Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File:                     XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier:          Tx+H4YBoh7wCS8fg2hx0Z/I+UNHrn3yBdTRlJOtkDhQ=
Subject key identifier:   39:45:46:4B:2F:E9:0C:B7:AB:EA:BA:41:D7:19:64:CD:7E:F4:37:4E
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer:       /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial:       019E2A0250F1BDFC7B4CE2564D2028E5E90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number:          180B
Signing time:             Fri 15 May 2026 05:00:55 +0000
Manifest this update:     Fri 15 May 2026 05:00:55 +0000
Manifest next update:     Sat 16 May 2026 05:00:55 +0000
Files and hashes:         1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: Mf4qbLGI1goXqoJDskQTrktherezzOfv59r5rfXrmXc=)
                          2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:50:f1:bd:fc:7b:4c:e2:56:4d:20:28:e5:e9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
        Validity
            Not Before: May 15 05:00:55 2026 GMT
            Not After : May 16 05:00:55 2026 GMT
        Subject: CN=3945464b2fe90cb7abeaba41d71964cd7ef4374e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:e9:34:1c:01:8c:fb:c5:9e:c0:f4:92:20:
                    ba:63:33:e3:d5:83:35:06:98:44:fb:67:9f:90:c8:
                    8c:bf:84:78:f2:a4:8e:eb:af:e8:8b:16:81:1e:55:
                    77:47:7f:1d:5a:60:85:89:1d:c6:26:7f:fe:e5:9d:
                    eb:bc:63:4a:70:3d:bd:bd:90:67:0a:36:48:88:cb:
                    c5:2c:c0:9f:fd:5f:4b:ab:8a:fa:b1:e4:ca:84:ef:
                    46:d8:d5:15:d7:b7:0c:02:10:01:d2:8d:da:26:74:
                    2f:11:06:56:88:9f:7c:37:db:75:69:e1:b5:84:1a:
                    19:8e:1d:a0:67:13:4a:33:29:69:38:7d:66:8a:86:
                    a0:ae:e3:3a:f4:08:60:d7:97:f0:71:26:6f:9c:43:
                    12:c9:fd:b4:ad:be:07:d4:6a:75:3a:c0:8e:8d:29:
                    2c:16:1a:b1:ed:75:58:a7:c0:68:82:35:79:f8:ee:
                    06:83:22:b9:88:2d:cb:2d:fd:8b:06:f8:88:f5:d2:
                    89:d5:85:6e:e2:11:72:80:b1:db:c6:1a:04:57:e2:
                    b9:70:98:32:a7:5a:fc:0a:f9:04:fc:c5:83:cc:b9:
                    7d:a1:af:d2:bd:f2:d1:37:3a:e5:70:08:24:c2:43:
                    7c:8e:d7:1c:e4:80:6e:eb:13:f1:e7:b3:a2:2b:36:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:45:46:4B:2F:E9:0C:B7:AB:EA:BA:41:D7:19:64:CD:7E:F4:37:4E
            X509v3 Authority Key Identifier:
                keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4e:72:50:a4:03:bd:0a:73:6b:4c:67:ae:8c:70:a1:de:29:
         db:54:1e:a7:69:e5:80:9c:31:94:52:2a:cc:56:ec:0c:f2:eb:
         1f:bc:91:8d:ef:66:88:08:e5:c9:b5:3b:da:96:4d:b8:ab:94:
         a4:9e:d7:80:b5:5f:fc:a8:1e:41:44:ea:22:a5:0f:ff:8c:a1:
         53:7c:39:b1:45:9b:1d:eb:c3:af:5d:c5:eb:4c:ef:ce:e1:95:
         0f:45:de:c1:1c:97:fa:e4:c4:c9:ab:29:8d:28:64:3c:de:11:
         78:64:00:e8:b7:da:ab:c0:04:3f:c4:86:f2:16:04:60:45:a2:
         11:1d:92:81:6c:b9:5e:c0:39:2a:fb:55:ca:1e:ae:a0:f3:a6:
         ab:43:1b:b3:1d:98:c8:c7:81:dd:03:41:ae:eb:df:6f:56:32:
         54:36:d5:85:dc:de:88:71:32:1b:2f:9f:31:0e:ee:13:e8:fb:
         84:4c:08:90:4e:1e:03:9e:d5:65:d3:8d:c4:7b:90:18:d9:ed:
         f4:0c:61:f3:35:20:39:61:04:84:af:16:25:3e:53:b8:24:14:
         88:26:38:58:3d:06:4a:a4:71:ff:58:2a:46:56:40:79:39:6d:
         db:96:b6:83:8b:b9:b4:5f:f3:5a:dc:89:cc:8e:7b:30:c9:c3:
         62:e7:04:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qAlDxvfx7TOJWTSAo5ekNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx
ZTNhYTQwHhcNMjYwNTE1MDUwMDU1WhcNMjYwNTE2MDUwMDU1WjAzMTEwLwYDVQQD
EygzOTQ1NDY0YjJmZTkwY2I3YWJlYWJhNDFkNzE5NjRjZDdlZjQzNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/TpNBwBjPvFnsD0kiC6YzPj1YM1
BphE+2efkMiMv4R48qSO66/oixaBHlV3R38dWmCFiR3GJn/+5Z3rvGNKcD29vZBn
CjZIiMvFLMCf/V9Lq4r6seTKhO9G2NUV17cMAhAB0o3aJnQvEQZWiJ98N9t1aeG1
hBoZjh2gZxNKMylpOH1mioagruM69Ahg15fwcSZvnEMSyf20rb4H1Gp1OsCOjSks
Fhqx7XVYp8BogjV5+O4GgyK5iC3LLf2LBviI9dKJ1YVu4hFygLHbxhoEV+K5cJgy
p1r8CvkE/MWDzLl9oa/SvfLRNzrlcAgkwkN8jtcc5IBu6xPx57OiKzYt2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlFRksv6Qy3q+q6QdcZZM1+9DdOMB8GA1UdIwQY
MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt
ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi
LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU5yUKQD
vQpza0xnroxwod4p21Qep2nlgJwxlFIqzFbsDPLrH7yRje9miAjlybU72pZNuKuU
pJ7XgLVf/KgeQUTqIqUP/4yhU3w5sUWbHevDr13F60zvzuGVD0XewRyX+uTEyasp
jShkPN4ReGQA6Lfaq8AEP8SG8hYEYEWiER2SgWy5XsA5KvtVyh6uoPOmq0Mbsx2Y
yMeB3QNBruvfb1YyVDbVhdzeiHEyGy+fMQ7uE+j7hEwIkE4eA57VZdONxHuQGNnt
9Axh8zUgOWEEhK8WJT5TuCQUiCY4WD0GSqRx/1gqRlZAeTlt25a2g4u5tF/zWtyJ
zI57MMnDYucEpQ==
-----END CERTIFICATE-----
Generated at Fri May 15 10:42:53 2026 by rpki-client