Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File:                     TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier:          QnL5kHP+5fuFA82RzLz6U0+wGi3mqXZ+r6XRuHSgL9Q=
Subject key identifier:   6D:8B:45:6D:D3:B1:82:56:3E:B4:12:BC:EF:5D:42:CE:18:DF:BF:57
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer:       /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial:       019FCC38326FD15BE5FA0C12109A3EF67DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number:          19E5
Signing time:             Tue 04 Aug 2026 10:01:02 +0000
Manifest this update:     Tue 04 Aug 2026 10:01:02 +0000
Manifest next update:     Wed 05 Aug 2026 10:01:02 +0000
Files and hashes:         1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: nROQbjiTmqS1vv47cLK2kodTmWXx9FqV6FNpins9IUk=)
                          2: e-PGryCKPVYVZQ4a0ucbiF-IKko.roa (hash: I6xOBjO/hgVperV3b00ycb8iwKnWcTOA7utz+CTNOoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:38:32:6f:d1:5b:e5:fa:0c:12:10:9a:3e:f6:7d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
        Validity
            Not Before: Aug  4 10:01:02 2026 GMT
            Not After : Aug  5 10:01:02 2026 GMT
        Subject: CN=6d8b456dd3b182563eb412bcef5d42ce18dfbf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:91:e1:62:3a:63:a8:85:09:7b:7a:8a:7d:
                    c7:80:05:7c:8f:c8:0a:ec:5b:13:25:ce:31:80:3e:
                    52:b8:a4:f9:e8:53:e9:a5:3f:e6:31:d0:d6:b7:42:
                    20:9e:83:62:c7:e1:75:43:b1:3c:74:7e:de:7b:19:
                    9f:41:c0:0a:0c:3c:cf:a5:54:a1:1d:06:7b:87:8f:
                    12:71:11:71:81:74:b3:0b:ad:fc:69:44:63:66:3b:
                    38:7f:8c:09:b9:d1:91:83:90:d1:9c:da:37:1c:ae:
                    59:52:d0:59:27:37:e4:1b:4b:11:a5:f8:56:8a:f8:
                    b5:d1:e9:3b:4c:2a:56:c2:79:da:af:59:ce:82:cf:
                    15:c9:32:28:23:0e:4f:79:83:5e:06:2c:5d:27:a4:
                    cf:b7:9f:e4:0b:7e:08:c7:9b:e3:ba:a5:49:49:59:
                    d9:e1:14:5b:14:9e:4c:23:c0:54:b3:24:4f:43:ff:
                    79:09:c8:b8:a2:98:52:6e:c7:fd:88:3d:65:a0:bb:
                    06:d8:c5:4a:8d:4a:7b:8f:fe:5a:c3:30:c7:06:08:
                    87:84:31:5a:eb:fd:c9:00:52:2e:49:5d:65:3c:e1:
                    f7:f4:65:3b:10:d4:c0:93:d9:fe:bc:42:1b:6f:79:
                    0f:c0:be:cc:c7:f2:a7:05:c8:91:f1:14:1d:fb:57:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8B:45:6D:D3:B1:82:56:3E:B4:12:BC:EF:5D:42:CE:18:DF:BF:57
            X509v3 Authority Key Identifier:
                keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:e4:5a:7f:77:e7:83:34:5c:5a:39:53:23:d7:14:a1:a4:
         1f:49:ef:df:7f:4c:8d:14:c7:e0:90:2b:c1:4c:ee:9c:d5:28:
         aa:1e:52:2c:6a:db:bc:cc:c9:d4:5d:56:99:06:5b:09:ad:d8:
         66:5e:b0:00:37:a9:30:c8:88:77:a9:bd:62:16:d4:a1:71:b0:
         2a:18:80:aa:2a:32:35:54:06:38:e2:3c:1a:31:f0:00:7a:eb:
         9f:e3:2d:6d:31:64:3f:5e:96:22:ff:2f:8e:36:12:a6:4c:52:
         47:73:cc:64:57:e6:c5:76:52:5f:90:1d:ce:e4:fa:df:c9:b8:
         4e:1d:5c:14:fc:d5:c6:b9:54:3f:92:d9:83:a6:45:ed:41:0c:
         95:50:00:a4:06:dd:e7:71:36:69:62:a2:06:97:25:f9:17:6e:
         1b:f1:2d:5e:b9:ba:a1:5b:e6:1a:e6:32:25:9b:41:64:92:e9:
         65:d1:b9:54:3a:11:5b:06:e2:6c:a7:30:41:88:c9:87:8f:80:
         49:49:40:fa:38:8b:fd:63:c8:fb:be:0e:e3:a5:4f:8c:57:0d:
         d7:17:b0:64:b9:57:97:eb:bd:e2:b2:81:0c:1d:39:4d:b5:29:
         27:8b:14:08:74:03:97:68:cd:9e:93:a5:33:5a:68:7d:77:c4:
         ae:93:77:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:55:28 2026 by rpki-client