Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File:                     xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier:          m0peXhgNTRIgmHJ8Kr28oU3bvpgRZDORdJJbxy+INdY=
Subject key identifier:   3C:4E:C9:2D:2A:E8:B2:29:8C:5C:2C:5C:F1:FE:F4:11:55:D2:ED:1D
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       019DD19AE42E1553E126E9752D79FC4CB877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number:          18E7
Signing time:             Tue 28 Apr 2026 01:01:22 +0000
Manifest this update:     Tue 28 Apr 2026 01:01:22 +0000
Manifest next update:     Wed 29 Apr 2026 01:01:22 +0000
Files and hashes:         1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
                          2: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
                          3: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
                          4: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
                          5: jG6aepPboty3bhwMFNAy4j7PZLg.roa (hash: RpAm5WQYOjhIalUzLd+dhvF8WQ0tVlQHMoKb6uwbMJc=)
                          6: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (hash: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ=)
                          7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: pnEKuiugTcwp7i/DMNB1b3jE+1eodleMU5m42ndrKdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d1:9a:e4:2e:15:53:e1:26:e9:75:2d:79:fc:4c:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Apr 28 01:01:22 2026 GMT
            Not After : Apr 29 01:01:22 2026 GMT
        Subject: CN=3c4ec92d2ae8b2298c5c2c5cf1fef41155d2ed1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:1f:19:2e:ca:84:b7:91:6b:35:1a:8b:74:
                    61:28:2c:9f:b3:b5:fd:fb:19:df:3e:44:ec:0b:85:
                    81:72:8c:c7:9c:8a:3a:bd:16:b1:11:a7:41:12:4a:
                    f2:3b:bb:17:38:92:7d:30:0b:75:72:d0:31:31:a1:
                    4a:08:06:71:15:e4:34:bc:18:89:eb:8e:60:73:90:
                    01:6c:7a:33:5f:e1:33:bf:4a:ec:f0:98:88:56:4c:
                    56:7b:dc:4b:a5:52:60:06:29:69:7a:0e:a0:92:d5:
                    60:51:b6:1c:4a:1d:74:87:f2:76:80:9b:da:05:de:
                    d3:97:c1:26:3c:e1:1a:98:e1:a0:dc:c1:39:14:e9:
                    ff:7e:4d:fd:01:26:ae:a5:6e:28:d7:d9:91:ee:94:
                    b6:35:f0:40:53:4a:52:c8:e1:7d:f3:b1:ca:b3:18:
                    fd:27:21:48:29:1d:72:3b:3c:67:9a:28:7f:c2:5f:
                    52:f2:99:da:f8:15:bc:3c:34:5e:3a:55:36:29:14:
                    c4:2f:e5:10:14:59:4c:ca:6a:d6:3f:9e:c3:df:78:
                    c9:2f:2c:41:45:c0:b7:1e:47:c5:e5:0a:a0:2c:93:
                    ce:14:ee:38:26:99:da:9f:4e:ec:95:02:34:a0:f7:
                    16:49:74:ac:24:b4:ac:c5:04:f4:91:a8:6a:76:62:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4E:C9:2D:2A:E8:B2:29:8C:5C:2C:5C:F1:FE:F4:11:55:D2:ED:1D
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:46:9e:9b:5e:b2:dd:03:45:15:c5:58:28:66:19:6c:b1:53:
         ef:d0:30:b9:f2:28:51:d8:24:e5:fb:7c:cd:53:14:f9:9e:88:
         c2:fc:54:a8:ce:a6:0d:b2:d2:d6:d7:7a:87:e2:53:0c:29:25:
         c0:13:23:82:ef:ba:2c:24:70:e3:99:5e:7a:44:a6:16:57:17:
         69:fd:43:5f:ef:1b:1e:bc:95:73:b8:81:53:82:54:ff:26:ec:
         02:75:c7:6e:98:52:98:39:c6:75:7a:ac:76:45:f9:b2:52:99:
         e3:f9:c6:1c:6d:f9:07:05:b4:c0:9d:80:c7:b7:ce:f0:51:74:
         90:b4:3a:70:e8:91:85:e1:4e:34:38:5f:02:34:95:44:20:d2:
         8c:0b:9d:d5:ca:f6:27:09:75:01:a1:ca:bd:f3:71:d8:7b:d3:
         a2:35:74:fd:75:cb:a1:59:4d:d5:6c:3a:b9:d9:be:08:36:89:
         1e:54:5a:f9:73:2b:4e:50:b9:20:de:32:39:9a:96:58:48:49:
         6c:e4:70:eb:c7:fc:a2:6f:24:03:5f:4c:55:8c:88:9f:56:a4:
         19:a8:af:87:5f:4c:39:55:88:d8:d3:d8:b1:b3:7a:22:d2:18:
         f8:24:b4:8c:08:2a:4e:61:e1:ae:77:c2:e3:00:bd:5c:d7:94:
         da:d4:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:43 2026 by rpki-client