Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File:                     xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier:          DY3TzMNZWnFp+1VOr51oT9rjR92kchaSEYgY4RR3eY8=
Subject key identifier:   91:3B:CD:F6:0A:DE:37:84:AB:49:E0:0D:7A:6A:55:B7:25:31:06:A9
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       019CE7B7A0D3F0B0282A8C9051CC55C3FD77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number:          09D9
Signing time:             Fri 13 Mar 2026 15:01:36 +0000
Manifest this update:     Fri 13 Mar 2026 15:01:36 +0000
Manifest next update:     Sat 14 Mar 2026 15:01:36 +0000
Files and hashes:         1: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (hash: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4=)
                          2: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (hash: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4=)
                          3: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (hash: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc=)
                          4: eqTX003eyxyptc_5akwZQ-er_vM.roa (hash: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c=)
                          5: qBNprkht_3wALG390SrSxt6PGBw.roa (hash: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ=)
                          6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: 5xjtJ3UQQirL+6piquGobmyGUWC1DXgZd6sGFD+srmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 15:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:b7:a0:d3:f0:b0:28:2a:8c:90:51:cc:55:c3:fd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: Mar 13 15:01:36 2026 GMT
            Not After : Mar 14 15:01:36 2026 GMT
        Subject: CN=913bcdf60ade3784ab49e00d7a6a55b7253106a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:2b:7a:71:6f:f8:aa:22:24:fc:f2:7d:71:
                    01:f4:61:50:3d:78:93:a2:3b:6a:e9:41:7f:12:d0:
                    a2:16:fc:4f:a0:d1:f6:95:9c:82:83:c1:5f:4b:f4:
                    ae:64:65:1a:d7:f9:ae:eb:1f:83:76:27:b8:d3:65:
                    c3:f1:2e:ac:d3:8a:93:a1:5d:a3:e4:98:25:27:94:
                    8b:48:7e:5c:7a:12:2c:e8:4c:99:83:c4:27:03:7e:
                    e3:9b:49:22:66:78:4a:03:7d:7e:5d:4f:27:ef:d9:
                    2d:c0:a6:21:fa:3c:c2:40:83:c7:ab:49:1b:88:4e:
                    c5:dc:c8:f3:36:1b:fb:fb:d3:84:30:f5:d0:3d:d8:
                    40:57:50:73:e5:43:61:0d:a2:b6:c8:c1:1d:55:5f:
                    bf:c3:62:35:9a:2c:95:e7:c2:0d:af:6f:ca:9b:dd:
                    d1:4f:0a:be:df:c7:64:b3:df:f1:27:c1:da:14:56:
                    bb:58:12:37:6d:e6:6a:a1:10:59:d7:6d:fb:fb:af:
                    58:ff:df:95:7e:9a:27:61:4f:cc:3c:7f:3f:8d:86:
                    9a:57:bd:ca:89:a8:d1:05:8d:c8:63:97:98:51:dd:
                    3c:c9:95:5e:55:ee:4f:d3:91:31:c5:7d:e8:0a:04:
                    fb:58:62:aa:5b:30:c6:ad:6f:d6:d3:f6:1c:38:a4:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3B:CD:F6:0A:DE:37:84:AB:49:E0:0D:7A:6A:55:B7:25:31:06:A9
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e2:4e:c0:43:d8:59:b8:fa:98:01:37:c8:51:ad:f2:88:37:
         58:fd:fb:a6:77:a8:ee:cc:ba:d2:1b:6c:eb:b2:b5:fb:96:ad:
         5c:37:c8:e8:32:22:cb:ae:16:41:ff:e8:c7:6d:d3:ef:64:36:
         44:31:42:c5:5a:0d:f1:5c:fb:a8:52:f1:47:ed:0a:bc:ed:48:
         de:0f:1b:d4:27:c2:f4:fd:5e:6b:13:a9:a8:8c:33:a0:3f:1e:
         5e:9f:36:2b:67:d7:1d:57:26:b1:55:b3:7a:f6:16:f9:68:9b:
         ec:7d:df:99:4d:d1:5b:47:31:a8:80:76:25:d9:31:bc:20:70:
         c2:bd:0c:4a:86:9e:61:f8:c9:c7:16:38:14:0b:4f:1b:e5:e1:
         bd:ca:e7:a5:93:01:37:c8:46:84:f6:1d:2c:55:f4:fa:ba:f3:
         8c:18:46:cf:a1:f6:4d:dc:e2:5d:2f:7f:f5:79:af:68:dd:2d:
         ef:dd:bd:8d:26:62:17:51:87:f4:b3:e4:ac:75:0b:d4:29:bd:
         f4:02:c0:c9:85:cc:ce:76:19:08:37:84:72:12:a6:d5:55:12:
         7f:ef:ae:90:57:c0:58:56:58:b5:e4:6e:68:92:f2:a8:20:6f:
         2b:6c:f5:c7:56:72:75:ec:a7:d1:d5:63:c6:35:72:b9:76:24:
         61:a9:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:39:07 2026 by rpki-client