Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File:                     xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier:          QdlNEStaxzVkmwtXaMfqnnZBvx0n+5RSj3d+ev+25PQ=
Subject key identifier:   9E:56:16:5E:A3:B4:A4:C8:C9:F1:0D:F1:88:19:2C:DA:DA:BA:A0:39
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer:       /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial:       019E3185BB9B295375B88AC3EC528D802DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number:          062B
Signing time:             Sat 16 May 2026 16:01:48 +0000
Manifest this update:     Sat 16 May 2026 16:01:48 +0000
Manifest next update:     Sun 17 May 2026 16:01:48 +0000
Files and hashes:         1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
                          2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: 6kj8uMlQkAphjnZ1SfD47HD7iDxkLumlg18pEoh+ohA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:bb:9b:29:53:75:b8:8a:c3:ec:52:8d:80:2d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
        Validity
            Not Before: May 16 16:01:48 2026 GMT
            Not After : May 17 16:01:48 2026 GMT
        Subject: CN=9e56165ea3b4a4c8c9f10df188192cdadabaa039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:e0:67:b5:fd:64:b8:e4:e0:42:31:8b:1f:
                    07:25:e6:5e:c4:c3:6c:e0:65:b8:18:b4:42:81:60:
                    4c:2a:cf:0d:1a:21:5c:ac:77:27:c7:39:04:16:e4:
                    16:87:57:66:28:71:4d:74:ad:59:69:de:e1:2c:27:
                    37:a8:cf:25:a4:25:f1:cf:21:bb:34:11:58:39:ca:
                    4b:39:02:27:79:69:3a:4c:fc:bb:d2:29:1b:62:47:
                    36:4b:7b:8e:49:42:fc:9d:9c:06:ce:54:bd:b9:e8:
                    a1:73:42:e7:3b:06:c4:e7:82:8e:a5:81:5a:ff:e7:
                    2a:68:d7:85:52:42:fd:86:b2:f8:c7:8e:c8:b5:b8:
                    be:f0:69:95:3b:be:4f:d4:fe:4e:91:6a:df:cb:03:
                    62:63:5d:ef:1f:e3:3d:24:5a:9d:7b:68:15:19:c4:
                    95:3e:df:ae:5f:6e:c9:d3:4a:0a:fe:55:b1:e6:d0:
                    bc:a7:85:c7:d1:81:d0:23:69:8f:59:16:ba:28:68:
                    d6:4a:31:8c:8c:48:3a:e5:51:b9:22:eb:28:c8:72:
                    12:7f:f9:a7:c2:ba:14:a6:f9:44:a4:80:70:7c:c3:
                    2e:49:82:d0:6a:00:9d:65:78:5f:df:e1:e4:a7:4b:
                    c2:dd:f0:1e:77:67:79:db:56:0d:c2:4f:5b:04:b4:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:56:16:5E:A3:B4:A4:C8:C9:F1:0D:F1:88:19:2C:DA:DA:BA:A0:39
            X509v3 Authority Key Identifier:
                keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:cc:6b:ed:6c:83:f6:1a:8c:9f:cf:e6:07:ff:9e:b2:29:
         f3:97:1a:9b:a5:c8:91:56:e2:b7:b0:03:cd:de:e0:86:ab:59:
         e9:f2:f4:e8:77:e6:d4:8f:da:aa:a0:21:00:be:9e:13:f7:b0:
         af:50:c2:1d:53:1c:cc:0b:fd:5b:c2:c1:4d:2b:78:1d:e4:c0:
         08:56:02:22:c1:09:00:d0:4b:f8:1c:ec:64:2e:bf:67:93:7b:
         ed:6c:c3:02:0d:bc:39:b5:d3:7a:e9:08:6d:f2:a1:28:d0:3d:
         7c:1c:ee:48:d6:aa:77:45:b2:d2:43:70:ca:04:59:f3:52:16:
         56:f3:c8:64:52:01:26:27:45:0e:42:1b:3a:8f:7b:85:44:a2:
         f5:8a:dc:a6:9d:77:c8:26:f2:d2:de:a1:6d:08:1c:8c:9d:4c:
         1f:d9:b0:84:fa:80:78:e2:79:d9:86:2f:cb:ca:71:96:d1:1c:
         df:a2:81:c9:bd:89:b7:ae:f9:be:60:f0:27:38:dd:d4:5b:c1:
         59:fe:3c:4b:89:1f:68:fc:d3:31:5d:11:68:e7:2e:d7:65:33:
         7f:21:26:62:fc:4d:cf:fd:47:b9:c9:53:67:9e:20:58:58:30:
         85:f8:f6:97:89:52:f2:ae:87:81:d4:26:42:fa:39:aa:ac:6b:
         da:74:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:38 2026 by rpki-client