Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          3WFJxbMa7CqwXRTyguOaYg5tkrqIcJFYSSZcaxkPnug=
Subject key identifier:   DD:79:A1:2B:94:78:BD:5E:50:EA:3F:9A:6B:B8:0E:18:5E:09:5F:94
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       019D32633325E00060FADB3D4C45C24A929C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          06CD
Signing time:             Sat 28 Mar 2026 03:00:55 +0000
Manifest this update:     Sat 28 Mar 2026 03:00:55 +0000
Manifest next update:     Sun 29 Mar 2026 03:00:55 +0000
Files and hashes:         1: 0-9sd-qmadUujczOz2WkJX2kNQA.roa (hash: GjNrMaOgADYzx542miG7jXCQg7xlwiNJxr+8IrSPpjc=)
                          2: LNYXeGK0fNHFOXoFsTX923sjqo4.roa (hash: HMZywae9ctDuPusaGMZ0nvtbkQTFjTevWXrmDyy57E0=)
                          3: W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa (hash: FSZFedNs1YnxbjhewAgdDVFznFYlPK2O05FcBLwFtyk=)
                          4: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: ZPSJR8+BJm6KmUkf7k9NpqnMlindS2Co5WwLKyJA2Nk=)
                          5: jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa (hash: EV9l1WgVc2rsgYc/+T8QGA8A2PJD5mEc20rAUOjgeu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:63:33:25:e0:00:60:fa:db:3d:4c:45:c2:4a:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Mar 28 03:00:55 2026 GMT
            Not After : Mar 29 03:00:55 2026 GMT
        Subject: CN=dd79a12b9478bd5e50ea3f9a6bb80e185e095f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:ac:43:e1:49:c0:c5:51:41:8a:82:ac:18:
                    d8:9f:3d:96:ed:19:70:e1:bd:74:25:24:13:97:31:
                    42:8f:86:30:b4:e4:f4:8a:f2:49:99:e8:12:6d:c7:
                    f4:57:e6:95:55:e5:ea:24:12:47:5b:de:d3:51:fd:
                    0d:37:69:ae:24:b7:b1:7e:1d:d1:7e:bd:e0:bd:30:
                    f3:59:e6:8e:9b:22:8e:46:4c:f2:d2:b2:10:ac:32:
                    4c:ac:80:71:d4:33:88:a9:fa:fa:9e:a1:6b:68:85:
                    bf:1d:db:2b:72:0a:75:b6:94:4f:4c:6c:59:06:ad:
                    7b:f2:6e:cc:18:e8:05:2a:c0:41:68:5d:38:00:ad:
                    ce:2c:ed:79:1b:3a:90:d3:b6:13:a8:d2:a4:21:85:
                    b2:25:21:e0:e0:09:bc:f5:92:e9:86:16:ea:97:37:
                    41:27:21:7d:61:8a:66:2a:d2:d0:d4:c3:6d:16:95:
                    9c:83:2e:93:06:bc:eb:86:df:d5:56:79:64:14:5e:
                    b1:e3:d0:c4:7d:6c:18:3b:f7:9f:40:82:d8:d5:24:
                    24:88:e0:da:19:90:f7:5e:90:95:80:f3:85:b2:18:
                    88:f9:b5:34:f5:c8:fa:a7:22:06:e7:4d:e7:7c:62:
                    31:0a:5e:01:af:df:dc:46:70:70:be:e8:05:78:9b:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:79:A1:2B:94:78:BD:5E:50:EA:3F:9A:6B:B8:0E:18:5E:09:5F:94
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8a:bc:04:12:d7:fb:95:76:9c:fe:47:de:93:89:50:68:f2:
         a8:8e:0f:5e:4d:fe:88:7c:fb:8a:67:0a:b9:de:f9:93:6e:76:
         08:9e:de:c1:be:7c:ed:e2:3b:10:19:3a:63:37:28:6d:58:aa:
         c1:8f:8a:3f:52:31:41:93:0f:74:fd:b2:25:a4:08:30:8d:ea:
         98:cb:8f:92:bc:82:e4:eb:af:69:54:96:f0:85:a6:cd:86:4d:
         75:96:a4:fe:74:f7:b9:b1:80:16:75:60:ae:61:6b:7a:02:f4:
         15:95:c4:dc:88:0d:d1:5b:eb:dc:64:5f:7a:cc:5b:fc:f3:4b:
         a3:bd:ac:54:b1:65:2c:5f:82:1d:95:eb:a0:7b:9b:25:51:61:
         b5:57:22:b2:1c:3a:e6:db:18:6c:3c:a1:e9:a8:b4:85:26:d1:
         e1:c9:58:34:d5:3d:53:17:9f:1a:75:13:29:e6:bd:a7:be:b1:
         65:a3:da:72:da:30:36:92:f2:31:92:48:14:b6:c4:39:ac:55:
         ff:0d:bd:33:98:df:1a:87:cd:ae:ef:a0:5a:09:c5:88:9c:da:
         17:eb:d3:4b:e2:44:7d:f1:d1:10:da:e6:e3:cd:a0:5a:04:12:
         7f:5a:13:25:a3:e9:e9:5c:bf:58:fe:58:8a:d1:4a:8c:56:1b:
         df:2d:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 07:02:35 2026 by rpki-client