Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File:                     XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier:          GgYeAzwOxIfx57jjZRd8Vct/C4Mjt4WYGAOJHb6Bzuk=
Subject key identifier:   A5:C7:85:9E:10:CF:4F:38:6D:10:CA:F1:EA:F9:26:9D:3E:7D:D5:29
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer:       /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial:       01A00326831C7141432EBDBFD145AEB307DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number:          1900
Signing time:             Sat 15 Aug 2026 02:00:50 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:50 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:50 +0000
Files and hashes:         1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: mKDfdydtvffuvx37CkF6F6fOWrGlMJbNRChLW7uLwkE=)
                          2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:83:1c:71:41:43:2e:bd:bf:d1:45:ae:b3:07:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
        Validity
            Not Before: Aug 15 02:00:50 2026 GMT
            Not After : Aug 16 02:00:50 2026 GMT
        Subject: CN=a5c7859e10cf4f386d10caf1eaf9269d3e7dd529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:8a:69:45:4a:30:ac:6e:3e:22:46:e2:08:
                    fc:ee:bb:e9:f6:83:55:2b:14:46:d1:b4:0b:9b:16:
                    a4:38:59:94:42:90:13:d9:d1:1e:d2:b7:ce:69:ed:
                    9b:1a:a6:cd:92:ee:7f:52:93:86:19:54:5c:8e:67:
                    0c:06:35:13:c9:bd:40:46:94:cb:f7:31:ac:87:4f:
                    91:0c:b6:3a:8a:a5:b8:75:90:0f:bb:cd:45:ef:9d:
                    44:14:08:c8:6d:9a:31:e9:3a:e6:d8:4d:5b:25:d6:
                    54:59:b6:8d:01:c5:6c:40:9f:0e:52:43:ef:ec:72:
                    da:3b:f0:b7:43:7d:ce:d4:96:9b:dd:4e:63:61:1d:
                    02:29:38:55:29:7b:3f:c3:5e:f5:79:51:3c:f7:13:
                    0b:63:03:f1:d2:9a:90:bf:01:fc:98:72:7c:dc:b0:
                    86:be:a5:36:d4:ac:d1:ea:43:15:6c:04:c5:c2:09:
                    c8:8d:d8:98:01:70:07:4d:40:5c:aa:a2:2c:f1:8c:
                    6b:75:89:56:30:7f:13:d6:63:c0:30:f4:04:21:7c:
                    c2:27:43:40:ee:d3:66:87:dc:e2:7c:ee:f3:68:80:
                    f5:7f:25:e8:06:ab:0c:d7:6e:2b:9d:2d:7d:1a:6a:
                    0a:a5:dc:1c:30:f5:04:cf:84:63:9a:a0:12:36:f3:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:85:9E:10:CF:4F:38:6D:10:CA:F1:EA:F9:26:9D:3E:7D:D5:29
            X509v3 Authority Key Identifier:
                keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:49:cb:0b:90:2d:75:2c:22:26:54:5e:51:63:d1:1a:84:00:
         c4:3c:f4:f7:0b:db:f9:a7:75:ce:ff:e7:57:ee:8a:22:b4:e0:
         39:53:d9:51:92:9c:68:f8:9c:f7:7a:31:14:71:68:b4:2a:9d:
         0c:90:48:01:8a:b5:8f:37:07:c8:fe:e6:f1:11:ab:f5:36:77:
         25:b5:ff:c6:da:09:ef:d4:5d:a1:81:60:77:df:a4:b4:47:58:
         de:13:26:08:5a:f4:5a:77:86:92:79:b1:43:e6:59:89:4f:da:
         c5:29:85:20:60:9b:b2:65:87:2c:7a:30:f7:69:19:36:81:a4:
         28:19:7f:db:3c:5a:48:8c:f6:93:3f:93:10:6b:ab:5d:5e:08:
         31:5a:e7:e3:f7:c0:e0:ff:90:de:03:3f:cb:ec:13:38:f8:0e:
         71:2b:71:8e:bf:f4:8f:e0:4a:80:37:84:69:f8:d8:4b:f0:22:
         aa:31:ef:3f:82:c7:1b:55:7b:f4:99:d0:0c:eb:db:2f:76:d0:
         c9:86:33:87:04:19:58:ab:2e:58:09:0e:fd:97:9d:80:2d:5b:
         14:d7:5f:fb:f0:48:ef:35:67:56:09:f5:2c:fd:77:5f:6b:9f:
         6a:b2:83:f0:3a:48:fa:d4:d7:8c:2b:78:ab:db:5a:1b:16:82:
         93:f8:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:13 2026 by rpki-client