Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
File:                     xnQBIsYDCziYVCPXx8Zo7y266Rw.mft (raw, json)
Hash identifier:          zTaXewhQR9w8oIns3vHXnrFtccw0hS19wKQce4+/xpQ=
Subject key identifier:   56:5D:0E:3E:03:E5:D4:5A:10:83:3A:13:88:DF:0A:B2:27:D8:30:A3
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Certificate issuer:       /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial:       019F81F9EFB059566E17D0107971CFB119F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
Manifest number:          38
Signing time:             Tue 21 Jul 2026 00:01:08 +0000
Manifest this update:     Tue 21 Jul 2026 00:01:08 +0000
Manifest next update:     Wed 22 Jul 2026 00:01:08 +0000
Files and hashes:         1: 60TOPVfsN5pgJZGd8in-8hmiCDQ.roa (hash: wz0fI5J0oyRKc9opLJ8t6/QjHmyjX9i2OHs+2QaT2hE=)
                          2: BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa (hash: qwCTOzoAcAD8dBvfuZm2kT8FIK+IVROmdCz+Tdiv4eY=)
                          3: IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa (hash: HqeQTODPPkmuOhSBibsyQNBnS1QebGdzSoSsvCtv9f0=)
                          4: IjYD_4iJnSpw60hSl6hLQ78-_Ak.roa (hash: I2O8TskpKH95NKy5gMH0QHO0yhDdq5oUwAlZ1jCSCf8=)
                          5: Mer11hQ15D-jrLouYRlyFBNsr9k.roa (hash: pFGvLBy0OAKz3OIzWOuN1/pjfeO7iP38PaUND1hqokk=)
                          6: ebSyejuxZjmc3dCqgBY87Hl9RjU.roa (hash: pq+UZYWSdr5GA1Ri1WMIM+xPCym7E3lqGvtGITBuoD0=)
                          7: xnQBIsYDCziYVCPXx8Zo7y266Rw.crl (hash: y+rl73oL0BeF9AF1aGRvVXt6PxR6aasEzxk62SOr6sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:f9:ef:b0:59:56:6e:17:d0:10:79:71:cf:b1:19:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
        Validity
            Not Before: Jul 21 00:01:08 2026 GMT
            Not After : Jul 22 00:01:08 2026 GMT
        Subject: CN=565d0e3e03e5d45a10833a1388df0ab227d830a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:ef:86:8e:4b:0b:8a:34:21:fc:48:e7:58:
                    d5:df:aa:77:a6:a5:2a:27:35:ee:36:61:84:69:5a:
                    21:71:55:94:92:c9:cc:0c:1b:95:c6:d1:28:4d:b7:
                    2b:c4:c5:56:0e:0f:30:3b:4f:67:00:5f:cf:7f:e7:
                    cc:5a:f2:7e:3e:52:cd:39:88:72:b7:e0:24:cc:f3:
                    bb:09:ee:c0:13:41:a5:68:17:33:1c:79:f6:43:9e:
                    c7:1c:74:3c:3e:1e:76:52:30:c2:1e:87:db:48:97:
                    aa:da:5b:63:f3:7f:12:17:ef:f0:86:f8:9c:e4:51:
                    36:42:62:12:48:10:9c:e7:5a:be:21:ed:58:8e:63:
                    02:b0:d3:e5:fa:b2:db:15:1d:03:b9:97:11:cf:1e:
                    e2:5f:ec:35:4c:e0:d0:9e:67:df:58:6d:ca:b8:bf:
                    dc:cf:7b:c1:30:cb:c3:59:c9:40:1f:06:bd:f0:a8:
                    42:db:d8:6e:51:51:9d:ea:82:ae:80:dd:8b:42:11:
                    7a:c7:6a:4b:16:32:ad:27:41:e9:92:f7:72:75:60:
                    08:51:e4:d8:5e:10:1f:57:bb:65:9c:3e:31:48:75:
