Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          OIRAJvxdsF5s+1fidilcc3jr4ulKARCoW22t3Cadl7A=
Subject key identifier:   86:A8:7D:C0:BC:AF:24:87:2F:F6:87:11:CE:EC:21:BC:63:4B:E4:9F
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       019E0098781EBE78B24A5F78830615074256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          09C0
Signing time:             Thu 07 May 2026 04:00:52 +0000
Manifest this update:     Thu 07 May 2026 04:00:52 +0000
Manifest next update:     Fri 08 May 2026 04:00:52 +0000
Files and hashes:         1: HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa (hash: a/gPxO3vEuqfCp70KpDQq2lcCKuUQZuTopPVCy8m4LA=)
                          2: PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa (hash: 7fFDeno1llfmG5xw2+UhwO2bFxAsVyxjb17vnpRCoYg=)
                          3: PfU-pIQUztpuCpjeK4PA6M387xY.roa (hash: IxKP4N/sSJx4IV1KMlr0VGqT7A6A6/R7M00aHJnoW/w=)
                          4: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: gq5TwD9m1PnKLsLcRP2IhtjHIFpNx86ZF2PeJShSPV8=)
                          5: _BWqmK6mrfBuguQtqF75TBClGMs.roa (hash: uZ7P5xdR1guWm1uC7RQ3bBaQOHT/pKp/etCCjtf5eTs=)
                          6: mUrwLBSn-6OABt-a8CWyid9HQT0.roa (hash: QLR5JTAjIM5uhR1YB984cbq/Umms9s9InAJMrrGnnxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:00:98:78:1e:be:78:b2:4a:5f:78:83:06:15:07:42:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: May  7 04:00:52 2026 GMT
            Not After : May  8 04:00:52 2026 GMT
        Subject: CN=86a87dc0bcaf24872ff68711ceec21bc634be49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:c2:f8:3f:4c:d8:83:85:58:8f:72:5c:3c:
                    58:7a:26:04:16:3b:a4:9e:51:94:1d:34:67:80:83:
                    ec:7c:b2:22:10:f9:b5:0e:63:e7:49:28:ec:a1:4e:
                    f5:e2:e8:4c:9e:19:5b:63:37:85:b7:e6:97:37:33:
                    96:bf:c7:98:53:96:c3:32:ed:76:e5:55:83:cc:61:
                    09:be:2b:61:e6:85:cd:3b:5b:d7:50:76:4c:8e:c4:
                    1c:d4:4c:d3:36:d0:aa:ec:09:a5:13:a5:fd:de:de:
                    a1:34:99:e1:d9:5f:a9:23:26:7d:74:0a:d2:b2:a7:
                    9b:ab:e7:25:4f:3f:03:8d:af:09:2d:0a:17:61:ad:
                    66:1e:8d:b6:7c:27:c2:ef:d9:6a:6b:0d:c6:40:83:
                    79:c7:eb:b0:5e:a3:0d:cf:e6:be:3d:f5:d2:0c:56:
                    af:85:c5:3e:60:e6:14:56:a0:70:c1:e5:15:6c:00:
                    8f:3a:6a:7a:b0:51:bc:13:28:00:2b:5d:3d:c8:4d:
                    4e:29:c1:b0:bb:71:39:14:ae:7d:c9:60:ad:85:79:
                    ff:00:e6:ea:5f:ea:5a:d0:de:ca:eb:f0:d8:08:0e:
                    d0:3f:7a:30:28:db:4d:b0:79:ec:73:6b:cc:5a:d4:
                    e2:3e:67:c2:20:5f:f3:ad:31:d9:3b:6b:2d:95:f3:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:7D:C0:BC:AF:24:87:2F:F6:87:11:CE:EC:21:BC:63:4B:E4:9F
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fb:15:29:37:1f:7a:79:0c:bb:d6:82:c8:5a:f7:e8:6d:fb:
         e4:ad:6e:26:e3:a0:c9:28:6c:c9:64:85:e5:0d:ee:65:9d:c1:
         2e:dc:c1:77:9a:2d:5c:72:d5:ce:d0:54:63:23:be:ae:81:0a:
         85:a7:8c:47:ee:3c:2a:c6:44:f4:d4:82:26:38:dd:c3:e9:2d:
         d3:90:45:13:6b:e5:e4:fe:9e:0b:ec:d0:ab:81:f3:e5:90:00:
         26:6a:8b:f9:b6:28:68:c2:b4:7b:54:09:ba:1a:e9:3d:17:5f:
         0d:ae:76:ff:32:78:2e:c6:c9:08:a7:c3:48:e2:85:d4:2c:cb:
         0e:fc:48:5f:4c:58:97:a9:ec:48:95:4e:e9:c7:d0:fe:f3:6d:
         f4:d3:43:17:c2:d5:5d:32:a6:2b:c4:13:92:f9:c9:73:8c:a0:
         e3:29:97:d3:97:99:04:57:9a:32:2c:e7:9e:b0:a0:31:48:f5:
         3a:84:e7:cd:7d:83:74:a8:95:23:28:05:3b:e2:3e:bb:0b:c4:
         52:7d:2b:25:fd:1c:fe:0e:69:9f:09:02:d8:b6:8f:0a:ed:1c:
         96:0d:cd:79:b3:a5:5f:e1:1b:6f:95:6d:2b:25:01:8b:37:eb:
         e6:d0:05:4d:cf:50:4a:aa:7b:c5:b9:0c:a6:97:ec:bc:e2:a5:
         4f:45:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 09:01:30 2026 by rpki-client