Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File:                     XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier:          bjYosAb+DMtvkXlZOmHy7PRbDmi6ufeJ00lYJcb70K0=
Subject key identifier:   F0:55:69:07:2C:D2:A3:E0:4C:C9:58:58:EA:66:E4:10:DE:9A:CD:1F
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer:       /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial:       019EB7333ACA4BF814596A075BE8097BE912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number:          07D4
Signing time:             Thu 11 Jun 2026 15:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:48 +0000
Files and hashes:         1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: 5ITN7wjUvR3oAw4xKd9MFW38R6YIWa30MbjdTjVF52Q=)
                          2: uhPXDNK9DwvaVzBP6prWtUmbJDw.roa (hash: DW1tiuzv/wvBgNUqtlXS5C2dFHnxlOJB3QKVHksHsN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:3a:ca:4b:f8:14:59:6a:07:5b:e8:09:7b:e9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
        Validity
            Not Before: Jun 11 15:00:48 2026 GMT
            Not After : Jun 12 15:00:48 2026 GMT
        Subject: CN=f05569072cd2a3e04cc95858ea66e410de9acd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:11:8a:ee:09:f9:fa:9a:be:19:76:6d:20:
                    c8:87:05:af:54:ea:5c:aa:f5:d1:e8:1f:65:d2:9d:
                    d0:85:d0:25:70:4e:a7:a4:84:a2:d3:f1:2c:0a:0d:
                    bb:4a:cc:ef:da:ff:1a:1d:02:2a:8f:ce:fd:be:34:
                    fa:ce:af:3b:e5:88:b1:eb:f4:8b:61:7f:74:c2:ce:
                    23:09:ab:54:6e:0a:fd:05:41:f2:14:ee:a9:ac:af:
                    c6:ab:61:cf:bd:bf:2e:e7:fe:d7:c0:08:c3:c8:de:
                    27:40:29:6b:f5:43:19:97:b5:3e:dd:1a:71:af:58:
                    11:b0:eb:43:ea:6b:d9:bc:70:98:f6:0c:a9:96:c4:
                    38:67:bb:94:fc:7a:3e:6c:9c:e7:b3:13:67:e4:80:
                    21:f6:5f:83:a0:61:04:67:00:76:1e:a3:34:83:1a:
                    af:0f:7c:8b:55:88:70:10:c8:b6:43:17:90:d9:ad:
                    6d:ac:af:2b:08:96:c0:69:4a:ea:e9:d5:4d:12:4f:
                    1f:93:85:27:80:90:bd:7d:f5:02:d0:12:53:d1:62:
                    45:fd:4b:b5:93:86:09:71:e5:ca:76:3b:65:f0:a3:
                    36:b9:8f:5b:1a:75:8f:44:15:3c:c6:66:b8:44:1d:
                    3d:50:86:83:c6:3b:d8:0d:db:4a:94:2c:1c:e4:19:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:69:07:2C:D2:A3:E0:4C:C9:58:58:EA:66:E4:10:DE:9A:CD:1F
            X509v3 Authority Key Identifier:
                keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a5:18:ff:cd:41:ef:8b:13:36:6b:d7:67:6e:89:ae:a3:74:
         39:32:91:de:fe:91:8a:24:e5:42:81:90:02:b7:76:b1:ed:2a:
         b8:29:35:a5:db:8f:b0:b8:d6:5a:19:03:f9:2b:3e:db:01:ea:
         94:5e:56:06:79:be:f4:9d:0c:6c:cb:33:fc:a7:95:83:23:4f:
         15:e5:4d:6f:8c:5a:4b:72:d0:31:32:fb:c7:3b:de:20:d9:47:
         aa:af:55:84:db:2a:78:51:56:74:bc:02:7c:11:ab:f9:3b:e2:
         d6:ac:8a:6a:ab:29:70:60:be:6a:93:50:37:47:b7:fc:4a:c9:
         f4:0b:bd:48:98:39:0a:47:b4:b8:14:f2:34:14:b0:79:0d:f4:
         85:69:3d:58:af:fd:a6:31:33:84:f3:85:90:f1:51:4f:0c:2a:
         35:33:31:b9:de:f1:ca:ea:d4:a3:17:97:37:cc:e5:34:72:10:
         22:78:a2:8d:45:ea:70:8b:5c:99:42:66:47:bb:bd:d0:30:09:
         29:2c:4b:48:68:ff:7b:05:b7:a0:31:b6:23:9d:4c:08:c1:e6:
         cd:90:59:95:de:20:fc:99:51:28:f1:39:70:b8:ed:18:ce:3e:
         d4:d6:d0:bf:22:56:bc:31:49:15:92:f2:a3:3a:f9:ad:7e:29:
         f9:64:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:27:55 2026 by rpki-client