Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File:                     XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier:          2ngNBSNaPMgWsew8QHTis9WFPvWwpjEK5ir2pZkXyVw=
Subject key identifier:   84:AC:5C:25:32:31:68:AC:9D:6E:EA:BB:D5:DF:CA:B1:99:C2:DE:A5
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer:       /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial:       019F11895B4BB2B94C8A5180DD79FACD27A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number:          0483
Signing time:             Mon 29 Jun 2026 04:00:42 +0000
Manifest this update:     Mon 29 Jun 2026 04:00:42 +0000
Manifest next update:     Tue 30 Jun 2026 04:00:42 +0000
Files and hashes:         1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
                          2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
                          3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
                          4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
                          5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: tVlu89aMmwoUEWS+d1CnVjAx/0QFdkEdaMtVr5rOc54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:89:5b:4b:b2:b9:4c:8a:51:80:dd:79:fa:cd:27:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
        Validity
            Not Before: Jun 29 04:00:42 2026 GMT
            Not After : Jun 30 04:00:42 2026 GMT
        Subject: CN=84ac5c25323168ac9d6eeabbd5dfcab199c2dea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:15:98:a9:39:ba:27:4f:2c:dd:da:aa:09:
                    3f:7a:57:4d:32:f0:87:78:36:70:e3:a5:f5:41:e5:
                    c8:e9:16:a2:7d:9e:3d:76:2b:33:7b:3e:d0:cf:5b:
                    0b:4e:01:9a:25:63:e0:03:bd:7b:08:32:c8:7a:fe:
                    d9:6b:3a:f5:aa:56:f0:9a:27:4f:d6:63:95:0c:c4:
                    ce:a5:08:71:c4:4d:f2:b7:83:64:da:54:40:99:da:
                    3f:6e:e4:16:a0:a0:21:2d:53:3b:0f:15:9a:f3:93:
                    4a:b3:db:28:6f:81:4b:51:e9:e3:c3:11:34:1e:fd:
                    b4:e3:b9:7c:5d:3a:5d:12:8b:0c:4c:9b:20:e6:32:
                    c5:94:07:86:46:2d:ef:45:91:c9:9f:c2:c8:ff:f8:
                    03:4b:26:c9:f3:a7:b7:22:1c:be:26:49:83:0b:87:
                    be:f0:df:16:3e:db:23:5d:bd:74:48:a9:48:f8:39:
                    18:d9:f8:5e:7c:8a:06:e3:35:ca:93:c1:51:c9:9b:
                    34:64:d2:bb:45:8e:d1:48:58:be:c2:c1:f4:e4:76:
                    2a:91:0e:ef:2c:00:dd:23:e4:89:c3:8d:d8:ae:3b:
                    f5:94:45:bb:0f:7b:df:1e:e7:56:46:34:41:88:2d:
                    8c:03:62:07:69:59:1f:9a:70:79:3f:f6:96:f0:19:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AC:5C:25:32:31:68:AC:9D:6E:EA:BB:D5:DF:CA:B1:99:C2:DE:A5
            X509v3 Authority Key Identifier:
                keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:bc:c8:ad:d8:fe:74:48:81:3e:9c:5e:3c:a2:a0:fe:67:
         48:96:30:5e:04:81:30:21:e7:3f:11:89:32:93:0a:f8:60:90:
         5a:b9:6d:7e:b6:45:d8:71:d3:98:a0:cc:4d:20:be:85:e4:ff:
         a9:b6:0e:e7:25:ca:1f:fc:e3:07:72:97:72:23:13:d6:bc:e6:
         7b:cb:ed:03:db:b5:cc:ad:e4:8c:c2:88:10:b2:fa:8b:d4:fa:
         ff:c3:2b:67:aa:19:b7:9e:7e:bd:7f:a4:4b:bb:fa:2b:55:69:
         3c:d8:f3:00:7d:a1:04:a6:ad:78:d5:4f:1a:27:58:cc:b7:a9:
         e2:ce:e3:38:32:a5:48:32:70:56:99:4e:fe:7d:bf:56:54:5c:
         d8:48:87:1d:d1:99:92:f7:e7:69:05:cd:0c:97:e1:04:21:a2:
         6d:37:bd:50:2f:07:a3:d0:ff:38:d5:54:90:37:6a:bd:48:90:
         60:a9:c8:5d:b0:d1:b1:be:d0:28:b0:6d:23:43:67:3e:9c:de:
         3a:57:55:f6:70:03:32:07:f4:35:d7:47:72:b5:82:8c:23:ea:
         fe:f4:7d:fc:ca:ff:9b:99:df:2c:14:1f:b9:f4:dd:35:69:87:
         d2:6d:54:72:e8:e7:52:28:a5:1d:50:8c:a1:6e:dd:f6:a9:01:
         f4:90:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:56 2026 by rpki-client