Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File:                     XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier:          yJDrBJ2mBsF0L/8NfxEZpRu2h9U2wJ0n4C9JqJCrEFk=
Subject key identifier:   ED:47:1B:77:8E:CF:93:82:C8:4E:94:EE:F3:79:F8:19:82:F9:80:F0
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer:       /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial:       01A00281A3CB914410CFA568277785F2DA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number:          1712
Signing time:             Fri 14 Aug 2026 23:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:45 +0000
Files and hashes:         1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
                          2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: yOoln9H9Gft7KuEKk/3sbXanQfjR8qvb8iK1CzCL6TA=)
                          3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
                          4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:a3:cb:91:44:10:cf:a5:68:27:77:85:f2:da:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
        Validity
            Not Before: Aug 14 23:00:45 2026 GMT
            Not After : Aug 15 23:00:45 2026 GMT
        Subject: CN=ed471b778ecf9382c84e94eef379f81982f980f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:80:ba:8a:07:4e:a3:12:39:56:30:43:8c:
                    c4:a6:39:db:0c:f3:06:1b:01:26:ac:39:ad:5e:8e:
                    1a:60:c0:3e:51:d2:e2:91:cb:e8:b5:29:e0:e7:65:
                    2f:8f:ed:3a:8e:d2:04:66:48:ad:52:df:01:7e:20:
                    ec:bb:0f:bb:44:92:c4:42:8c:fc:d4:73:14:54:93:
                    73:f8:bd:49:8b:94:cd:a0:ce:35:ed:32:7f:d6:8b:
                    69:bd:67:23:9b:61:b0:3b:e9:13:98:dc:f9:82:f0:
                    39:52:98:78:ba:b3:5a:af:29:dd:93:c8:2a:0d:94:
                    24:ce:4d:06:0d:bc:52:47:7e:b9:d5:3f:c4:96:d9:
                    7a:58:51:3b:1a:34:f0:da:60:cf:e1:f2:5d:c9:bf:
                    d2:fe:cf:20:58:bc:68:b8:34:68:de:bf:2c:cd:b5:
                    0d:b1:de:c9:14:43:df:b1:83:1c:ad:65:2c:3b:f3:
                    4d:e7:3e:92:28:a8:7b:3e:4c:e3:4c:ed:0c:f3:83:
                    cc:38:81:b0:67:96:93:58:fd:00:48:4e:b2:a5:d7:
                    a9:de:c4:9f:40:83:26:47:88:75:51:2b:59:cd:18:
                    a4:77:a9:48:4c:d0:3c:28:0b:37:7e:4a:da:0e:ba:
                    c0:80:c6:e4:0b:98:fb:01:ba:2c:96:c1:8d:f7:04:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:47:1B:77:8E:CF:93:82:C8:4E:94:EE:F3:79:F8:19:82:F9:80:F0
            X509v3 Authority Key Identifier:
                keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:1b:5f:ec:d7:9b:e4:9b:41:36:aa:60:db:31:b8:67:1a:
         f9:83:ca:75:ae:1c:d4:4a:a5:b9:38:9d:8e:3e:fe:79:2e:37:
         c8:e1:48:8a:88:88:37:f7:1e:0f:28:7a:2a:b2:b9:c5:4d:7f:
         18:ee:65:21:14:99:61:d1:c5:ff:4a:95:1f:9e:46:72:0c:aa:
         36:59:ee:a6:96:62:6d:66:f2:13:1a:c3:13:13:13:1f:13:e0:
         47:c7:6e:97:46:93:67:68:e2:fc:69:4a:86:00:65:ac:76:1a:
         05:43:e5:12:89:83:d1:e6:41:f6:11:2d:ac:af:c9:c6:52:d7:
         94:aa:f2:d4:a5:f7:84:94:9b:e3:65:e1:d9:71:39:ad:27:7e:
         9f:a9:c5:b7:d1:20:d6:68:0a:6f:c1:ce:96:c8:ad:4a:00:8b:
         93:ef:11:30:76:c2:f6:66:37:d6:62:e1:ed:e1:54:e8:98:43:
         ca:2f:3b:e8:67:90:e9:ec:0c:77:83:d0:ee:70:15:92:b2:fd:
         20:db:69:d0:ed:ef:63:71:bd:33:bb:7c:da:9d:1e:f1:f5:8f:
         b5:40:7c:88:f9:6b:af:64:78:ad:6a:85:ce:2f:f7:7d:97:af:
         f6:af:5b:8e:68:c8:16:7f:61:46:61:b5:88:d3:69:0d:6a:73:
         1e:94:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:02 2026 by rpki-client