Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File:                     XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier:          sz+bFnC6WHIdUKkwUOFKO8Ej0eEJhTeIT2n0FqgX6tU=
Subject key identifier:   06:56:67:72:29:D7:48:DA:4A:97:41:4B:B6:F0:AD:46:95:7F:46:CB
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer:       /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial:       019E307352D611A817C7F61CB9DA611177F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number:          1784
Signing time:             Sat 16 May 2026 11:02:04 +0000
Manifest this update:     Sat 16 May 2026 11:02:04 +0000
Manifest next update:     Sun 17 May 2026 11:02:04 +0000
Files and hashes:         1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=)
                          2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=)
                          3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: c0sKym1mg+6b0srIleg9k3ruz4ujPKikRScfF1X/n1I=)
                          4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:52:d6:11:a8:17:c7:f6:1c:b9:da:61:11:77:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
        Validity
            Not Before: May 16 11:02:04 2026 GMT
            Not After : May 17 11:02:04 2026 GMT
        Subject: CN=0656677229d748da4a97414bb6f0ad46957f46cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:0e:71:1c:86:18:15:0f:c7:47:71:25:ec:
                    d9:99:13:2a:ad:fd:02:9d:52:c4:e9:8e:f9:ed:29:
                    5f:43:50:78:1e:83:ef:19:1d:78:fb:bf:56:e2:3d:
                    c6:66:83:71:a9:d0:3d:4d:8b:1e:3c:ee:49:ee:54:
                    90:76:b1:8f:5f:81:4b:a7:b7:6b:a5:c7:17:45:3f:
                    6d:e8:d3:dc:96:6a:0f:a6:c1:fb:7d:49:b5:4b:ad:
                    24:76:87:d8:57:87:fb:d3:d0:fd:c6:ca:94:61:a4:
                    73:d0:bb:3b:8e:81:e6:45:1d:bc:55:da:9b:da:78:
                    47:bf:e1:ce:a9:50:76:54:0d:42:b0:9b:9f:0b:4a:
                    00:b6:43:b4:88:b6:c2:53:b5:ac:f7:44:5c:8f:01:
                    50:05:58:7d:c2:50:74:da:0e:de:24:06:19:9e:fc:
                    77:48:7f:06:5e:4c:92:5f:53:41:4e:32:f6:b1:a4:
                    d3:53:2a:5e:9e:76:10:bc:83:fc:57:f0:a6:a3:e2:
                    b3:4f:c7:95:e9:6b:f4:d3:00:84:2f:1e:78:60:91:
                    4f:ad:d5:e5:68:af:eb:33:59:20:98:c6:2d:fd:2e:
                    eb:f3:f2:8c:00:9e:f8:0d:fb:8c:e1:fa:a6:99:c9:
                    32:c9:8d:84:d7:38:c9:09:d0:71:37:6b:ba:dc:76:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:56:67:72:29:D7:48:DA:4A:97:41:4B:B6:F0:AD:46:95:7F:46:CB
            X509v3 Authority Key Identifier:
                keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:5a:41:21:3a:76:e1:c7:67:14:ab:cb:47:18:32:76:04:
         2a:4d:cc:0d:f0:d9:cc:a9:c8:24:d3:8f:0b:d9:51:49:a1:c9:
         48:e0:7a:9d:2a:28:3a:68:80:07:dc:3b:b6:9d:4e:b6:5c:92:
         00:8c:79:4a:16:43:87:3d:ca:8d:f8:a4:a1:c8:38:d6:f3:57:
         33:91:6b:5d:32:cb:53:c4:fc:1d:d4:ae:cf:31:b7:86:37:d8:
         0a:16:31:8c:6c:6e:3a:c9:16:08:6f:c8:5b:c5:d1:fe:80:c1:
         3b:f5:90:f4:0c:02:84:d9:4a:49:79:d3:11:f0:aa:ac:07:4a:
         51:95:75:97:b4:65:8d:7c:ce:f5:60:d6:a6:a6:91:11:c1:ae:
         c2:78:a8:fd:5f:01:57:a0:ad:0e:ab:60:0e:0c:c5:a5:53:ad:
         4d:54:36:11:f4:fa:f2:10:c2:f0:6e:96:3f:73:aa:3e:d1:43:
         d0:b3:66:1d:ae:8c:f9:a6:ff:d4:69:dd:79:8b:79:9a:3c:c3:
         93:0f:40:fe:04:d7:99:47:f7:11:4a:0a:f7:09:6f:60:21:58:
         b6:ab:13:68:6b:ac:ff:5a:c1:19:a0:d1:7b:97:83:56:be:63:
         9f:f4:17:23:85:ad:96:b5:7c:7e:ab:e9:40:88:c7:0b:2f:0a:
         8a:32:9e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:31 2026 by rpki-client