Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File:                     xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier:          wl/jt6D9Bmm5XGL47T6iax+nHVoT/jwYUZNcbS2X8gk=
Subject key identifier:   F0:E7:3C:11:19:DE:6D:66:DE:3D:02:3C:0A:EA:8C:FB:2E:AB:A8:54
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       019ECE60E3DD734D12C7C09566AF3BF5CCDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number:          0AD5
Signing time:             Tue 16 Jun 2026 03:01:56 +0000
Manifest this update:     Tue 16 Jun 2026 03:01:56 +0000
Manifest next update:     Wed 17 Jun 2026 03:01:56 +0000
Files and hashes:         1: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (hash: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4=)
                          2: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (hash: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4=)
                          3: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (hash: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc=)
                          4: eqTX003eyxyptc_5akwZQ-er_vM.roa (hash: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c=)
                          5: qBNprkht_3wALG390SrSxt6PGBw.roa (hash: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ=)
                          6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: 3NHRNOTh+cyWSMEiN+dZJ8SLR1FPXjRqRQVJQ4WH/K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 03:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ce:60:e3:dd:73:4d:12:c7:c0:95:66:af:3b:f5:cc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: Jun 16 03:01:56 2026 GMT
            Not After : Jun 17 03:01:56 2026 GMT
        Subject: CN=f0e73c1119de6d66de3d023c0aea8cfb2eaba854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:80:c3:82:9f:6d:e6:90:d3:29:fa:99:6e:
                    83:ef:93:ec:56:b1:1a:fc:c3:40:ed:7b:f5:be:d9:
                    9e:21:1c:5a:fc:65:2d:e2:0c:b6:24:08:e5:1e:d7:
                    39:e7:82:72:7f:73:7a:c8:05:c8:6e:40:58:51:fb:
                    1d:20:94:08:a4:f6:3f:28:ea:05:ff:38:a7:17:dc:
                    8d:63:af:1b:d3:69:80:5e:69:55:73:96:fa:d4:88:
                    30:f0:cc:c1:1f:14:ac:12:34:51:fb:81:3e:0b:64:
                    e6:42:14:e5:cd:cf:39:c5:4a:78:21:12:5e:72:8e:
                    83:7e:11:f7:d4:08:1d:44:9d:ca:0b:4b:fd:3d:e0:
                    bc:e2:da:0b:ec:94:4e:fb:13:4b:53:d7:e6:95:76:
                    4f:c0:6f:15:f3:75:c2:54:62:aa:df:3b:0b:1a:c5:
                    0f:d5:da:be:70:9e:4c:e2:7a:0a:e4:01:9b:75:e5:
                    b3:bc:c3:89:f4:df:e8:74:7d:43:d7:85:24:dd:b6:
                    e4:78:eb:03:d6:6e:3a:6a:85:15:e7:0e:52:10:08:
                    18:9d:26:6b:72:1e:28:cb:af:4f:94:f7:2e:6c:4e:
                    6b:ad:6e:8f:b7:5b:7b:f6:a2:96:1a:1a:5f:49:d1:
                    49:ce:e1:42:2e:50:0c:26:75:9a:5c:71:9a:0d:e6:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E7:3C:11:19:DE:6D:66:DE:3D:02:3C:0A:EA:8C:FB:2E:AB:A8:54
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:84:d1:c5:02:3b:fe:0d:7e:3d:5c:00:f4:d6:29:b4:01:c1:
         4d:2a:48:dd:6b:8b:92:c4:6a:15:18:d0:a1:ec:22:e9:27:32:
         29:ae:b1:fa:af:66:4f:33:eb:69:ea:70:ba:a9:70:99:e9:4d:
         a6:31:db:54:28:57:83:e9:3e:d5:e0:23:e9:44:be:72:1d:2c:
         db:b7:1a:e6:e5:33:2f:a7:d5:70:18:8e:b1:52:cb:9d:18:39:
         af:f9:a2:d1:80:4f:24:4b:f7:5b:87:d0:a2:90:be:b3:03:a9:
         7c:3e:97:1c:a9:81:17:22:25:f0:59:a3:0a:07:fc:54:3f:a4:
         0c:54:9d:98:c4:c5:d5:b3:0c:84:de:2e:5e:12:08:9a:5a:03:
         24:e1:cb:14:c8:c7:c4:9c:e4:45:9f:a1:48:3b:1c:e6:ab:c6:
         c3:95:74:46:39:b1:19:4f:5c:c0:05:b9:af:1b:f9:dc:25:19:
         e1:d8:95:95:90:96:29:1c:85:5c:c0:ef:eb:68:41:5d:b1:d3:
         c5:20:55:c3:41:45:65:73:93:c3:b9:0a:99:a6:8a:88:e9:28:
         e6:26:2a:84:7f:13:ef:42:c1:50:00:06:e6:2f:7d:da:18:16:
         f5:78:bb:49:ef:7b:70:c9:04:0c:8c:31:03:16:69:6f:5c:96:
         18:6b:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 10:05:22 2026 by rpki-client