Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File:                     xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier:          hfpP4FX/FTiL4P1Ke3h3nuox3cSmj/ryqlYttf/q0bQ=
Subject key identifier:   18:D8:FE:57:5D:20:18:07:9E:F5:E2:3F:99:88:B7:81:03:7D:B2:20
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer:       /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial:       019FA14E135D028C898CCA35A2EFCD696D78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number:          19D3
Signing time:             Mon 27 Jul 2026 02:01:16 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:16 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:16 +0000
Files and hashes:         1: 3cbC9vEeA_OfonVqz4nPVMIodpI.roa (hash: IGj7kwjiWovmIKkao+Fqphubf76yFz/hI4+0oTX7zU8=)
                          2: HRkMr8-Sqbu9H440GtqWqBMvrRY.roa (hash: u8W2AOx3ZvteH41TI9EbqMt/z7mq+kc+OzabEJ0zUCM=)
                          3: wemV0d9_X9NASzk5HBev3Xd67ss.roa (hash: xfH5MjrkqijIT96yucgZV5bkcjqDyV5OtrwCabRA68Q=)
                          4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: Qk6c7Jsbil0F0fMtlQxgmFDFShW0K4Jv2/m2rSqT+H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4e:13:5d:02:8c:89:8c:ca:35:a2:ef:cd:69:6d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
        Validity
            Not Before: Jul 27 02:01:16 2026 GMT
            Not After : Jul 28 02:01:16 2026 GMT
        Subject: CN=18d8fe575d2018079ef5e23f9988b781037db220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:83:5f:51:a2:99:29:5f:f1:70:2b:58:2e:
                    e8:a2:ee:45:85:2d:71:87:aa:8b:aa:72:26:8b:03:
                    09:76:ea:f4:68:3f:49:d7:51:c8:19:53:6a:0e:94:
                    1b:21:71:e2:88:90:e2:35:ab:8f:66:b3:5b:f0:4f:
                    7e:2b:c8:82:55:88:e1:37:8f:0c:5f:60:5a:7f:a4:
                    1d:11:c6:25:ae:4d:c0:12:fb:10:fe:e6:13:7b:54:
                    30:a6:87:98:15:c0:4b:5a:10:c3:24:ff:09:6a:a7:
                    18:33:8c:bc:66:10:25:ee:14:26:f0:5d:63:44:e7:
                    56:9d:7b:58:dd:fb:f0:66:55:24:3d:f9:04:26:5c:
                    9a:8e:bc:23:80:e0:4f:71:58:dc:92:81:83:a3:a2:
                    7e:b2:0c:fc:76:a4:f4:67:e0:39:ae:00:95:f4:72:
                    a6:c4:72:7b:1a:ab:dc:94:34:0d:aa:70:c5:8e:f8:
                    d7:6a:1d:3a:35:4a:79:38:52:bf:e3:04:a0:55:67:
                    cf:d7:91:52:56:b0:6e:d8:40:72:12:61:93:fb:1e:
                    40:d9:d2:31:4f:c8:6b:d4:0f:cd:66:7f:d3:60:a3:
                    0c:df:65:25:c3:f6:33:7c:49:61:80:d1:16:26:52:
                    07:12:79:d1:35:89:7b:3a:ba:21:4d:95:e7:21:05:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D8:FE:57:5D:20:18:07:9E:F5:E2:3F:99:88:B7:81:03:7D:B2:20
            X509v3 Authority Key Identifier:
                keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:38:a9:9b:28:3d:94:de:05:3d:e4:db:58:5d:9d:6a:53:48:
         be:cc:fb:d7:2d:c1:dd:9f:49:c0:25:04:65:58:b3:ee:a9:86:
         12:24:04:dd:58:7c:8c:6c:d7:4e:0d:74:05:5d:2e:5b:bf:88:
         c4:f7:86:5e:b5:4e:ba:f1:26:da:4a:3b:09:25:8b:36:96:d3:
         02:82:fc:0d:59:88:bc:05:f2:4f:85:d3:a8:13:a3:ec:ea:79:
         c0:57:e7:98:58:9b:88:92:39:75:1c:e5:3a:9b:b8:1e:87:34:
         fd:56:64:8d:22:4d:66:dc:86:74:94:e6:12:7b:62:4a:36:14:
         b6:3f:f0:ba:49:84:49:86:13:e1:9c:2c:7a:27:f6:60:94:b3:
         78:de:87:5c:2b:a8:3d:9b:b5:21:cc:e4:07:92:c5:d1:40:1f:
         4f:1d:84:5d:4b:d3:98:f6:64:cb:99:8d:d7:81:c3:56:47:32:
         82:ac:c4:d6:66:56:83:03:6d:4d:c8:d0:84:70:9b:2e:46:96:
         6c:1b:f5:d0:a8:4c:7a:48:cf:2c:f0:d0:21:a6:63:7e:c7:89:
         75:a2:2b:c8:ee:33:9e:e1:4b:da:c3:38:d3:bb:34:c2:72:21:
         92:2b:d7:7a:d7:1c:80:88:3b:ff:23:71:b3:a2:d8:d9:12:f7:
         a7:77:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:33:03 2026 by rpki-client