Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
File:                     xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft (raw, json)
Hash identifier:          Mgogy2HMIuf8mTqLWSi5qIDR4r+L0xzo2+ixrUNzOj8=
Subject key identifier:   03:24:9C:7B:75:34:EF:E2:17:7E:EE:FA:95:8F:BB:E7:31:C8:45:E7
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Certificate issuer:       /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial:       019F72869DD9B9087B40F7703C045A5A3054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
Manifest number:          30
Signing time:             Sat 18 Jul 2026 00:00:52 +0000
Manifest this update:     Sat 18 Jul 2026 00:00:52 +0000
Manifest next update:     Sun 19 Jul 2026 00:00:52 +0000
Files and hashes:         1: 5ToKLF8AZKviRK8eveHz3y2eCJg.roa (hash: 7dZ4D04yJMNxgBoOD4N7srtpsPwEeXW0J8iTVYWeQ8s=)
                          2: O3Vhd8Uq2eyOQ_jBHy0CJlVwNZ8.roa (hash: TnvhV7uWoy8gIV9VJvw9Ua1JaBEXv8Nh3q4HaNov/Pk=)
                          3: YGhXb0KBwMPD0eKyFjo-wPSvg7A.roa (hash: QIjaZBuvHBXuD+BQAt0PNBm4499hR/AfSSSNvFa+qG0=)
                          4: nN73NbUGqukOpA94Jjdh8i2ig_E.roa (hash: v+MEZ6gE/2SzkGEIJerhbHxOQ1qEZGl9aNZd7P5DCZ8=)
                          5: q4wW-YXv4K_Q2__Fto1OvGJawss.roa (hash: jnTnq/LFPODqTvtlZrmgjvpj+t1fUdEjh4tvKg0JZjc=)
                          6: wqiyCuPlBwl0V2dv27OCD_ym6j8.roa (hash: cfx0UFR+LbEyoqcHZVCvxbww/uNktl+L5oOZlTwnYPo=)
                          7: xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl (hash: MAJeQ9YbTlSlyYDIGXBaVK+uGhHQd0rv5r7cFEJNj7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:86:9d:d9:b9:08:7b:40:f7:70:3c:04:5a:5a:30:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
        Validity
            Not Before: Jul 18 00:00:52 2026 GMT
            Not After : Jul 19 00:00:52 2026 GMT
        Subject: CN=03249c7b7534efe2177eeefa958fbbe731c845e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:27:e9:76:3c:9e:ac:36:ae:34:71:48:e0:
                    0f:aa:18:a0:f7:21:cc:64:b9:e9:fb:35:58:50:29:
                    b0:ca:17:05:fe:d9:af:a9:a5:9c:09:c5:d6:f0:8a:
                    28:99:c3:d7:90:b3:e5:b0:8f:50:47:be:b9:77:56:
                    94:78:9a:6e:c6:19:67:63:98:b5:ae:39:8a:a6:39:
                    d9:1d:ad:72:40:10:29:c0:ee:22:0c:f7:d7:5b:3b:
                    5c:3e:88:32:db:e1:3a:fb:5a:a0:2e:51:2c:ae:d4:
                    04:06:b3:6c:38:99:17:28:ad:d7:91:06:b2:11:e2:
                    0b:ba:ff:42:b7:ea:b4:b3:3b:31:da:33:66:97:73:
                    d8:4a:8d:86:77:c9:5e:21:09:d9:43:d7:70:94:10:
                    23:c0:99:09:b8:68:7d:e6:e8:6a:4a:fb:09:b9:30:
                    60:71:16:ea:b8:a2:f5:3f:59:80:1d:7b:c2:a5:4a:
                    2b:c1:da:e0:ce:d8:53:2c:7a:d7:d8:2b:83:68:72:
                    52:9c:51:ad:35:65:3f:71:b1:10:9d:b2:c6:d1:11:
                    86:3d:d1:bb:9d:c1:65:ec:84:82:39:3a:75:d3:b0:
                    e1:2f:53:40:5a:d2:37:65:a9:22:f1:7b:9a:7e:03:
                    3b:b1:3b:bb:a2:b6:da:f0:ef:8d:cb:ed:42:1a:0b:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:24:9C:7B:75:34:EF:E2:17:7E:EE:FA:95:8F:BB:E7:31:C8:45:E7
            X509v3 Authority Key Identifier:
                keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:81:0b:c6:dd:dd:29:1c:61:08:6a:af:54:fe:59:91:e0:
         aa:4c:99:f4:6d:32:4d:4a:5a:48:6b:c2:fa:ec:8f:02:53:43:
         70:97:6a:05:f8:e3:c0:22:5d:3e:0d:70:55:d9:61:b0:f6:2d:
         94:26:0e:0e:27:67:22:02:d2:6f:44:af:b0:fe:aa:2e:a3:bf:
         17:d8:8d:88:38:ce:32:02:ca:5e:f8:7c:0d:e5:a4:c1:d5:1d:
         24:bf:f6:e1:71:9f:76:e3:83:e9:99:22:81:7d:eb:48:8b:a7:
         6e:5b:af:1d:ea:c9:da:af:dd:b9:3c:6d:2b:ab:62:08:7f:c4:
         9f:6b:3a:b2:72:1c:7e:6d:7b:de:e2:77:57:4e:d3:3d:69:27:
         59:1a:a5:ea:48:37:e2:f3:85:23:13:0f:43:73:c5:1b:e1:a9:
         b9:4b:ca:00:1f:e4:a6:d2:d7:d9:79:53:3b:e4:b7:87:10:3f:
         06:08:31:a2:26:4d:71:f2:da:cb:71:11:42:7d:94:71:e7:9e:
         62:ee:b0:8d:ef:e7:f7:2a:c5:30:cb:98:61:4b:0a:d4:5a:f1:
         0f:2c:0e:5e:45:c3:5a:f9:f7:3a:9d:82:91:ee:75:15:ec:4f:
         17:9b:cc:b9:b3:0b:63:41:f4:86:51:23:8c:4c:71:0e:72:41:
         fd:27:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:57 2026 by rpki-client