Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File:                     xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier:          129x/GN4cdxWrOFA7qDh0c58xuWNC6NQNMwBteRWKXI=
Subject key identifier:   8E:C9:FF:8F:5E:D9:D0:E3:1F:55:DE:80:70:6F:83:87:49:5D:7F:25
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer:       /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial:       019D37C03EC0297FFF344594052825C3AD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number:          0A5C
Signing time:             Sun 29 Mar 2026 04:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:38 +0000
Files and hashes:         1: Wd7kxNOQtW9wntahD6-s3hs_RN8.roa (hash: Yn5VDfyyadHVMUb0Gm6V0K9m9w04Ph9wP22TSsc2ons=)
                          2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: MIAypiHjmvsR9H9L7ZCtTuiOAxDI1MalivABXESF6U4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:3e:c0:29:7f:ff:34:45:94:05:28:25:c3:ad:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
        Validity
            Not Before: Mar 29 04:00:38 2026 GMT
            Not After : Mar 30 04:00:38 2026 GMT
        Subject: CN=8ec9ff8f5ed9d0e31f55de80706f8387495d7f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:5e:17:a6:ee:33:ea:58:72:6c:f8:78:f6:
                    27:88:cb:59:45:f5:e7:42:43:f3:e6:53:c6:9b:0e:
                    d4:d0:c9:08:19:a6:7c:75:4b:1f:01:b7:69:31:02:
                    7e:9a:b4:1b:ef:3b:ac:e9:99:2c:98:26:9c:47:a0:
                    1d:c4:e1:60:f2:50:34:a3:18:b0:41:77:23:f4:a2:
                    21:70:2b:70:ce:36:b3:fb:2d:11:25:00:e5:9c:d5:
                    63:f0:e7:b2:50:b0:38:39:53:d0:c2:28:5e:69:72:
                    3a:11:6e:29:57:56:f5:87:8e:14:46:96:d4:c7:e0:
                    60:fd:5d:68:a7:7f:0d:ca:4e:5c:ba:0e:24:be:c5:
                    1f:b8:28:2f:20:56:52:98:12:1b:47:03:80:43:bb:
                    6b:b7:e9:9d:c6:f1:e6:5d:5c:d4:cc:32:ea:5f:7f:
                    2b:26:2a:b9:af:0e:8f:b5:3a:7a:ac:23:67:eb:13:
                    e5:14:f3:df:84:ab:17:ae:68:77:04:bb:83:53:73:
                    38:ea:14:44:62:31:6c:c6:a4:9e:ba:f2:24:15:31:
                    5e:cc:9b:4c:62:7e:51:e7:cf:ef:4a:43:57:ff:e0:
                    c9:a3:8d:a9:53:7e:7c:dc:73:b9:b0:b4:a8:80:dd:
                    7b:8c:28:49:2f:3f:9d:3e:5e:5f:c8:b4:ef:0b:0e:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C9:FF:8F:5E:D9:D0:E3:1F:55:DE:80:70:6F:83:87:49:5D:7F:25
            X509v3 Authority Key Identifier:
                keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:66:7b:b3:62:74:e2:48:6d:73:ee:0b:db:64:b8:7f:d1:30:
         b0:ef:08:a7:55:e9:3e:e9:50:7c:d8:47:24:19:a6:43:c8:65:
         3a:4d:cd:dc:a9:cd:b7:95:1a:e5:61:00:06:90:db:ac:37:85:
         18:4d:48:7d:a0:65:52:4b:f4:63:62:88:e8:81:7b:3f:5f:cb:
         f1:df:f6:0a:4e:0e:02:82:d5:91:a2:c1:3d:b5:39:24:66:80:
         ef:41:b5:87:e1:8f:15:e8:af:ac:48:22:32:df:54:fc:6c:3f:
         cc:71:ac:26:df:21:e5:82:5a:b8:94:15:b0:6a:6f:e7:b4:01:
         cc:f5:76:08:be:d0:64:11:44:92:5d:e7:19:39:34:89:de:1a:
         ca:0a:38:b7:f2:f5:71:10:1e:b5:ac:05:05:38:c1:79:88:3e:
         19:97:d3:84:21:f8:0f:7e:ab:ee:2a:e4:4f:b1:c5:98:82:f4:
         75:e6:3f:e3:0c:40:29:8e:be:5d:f6:13:13:77:78:cd:31:b2:
         f7:30:6e:e2:af:ab:f8:38:8e:eb:55:97:a2:e7:d6:9c:78:c7:
         7e:c0:09:0f:bc:cb:19:f7:77:34:89:45:26:54:05:80:6e:3e:
         b7:11:7b:36:6c:b5:f9:7e:f8:56:88:15:81:3a:1c:96:d1:51:
         55:43:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:40 2026 by rpki-client