Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          ww2Zqex5j9AKhTAknVLvOhT2ligf/qEccDRQ5funmfk=
Subject key identifier:   5B:47:94:E8:B6:7E:78:91:7F:7D:63:79:4F:03:FF:45:F8:17:30:49
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019D1AFF865398D56F4848AAD0CE910EE8C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          04EF
Signing time:             Mon 23 Mar 2026 14:00:46 +0000
Manifest this update:     Mon 23 Mar 2026 14:00:46 +0000
Manifest next update:     Tue 24 Mar 2026 14:00:46 +0000
Files and hashes:         1: 13lETM7dYwgkukJoWApUFl8dJuI.roa (hash: cZO0/GICe69R1nGUBraIiKZbW7afS/3775vhW3rYR+4=)
                          2: EMqpNBcCNtehXNjtWHmz4Qx27pk.roa (hash: 8njOTJ/2VGv+q8vvCxeqjLAb7iHXNWrxTs90DA1iMqI=)
                          3: KVEesZy60JcmrCD9X0Zw8ckitl8.roa (hash: LDsra63f6peITAW/vE5Lx25+kAf2+irA29kJov0WXy0=)
                          4: Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa (hash: wkeGlAvS62MwRHYU8Z+cHP5CIoQV+KvyovxR/4O84h0=)
                          5: dYPKia158SIrrNF4l9j5f3SItUA.roa (hash: /mvbSwmPXlWJfBXD/fmkRZb24RyV5+E4SIG3bbAtRas=)
                          6: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: ZsCK94AlDFU1aRoNVHPv1t6HvKibCzlCsd44oA5nSbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Mar 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1a:ff:86:53:98:d5:6f:48:48:aa:d0:ce:91:0e:e8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Mar 23 14:00:46 2026 GMT
            Not After : Mar 24 14:00:46 2026 GMT
        Subject: CN=5b4794e8b67e78917f7d63794f03ff45f8173049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:48:82:ea:17:85:de:e5:48:ff:46:8f:bf:
                    29:e9:27:f6:66:fe:24:b2:65:50:45:dd:46:c7:63:
                    c6:31:6e:6f:d6:9b:e7:fc:fe:40:7f:2c:c6:54:bc:
                    c0:c7:d4:14:57:a9:c5:05:09:61:91:57:e3:c2:17:
                    1d:12:07:53:4c:14:08:8b:b5:0f:08:b4:38:ea:4f:
                    3b:40:b4:15:08:37:de:1d:8e:6c:9e:c4:af:d0:2f:
                    e7:66:2b:24:2f:4c:74:cf:de:ab:29:01:e0:35:e9:
                    87:4c:0d:4f:06:9f:cc:4f:a8:23:1a:16:f4:60:ac:
                    70:70:e0:23:4a:1b:42:2e:e1:52:ca:da:b8:6d:ab:
                    89:72:08:b4:bb:00:4a:ad:01:c9:00:91:96:51:a6:
                    6b:ea:b3:d9:77:62:ec:0d:b6:8f:b9:40:f9:3f:8b:
                    6b:31:71:00:3b:57:52:2e:f0:94:15:03:1d:40:e6:
                    8a:66:3b:72:e9:cc:fa:32:b6:40:4e:9a:36:c1:d7:
                    f5:68:6f:d7:13:09:db:54:e3:34:c8:38:9d:73:01:
                    77:ac:9a:17:77:f3:62:94:f0:7a:22:98:5f:a8:5a:
                    2c:d8:79:18:59:6e:2d:a7:08:b7:0d:4a:90:6c:86:
                    2c:1e:72:2a:bc:d6:db:e9:ee:f8:18:31:09:9a:d1:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:47:94:E8:B6:7E:78:91:7F:7D:63:79:4F:03:FF:45:F8:17:30:49
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:be:54:e3:96:2b:46:6f:b7:7c:b6:68:29:10:fe:54:f6:
         30:26:f9:f7:32:73:48:44:5d:e8:c7:16:30:55:50:82:a1:33:
         75:0c:8e:74:95:72:10:1c:df:7c:5e:a0:e0:81:b3:34:59:f3:
         e8:e5:c2:79:28:72:99:12:ad:2d:51:b8:48:59:ff:9a:13:ac:
         89:85:1d:e9:eb:3f:a0:bb:9d:b9:0f:7b:91:0e:79:14:42:09:
         25:7f:8b:b8:a0:91:10:c8:be:0f:57:b1:42:0b:41:10:2f:1d:
         30:10:f4:eb:78:37:34:0c:f0:db:d2:c3:07:52:50:a2:d9:ed:
         74:e7:0a:5a:88:05:f4:f4:80:9b:44:73:ec:7a:f7:40:ac:91:
         0e:8c:f3:5d:27:12:52:d3:d8:d4:b8:0b:b0:44:ea:75:e7:07:
         1a:d4:8e:80:a6:3f:83:05:24:a3:ce:2d:ea:ea:a1:f0:bb:53:
         2f:84:d6:6d:68:45:08:3c:97:ff:db:f7:56:79:0a:84:94:84:
         30:2c:a8:0d:cd:70:e0:5b:21:e1:03:8f:b8:ba:3c:1f:b3:85:
         72:9a:d5:1b:fd:ae:24:fe:cc:fc:b7:03:ee:a0:20:fb:45:9a:
         b2:68:fd:d5:06:e0:4c:f0:6b:3e:3a:1c:59:66:c5:cd:f6:da:
         a5:67:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:48:12 2026 by rpki-client