Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          ArwfGrjd1OcAyYoY7s268+uqvSITfPEZNuueMmbHKyw=
Subject key identifier:   00:7B:DF:FF:AB:B9:39:4F:DF:4F:EF:A2:22:3F:3E:41:26:0E:F1:40
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       019D3977BF63A852F5165218E03471192B02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          18C1
Signing time:             Sun 29 Mar 2026 12:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:42 +0000
Files and hashes:         1: 03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa (hash: so/wDftuCuhVwNVUjhg5MbT2/4hCaRH4nYQ0u3BjKb0=)
                          2: 4zySZiWhTUg_rSb8KoK0O9QlCnc.roa (hash: gFl6wOPf/Gu9CFX49zoLAcByVCFuRBnN0N7UMDgQVbw=)
                          3: 6okDW562ptIs4iN1y-WMYg-45jY.roa (hash: KaiRGaOivd7uFd01xG4Jps9z07e2u3NUoDlDSh+lkH4=)
                          4: BHlTz3-_hk0tMzZp-IRVezg5RNg.roa (hash: 3CAUKuO6yLGGc6BqD8YXI8xLV+Hesf2PBsRTTbbaRXY=)
                          5: Cw5SfyDzZSwcs1u004-BHBsZJ2k.roa (hash: dTjLGIgHzcuawJEo1z0MGCRL7Fj8URygA4AZ4Hforus=)
                          6: Gxw_WTtXXlB9ovzVsZ-LJ4z0v8Q.asa (hash: WH1dBt0aNelRDH5woRZUZpaGD5516U5Tlex+HGGo1Mg=)
                          7: T7EjLOUNjE599ece2DV4T26b9xY.roa (hash: fsf0dRPygHs9hSe02Kw5kkb/kNnztp8TK8bBIMk8jhU=)
                          8: UlJaOFnMpoO5SgKO7Th_pY-ZAjo.roa (hash: jUSX0KizK2PQI3mj5biaakX23YPg0NJIgDEQv+TXIfQ=)
                          9: WRCnuaJzRXm83oAAxB0GzCKosjw.roa (hash: Zlyy/Icbe5M8aCeFBu4UmwH/OngNWuHDogd3Lscyms4=)
                          10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: 9T/fV9KPC/wD2+DTl2ovMrwQOR3lxX0QVruoEOe13FQ=)
                          11: b24MgnJElk0t0CZYGUPCS0WiBxQ.roa (hash: cWHhW2paDx5FRXzehDQT7p6siSal6c3Aqs94Jvc3VHg=)
                          12: f9ERBjEpHbN1pfhl_nyFiocjtUM.roa (hash: eOOBr7U1g+HNywPWJzzBaEPCZoT5835M09OomcowoyQ=)
                          13: fZO1V-C0cXhOHVvlHXa0vUYnHZ8.asa (hash: cgi6TIEFIyrc5AnWcFBoC5eGLvx0L0ViQ+5+kfaeFOU=)
                          14: hAf22SRJwgs0SWkdAxUs95Fa0v0.roa (hash: 7vak+mJ/sIQOwdjrAkPrbLJTSGMQ1rFuipgFbAcPiHo=)
                          15: jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa (hash: 0xPjFQyLdMuqT+l7cmEhhj8WC9rilD8CahSrHUjkdaE=)
                          16: k09qltBTafYPaN8mKEjySL8ft6A.roa (hash: MFuya8B+MwfIjFnhNi4ZBDH/cZzScHZPkCXENvMvREQ=)
                          17: nkrV5tLs-lefafrDVBSQgulDPOI.roa (hash: 9SSFucsxAfajh5jClHvePjClBs0ArUj4EcuwFRS1hBA=)
                          18: q7ejmoUa5CLp8FjjBu9-Afywcr0.roa (hash: g5mShwr6G9nNz1wO7zkLNb/6wzwAilrCOEifz/cQvrY=)
                          19: wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa (hash: DtOCWrW/1nLce+oLk7kSY37T9S5ZLMhN/Uio3q7OELI=)
                          20: xI9niScPVURzbD2atpgMk7GVunU.roa (hash: wBTDsm/pz9hBwb3Vy+BwrclzAnI72KZbmuOWlENCDso=)
