Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
File:                     X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json)
Hash identifier:          PDDDRwlmLHO0aUxLx4akGMHPurEOH63P8u5gPO3gsTc=
Subject key identifier:   D8:02:FA:BC:12:10:16:05:5B:97:FA:0D:D0:FF:C7:7F:A1:D8:65:84
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Certificate issuer:       /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial:       019FF6EBF496D4882C2A185B3C6F9339663C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
Manifest number:          02A4
Signing time:             Wed 12 Aug 2026 17:01:26 +0000
Manifest this update:     Wed 12 Aug 2026 17:01:26 +0000
Manifest next update:     Thu 13 Aug 2026 17:01:26 +0000
Files and hashes:         1: 5uXpm1mK2Lkx_hom9YzVY6h3X8g.roa (hash: Cn3egeW7Svzjn6B2DztmCBuQlzu52DOzJj+3bmdAQVc=)
                          2: 6PCZUJB3ipwVXLiyKcyJrFQu4wQ.roa (hash: m4ynyhKu4YCsiRrg6pHmEytuHr7lJuhn9fuEsyhPlJc=)
                          3: UgHcaBSwg0Iexf-S3Ppu9ltxOdY.roa (hash: uwkGrsjIen3tBe54+2c/5zWUfceUkyrc4GB8+Uk2gSA=)
                          4: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: uEmDKOmMywprv9S7/Pps7BnXafsAiA6QSN5EIQWJ1mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:eb:f4:96:d4:88:2c:2a:18:5b:3c:6f:93:39:66:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
        Validity
            Not Before: Aug 12 17:01:26 2026 GMT
            Not After : Aug 13 17:01:26 2026 GMT
        Subject: CN=d802fabc121016055b97fa0dd0ffc77fa1d86584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f5:bb:35:d2:99:af:f1:80:5c:f7:ae:34:e2:
                    73:fa:70:9b:a0:f0:04:3e:b2:7a:46:67:7f:5e:37:
                    4f:9a:84:27:1d:e3:73:ff:2d:f5:80:62:28:aa:7e:
                    54:91:72:ce:7d:d0:39:10:0c:90:a2:2b:3c:4f:25:
                    a0:8e:ba:92:8a:b4:75:e0:cb:a1:09:65:bc:e9:6a:
                    57:5f:0b:a3:10:2a:9e:7b:24:46:86:9e:91:cf:27:
                    e5:8d:10:e7:89:07:07:fb:c7:f6:af:30:d9:36:b6:
                    18:8a:ca:f2:06:06:a7:4a:46:1d:d7:11:e1:58:eb:
                    df:1f:7e:4f:17:88:28:d8:cd:99:44:eb:e6:9d:98:
                    f1:f3:4c:c4:a6:e9:39:ff:ae:66:1c:81:bf:b7:c2:
                    e9:61:44:52:eb:76:9f:7f:0b:6a:7d:60:4c:2d:01:
                    8f:a1:04:fb:1b:ec:98:4e:46:a7:d7:69:bc:16:da:
                    fa:7f:f7:99:2e:86:58:2b:9c:fe:74:d2:1a:af:57:
                    0a:7e:4e:fc:79:f6:82:d5:06:8b:cf:4e:0a:35:92:
                    b8:d6:34:dd:14:8f:da:16:5e:f1:0c:be:f7:d6:e8:
                    4b:60:a1:a0:4f:eb:4c:ed:bc:3a:91:bb:1f:c4:ac:
                    39:a9:8c:08:7d:3e:ed:3e:ab:83:cd:ba:ae:35:40:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:02:FA:BC:12:10:16:05:5B:97:FA:0D:D0:FF:C7:7F:A1:D8:65:84
            X509v3 Authority Key Identifier:
                keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:75:62:8c:33:06:53:6b:c5:c4:83:85:12:56:e1:58:72:53:
         95:ef:0e:16:9f:48:7d:50:c2:36:3f:67:7f:68:ed:ce:db:54:
         0b:12:a7:f6:cc:72:d4:b8:ba:c3:6e:e9:e8:bf:2a:df:6b:13:
         ee:7a:25:58:c5:15:b5:87:f0:22:02:8c:13:3b:fe:fe:48:08:
         f8:2e:b8:aa:2d:9a:66:54:a7:22:0d:6b:6a:81:11:2c:ac:63:
         64:13:c4:3c:5e:6a:ac:42:5d:a4:bf:ca:57:dc:45:87:8a:d9:
         14:d3:de:f6:f7:23:d5:c7:2f:6e:c2:e5:0d:10:69:35:0f:1c:
         01:8e:54:08:02:eb:0a:4d:32:e1:b6:ca:bb:2b:45:a0:54:37:
         56:b6:d6:7b:37:4b:d0:10:ae:87:b6:05:13:83:31:e7:ec:17:
         ca:b9:5c:f6:17:71:50:0e:fc:57:df:ef:48:be:b2:33:ac:24:
         5c:28:2a:70:f6:c0:33:ea:45:e2:9c:6b:4f:a4:7c:cb:3b:e7:
         35:b4:08:b5:e5:08:03:5b:ea:4c:d2:d5:c2:ff:45:76:2e:72:
         9c:c4:82:1a:15:1d:17:62:a1:e8:59:29:59:58:9a:50:d6:05:
         87:89:ab:48:89:c0:53:a9:ef:ac:de:96:90:c0:51:ce:ef:be:
         bb:69:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:08:17 2026 by rpki-client