Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File:                     xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier:          1Zp3wshgl355u53kPTJTvhD6d258lnpKFtaiVN3ua30=
Subject key identifier:   40:DE:27:4E:53:90:CA:A9:35:EC:A2:BB:E6:7A:E9:84:A4:84:0D:9A
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer:       /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial:       019FA1BBCC3BFBC008ECBD237349985F66D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number:          05B4
Signing time:             Mon 27 Jul 2026 04:01:06 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:06 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:06 +0000
Files and hashes:         1: KzL1NrpF1fIv1UZ-w1843U42opY.roa (hash: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM=)
                          2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: sdCKzmo3PZ0dbn5yPRIM9ans6GaOtEPAt/5vSg2es+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:cc:3b:fb:c0:08:ec:bd:23:73:49:98:5f:66:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
        Validity
            Not Before: Jul 27 04:01:06 2026 GMT
            Not After : Jul 28 04:01:06 2026 GMT
        Subject: CN=40de274e5390caa935eca2bbe67ae984a4840d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:da:06:93:e9:f4:52:80:e5:10:67:ee:e4:
                    ce:00:5a:ae:e3:b2:c6:0e:19:84:db:f3:43:a3:d1:
                    f6:d4:b3:cf:46:e8:60:5a:99:3f:85:39:0a:c3:37:
                    1f:b8:12:08:66:8c:ca:49:d7:0f:17:ae:ee:e7:f4:
                    d1:3e:a0:10:d4:a2:cd:35:c2:4f:63:b7:a5:fc:85:
                    da:57:eb:c8:93:f6:d9:47:65:33:32:12:55:01:5a:
                    2d:56:9f:34:45:10:c7:91:5b:6c:90:55:9a:3d:21:
                    f1:a3:f5:05:e4:4c:de:44:34:b7:be:5d:2a:27:82:
                    8f:59:6e:37:81:dc:39:67:90:9c:4d:56:cd:28:47:
                    a3:b5:2a:c3:84:52:6d:7c:57:41:d1:2b:ff:ed:88:
                    0b:aa:09:8b:c4:ab:4a:4a:09:a0:46:49:cc:c2:ac:
                    f0:43:de:f3:76:e8:ed:08:63:30:41:f2:ab:f5:20:
                    f1:a7:ae:e3:a1:a6:27:27:67:d9:e9:62:cb:bc:ff:
                    7d:8d:ca:1f:9c:61:d0:9b:f8:f0:5e:67:dd:38:cd:
                    c7:de:6b:ab:22:35:40:2d:d9:da:b4:f3:66:46:96:
                    95:22:05:ae:54:69:16:5b:8a:6f:c2:ca:90:df:4a:
                    17:9e:63:15:3c:a7:df:1b:99:2f:93:eb:68:fe:6f:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DE:27:4E:53:90:CA:A9:35:EC:A2:BB:E6:7A:E9:84:A4:84:0D:9A
            X509v3 Authority Key Identifier:
                keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:0e:cf:1a:45:34:eb:4c:32:f5:84:0f:43:0e:0d:94:63:
         9f:8a:86:b9:98:7f:61:fe:f4:cb:cc:3a:02:3c:60:1c:47:35:
         f8:37:6d:28:ee:18:97:d5:17:2c:36:0a:cc:76:b7:d5:a6:c9:
         4a:ac:0a:ba:55:1a:b7:84:e4:56:50:5f:d7:dc:cb:6b:03:cf:
         40:f0:4e:5b:f7:2c:48:3a:3d:f0:1a:45:e1:d7:35:ce:27:8e:
         77:c2:33:60:e0:23:9e:5f:af:58:b6:62:bc:c4:cb:0a:7f:05:
         e5:93:6f:13:bb:f8:a8:e8:92:ac:16:f8:d2:1f:93:e3:cc:bf:
         d2:6a:4f:ac:ac:ac:c7:f0:29:20:db:13:27:df:fe:03:cb:3d:
         c7:60:00:f6:b3:10:39:7f:fb:92:29:45:2a:d3:9f:db:f6:f4:
         d8:5f:6a:59:6d:5f:f9:6f:ac:c0:4a:9d:f4:16:2f:99:49:0e:
         05:7a:c8:d1:c2:a6:7e:4b:30:3c:c4:93:42:4a:c4:bc:b8:ea:
         cc:b1:c0:4a:79:5e:cb:94:bb:d4:97:fe:11:84:91:55:c9:5d:
         39:8e:29:cf:f6:dd:2d:70:ca:2e:37:77:fb:bd:52:5d:01:8f:
         37:e6:41:c3:ab:9a:4c:37:59:6a:c1:9d:49:d7:5d:ab:c6:8f:
         16:5c:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:07 2026 by rpki-client