                    52:e5:b6:49:42:a0:9d:25:07:c3:ff:6a:0b:1a:92:
                    cb:9d:81:3b:63:98:28:23:e8:8c:db:93:35:84:6f:
                    83:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5D:0E:3E:03:E5:D4:5A:10:83:3A:13:88:DF:0A:B2:27:D8:30:A3
            X509v3 Authority Key Identifier:
                keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a3:b4:39:c5:ef:62:71:8b:3e:48:82:30:d6:e9:9a:b3:6e:
         23:e2:a8:92:c0:fc:3a:b4:13:d8:8f:9d:cd:f2:03:cd:13:5d:
         63:28:52:be:4c:fa:25:4e:04:56:bf:72:d4:e1:58:0a:51:47:
         59:a3:8f:ea:4f:35:7f:9f:a5:fb:74:ea:52:26:c8:43:06:68:
         58:32:0f:f3:48:2e:c7:6a:f5:38:fc:e1:dc:39:44:3d:ab:a3:
         35:f4:70:9b:d9:b0:c3:99:a5:ef:a0:f2:0a:db:42:0a:45:98:
         76:53:25:a4:8b:48:d8:af:83:b8:40:1c:36:03:89:bf:bb:73:
         49:68:f0:5e:14:7c:35:0c:34:d8:9b:cd:d0:74:3c:d6:e5:a5:
         ab:40:e4:91:13:91:7f:01:1a:8e:90:40:ab:e1:1f:02:e6:3d:
         35:bd:cd:0b:7a:80:07:ba:7b:0c:89:9f:41:be:46:19:7e:57:
         13:2f:4b:62:9a:87:3d:7b:d8:a3:48:fd:e5:9e:90:b9:98:88:
         ba:b3:ac:0d:48:49:19:21:b7:0f:8c:ad:39:17:86:89:92:77:
         92:df:43:47:97:ec:4e:ca:6d:ab:09:08:ac:14:f8:e9:fa:04:
         4f:12:d0:fc:b2:20:0b:65:78:7d:5e:9d:d5:1d:4f:5c:1e:35:
         76:0d:bb:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+B+e+wWVZuF9AQeXHPsRnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NzQwMTIyYzYwMzBiMzg5ODU0MjNkN2M3YzY2OGVmMmRi
YWU5MWMwHhcNMjYwNzIxMDAwMTA4WhcNMjYwNzIyMDAwMTA4WjAzMTEwLwYDVQQD
Eyg1NjVkMGUzZTAzZTVkNDVhMTA4MzNhMTM4OGRmMGFiMjI3ZDgzMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/vvho5LC4o0IfxI51jV36p3pqUq
JzXuNmGEaVohcVWUksnMDBuVxtEoTbcrxMVWDg8wO09nAF/Pf+fMWvJ+PlLNOYhy
t+AkzPO7Ce7AE0GlaBczHHn2Q57HHHQ8Ph52UjDCHofbSJeq2ltj838SF+/whvic
5FE2QmISSBCc51q+Ie1YjmMCsNPl+rLbFR0DuZcRzx7iX+w1TODQnmffWG3KuL/c
z3vBMMvDWclAHwa98KhC29huUVGd6oKugN2LQhF6x2pLFjKtJ0HpkvdydWAIUeTY
XhAfV7tlnD4xSHVS5bZJQqCdJQfD/2oLGpLLnYE7Y5goI+iM25M1hG+DsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZdDj4D5dRaEIM6E4jfCrIn2DCjMB8GA1UdIwQY
MBaAFMZ0ASLGAws4mFQj18fGaO8tuukcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG5RQklzWURDemlZVkNQWHg4Wm83eTI2NlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt
ZDE5NmY5MjkxNzMyLzEveG5RQklzWURDemlZVkNQWHg4Wm83eTI2NlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy
LzEveG5RQklzWURDemlZVkNQWHg4Wm83eTI2NlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKO0OcXv
YnGLPkiCMNbpmrNuI+KoksD8OrQT2I+dzfIDzRNdYyhSvkz6JU4EVr9y1OFYClFH
WaOP6k81f5+l+3TqUibIQwZoWDIP80gux2r1OPzh3DlEPaujNfRwm9mww5ml76Dy
CttCCkWYdlMlpItI2K+DuEAcNgOJv7tzSWjwXhR8NQw02JvN0HQ81uWlq0DkkROR
fwEajpBAq+EfAuY9Nb3NC3qAB7p7DImfQb5GGX5XEy9LYpqHPXvYo0j95Z6QuZiI
urOsDUhJGSG3D4ytOReGiZJ3kt9DR5fsTsptqwkIrBT46foETxLQ/LIgC2V4fV6d
1R1PXB41dg271w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:11 2026 by rpki-client