                          21: yNIYxMnUO5naybwPyNyh5ewSWWc.roa (hash: JUSRTIxpmqX2Md1pS2aFTtzHv44wRgNWsPuej9W1PDw=)
                          22: yTtc9_cvInn7yvfcK78WqTzFBDM.roa (hash: GZqbLQNtSwfpqv55KNnGoj2TZ2D+L4eB5ErF2hLFt3Y=)
                          23: ztKZKXz5sSSd9mxS9EgI0poqAYg.roa (hash: nBdrQf8RxLCFFDAly/9t+zuqKEqOGBMYF3lSM61ag10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:bf:63:a8:52:f5:16:52:18:e0:34:71:19:2b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Mar 29 12:00:42 2026 GMT
            Not After : Mar 30 12:00:42 2026 GMT
        Subject: CN=007bdfffabb9394fdf4fefa2223f3e41260ef140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:ca:6e:36:fa:51:90:ab:cf:2f:bb:13:45:
                    bc:05:ad:4a:60:7b:08:f2:2a:18:98:93:44:7b:38:
                    75:aa:d8:95:96:56:42:3a:98:33:8f:65:26:db:69:
                    b2:46:8b:fb:a9:29:2d:da:44:9f:d5:25:24:be:82:
                    06:87:8b:e7:1a:76:6c:e5:d0:f4:fa:b1:ae:8d:0f:
                    e0:08:a2:df:ba:ba:1a:31:21:ec:7d:2a:e9:26:4e:
                    9f:13:72:04:ff:bc:36:91:fa:2f:3b:31:95:27:2c:
                    b0:f2:c5:9c:8a:d3:c3:d3:ef:b4:b1:f7:cb:4e:d9:
                    37:2d:4f:57:2a:ef:48:7b:20:fb:15:f6:bc:40:a9:
                    10:f2:c1:9e:65:ef:09:19:7f:4b:ac:ff:33:df:ae:
                    cc:a5:78:fe:46:db:9d:ff:56:ea:5c:03:6d:88:88:
                    22:02:15:a1:8e:cb:c0:6a:8f:5f:4f:c2:2b:04:c2:
                    ce:f9:4b:67:e5:4b:0f:7d:6c:a5:16:e1:21:a1:c0:
                    d8:f1:4d:63:f7:22:70:5c:9e:cd:9c:f4:22:5a:3a:
                    ee:69:54:72:7f:ff:29:52:59:31:4e:66:85:2f:af:
                    ee:ba:e7:ae:22:86:be:a9:a6:c1:49:f3:77:21:62:
                    01:44:b0:bc:f2:be:88:f5:1f:0b:53:0b:87:c7:21:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7B:DF:FF:AB:B9:39:4F:DF:4F:EF:A2:22:3F:3E:41:26:0E:F1:40
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:26:87:02:bd:66:57:c3:4a:bb:ec:a7:44:f7:84:77:bb:b5:
         11:4c:17:4a:59:83:58:7f:ed:67:11:f9:12:bf:60:10:32:ec:
         a5:4a:3d:27:ab:67:a2:76:55:98:de:3c:f9:21:a3:aa:c8:e0:
         9b:d9:fa:e2:47:75:cd:4d:ec:59:2f:55:11:6a:41:e8:58:91:
         96:fa:7c:c8:88:3e:4e:19:e4:ca:ab:32:0b:39:05:57:88:c8:
         e8:ca:60:f7:58:a8:3a:19:ae:f0:a9:ae:ea:0a:a6:9b:be:fe:
         1f:4b:87:79:25:91:21:eb:3f:d8:8a:a6:d4:1d:cf:9e:a8:0e:
         c3:c0:db:e2:95:b3:aa:0e:38:84:83:8f:7f:f8:31:90:16:ea:
         ee:50:7b:51:d5:d5:98:56:fe:93:a1:59:35:e1:32:ef:e6:38:
         e6:52:6c:96:74:58:26:b3:14:f9:36:bb:3e:a7:da:f6:d0:8e:
         a8:68:cb:4d:f6:26:34:ef:1b:a0:5a:7c:fd:59:f4:5c:67:49:
         4c:68:cd:38:e3:90:50:8e:e4:cb:bd:a9:da:26:da:c2:f1:ba:
         44:ca:c0:c5:99:15:5e:4d:4b:15:d5:10:5b:c4:0e:b5:51:46:
         9d:e4:b1:65:da:04:41:64:ce:e1:82:72:a1:19:59:df:7a:dc:
         a4:e3:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:28:35 2026 by rpki-client