Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File:                     X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier:          eZ9Zj1Womlxa+YvvUprzsJIk+6HkO5mxXKHpS/NFw4s=
Subject key identifier:   AA:DF:2A:DD:F2:57:FF:77:14:49:D2:40:E8:0F:2F:3E:5B:12:47:BA
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer:       /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial:       019CC786F1C9B4018B86D601F0D6A4B513AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number:          1873
Signing time:             Sat 07 Mar 2026 09:00:35 +0000
Manifest this update:     Sat 07 Mar 2026 09:00:35 +0000
Manifest next update:     Sun 08 Mar 2026 09:00:35 +0000
Files and hashes:         1: EScHO_hZczomCnoprBz9oYDooAM.roa (hash: 4MTuC1uLMwXcp3WrNDw8r2lfD4JCPG95ZOo//y7/h8o=)
                          2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: zH5+DVwit+cpzPh2ML1t/MpwlZUqQeJJVvg56FFoKoI=)
                          3: Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa (hash: fw38Poz9RGtWDLhkzBj9EkYC4z3B0EbYl1M6n6QZV4c=)
                          4: hzpr_u9unsG0Rewb6bfBUcdWDgs.roa (hash: WPtNLpfSEpgZKPMkhjXJCGT0MeFGLs8w0HKZG2+CsUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:86:f1:c9:b4:01:8b:86:d6:01:f0:d6:a4:b5:13:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
        Validity
            Not Before: Mar  7 09:00:35 2026 GMT
            Not After : Mar  8 09:00:35 2026 GMT
        Subject: CN=aadf2addf257ff771449d240e80f2f3e5b1247ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:d8:e7:17:80:06:ac:ea:90:49:54:74:88:
                    5f:19:6c:a9:b2:8c:63:5f:49:e5:f0:7d:0d:a9:25:
                    5d:41:d0:26:a1:21:b9:99:37:1c:24:2f:13:4f:bb:
                    c1:87:a6:2e:67:fe:5a:72:2b:bb:23:b1:58:08:bf:
                    d9:e6:85:55:38:a1:c3:a9:78:d4:70:88:7c:57:db:
                    95:f5:a6:4b:c3:91:af:a6:8d:97:58:59:78:98:59:
                    94:23:17:ad:88:37:24:a8:b6:a1:51:64:48:41:87:
                    9f:23:42:ce:c8:4e:4b:7e:91:26:dc:ba:c4:58:8c:
                    39:4d:f1:9c:1f:8c:d9:2a:46:51:6c:c2:ee:fb:78:
                    de:1d:c3:32:b8:52:ae:db:d4:74:75:76:74:48:db:
                    ab:61:4e:a1:a7:cc:57:15:5d:bc:99:1c:b1:f0:b0:
                    1b:74:90:1a:b2:eb:76:70:38:f0:13:04:b2:fd:00:
                    a1:1c:97:44:06:93:65:72:a5:cc:d8:c7:f4:05:62:
                    75:4f:b2:47:6d:d0:cb:74:56:7d:6b:e9:1f:4c:f9:
                    14:e3:d9:06:a6:1e:a2:25:ce:85:b0:24:61:b6:fc:
                    e2:59:24:37:40:68:84:4c:73:65:86:d9:e8:84:cf:
                    4d:f8:b3:b2:78:83:ab:12:30:0e:73:ff:cc:32:44:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:2A:DD:F2:57:FF:77:14:49:D2:40:E8:0F:2F:3E:5B:12:47:BA
            X509v3 Authority Key Identifier:
                keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3b:99:b6:4c:d2:6f:51:d1:87:1c:5f:c9:29:42:61:02:ed:
         7a:de:e3:27:51:7d:3e:f2:be:d6:db:0d:b6:8d:45:73:c7:d3:
         b9:5d:0e:73:6c:69:c5:d9:6b:8c:57:b2:80:52:e2:eb:14:99:
         7b:31:4d:32:bf:05:0a:a7:3f:d7:f5:82:ea:6d:2f:d6:dc:05:
         42:ef:a9:c2:83:d6:d4:5f:af:11:1d:70:56:45:91:9f:dc:a9:
         f8:66:a8:af:7d:8e:75:11:79:ec:ab:6e:e1:25:f5:bf:80:66:
         e8:c6:18:b6:4b:7d:8d:ae:f3:02:94:bb:08:5c:db:4f:ac:03:
         f3:69:4a:78:cb:c2:9b:71:c1:38:e0:cb:70:ac:48:c2:58:39:
         47:58:35:ab:10:ba:65:79:fc:eb:7d:e1:13:20:d8:08:a1:43:
         f1:b2:7e:1a:93:ef:51:3f:2c:13:10:2d:d5:c4:1d:a9:41:d5:
         0e:17:79:1e:8d:cf:86:dc:66:eb:7b:10:c6:6f:7c:d1:d9:ea:
         06:3e:1a:69:16:56:31:b8:e1:ac:4b:d3:d5:09:30:3b:15:83:
         4f:3e:a1:4d:7d:de:d4:43:e7:76:7f:db:10:bd:a5:3f:33:34:
         71:63:e7:72:8d:0d:0d:0a:15:2a:30:f6:02:78:b0:7d:1f:eb:
         21:b1:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:21:20 2026 by rpki-client