f2:b4:26:cb:bc:a3:0a:77:32:a6:27:89:f8:86:f0:9d:3a:65:
         e7:2d:66:bd:b4:29:93:8b:eb:07:ae:1e:4b:43:67:d9:15:80:
         ea:ed:33:e0:aa:ea:29:84:fc:c2:d8:38:95:04:6f:02:a8:7a:
         4e:da:55:cc:b9:a4:c1:b7:16:3f:ef:fe:a1:54:80:f4:5a:08:
         6c:df:27:d8:17:1a:03:a8:45:00:08:a3:82:68:99:8d:e0:67:
         e4:32:c2:15:ff:5e:9b:d1:7b:e3:1d:a2:8b:41:89:ab:39:7b:
         2c:30:a6:18:0e:34:7c:54:14:d2:88:e3:9d:c8:f7:d8:40:7a:
         8c:a1:7a:b2:98:dd:9e:09:d2:ac:3d:05:b7:0d:c8:95:57:e0:
         07:c5:2c:83:b3:d1:f1:d7:bc:5c:1b:3a:64:c8:9e:27:12:ed:
         1b:4b:ef:04:20:2c:6f:6e:73:a7:d2:54:8e:60:61:2f:9b:70:
         47:75:b6:40:68:9e:85:e1:38:cc:46:f0:ad:29:84:be:91:75:
         d7:a9:61:d0:96:47:bc:2f:2c:d8:7e:ce:69:a8:4f:8e:64:e7:
         11:c0:40:15:b0:41:50:cf:13:bc:b3:cf:fc:17:9a:4f:b3:5b:
         36:f3:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:28 2026 by rpki-client