Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File:                     xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier:          j3eFtkeKGhut4JCDuPDCrtmtQGMPn0TFYSWXbghWMHc=
Subject key identifier:   71:7F:7F:00:62:E6:E9:0A:17:6C:F3:F3:E6:F2:E7:BC:87:BB:18:BF
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer:       /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial:       019E31F2EA39C4F3408966B3BF760B3B776D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number:          0806
Signing time:             Sat 16 May 2026 18:01:03 +0000
Manifest this update:     Sat 16 May 2026 18:01:03 +0000
Manifest next update:     Sun 17 May 2026 18:01:03 +0000
Files and hashes:         1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
                          2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: rJW0VnKLkLeWEHk/pcBJujKUUj3KTbfJbUmfHZvXOO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f2:ea:39:c4:f3:40:89:66:b3:bf:76:0b:3b:77:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
        Validity
            Not Before: May 16 18:01:03 2026 GMT
            Not After : May 17 18:01:03 2026 GMT
        Subject: CN=717f7f0062e6e90a176cf3f3e6f2e7bc87bb18bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:20:6f:55:8a:01:22:5a:37:12:c4:11:69:52:
                    d2:43:50:b4:03:ac:a6:c4:a7:24:b3:96:29:e2:a6:
                    14:62:3f:59:1f:04:72:82:f3:7e:90:79:51:f1:56:
                    e5:cb:c8:b6:0c:74:65:99:5c:ae:40:c2:97:6f:f8:
                    fe:7a:04:90:05:d7:b1:cd:63:4a:50:a0:b3:ce:85:
                    06:c7:32:10:e2:5d:13:71:7a:dd:47:e4:de:bd:9f:
                    a5:5d:68:e5:a6:5c:15:f9:63:5a:81:76:c8:38:dd:
                    1f:28:2b:15:55:13:e9:e7:0f:7c:2b:2c:c4:61:c5:
                    cf:80:31:0f:49:53:72:65:70:5e:90:86:95:2a:82:
                    0f:c2:56:68:67:c9:55:e0:e1:19:26:5d:c1:29:f3:
                    3a:a4:ee:07:98:ac:3f:10:33:73:df:2d:65:84:02:
                    ed:34:5e:73:1e:bc:79:0d:a5:01:2b:b9:3d:c3:75:
                    48:11:90:23:c0:8e:1b:8b:25:40:e0:5b:8d:82:3e:
                    0b:fc:1c:8a:78:b7:67:a7:34:0f:24:83:81:f4:75:
                    d5:38:f9:ec:71:1a:07:af:e5:ad:51:46:f1:20:ce:
                    13:96:05:b4:fb:91:51:39:4a:6c:f1:3b:1b:ec:37:
                    ea:ad:17:b9:8b:93:1b:62:95:59:04:a5:91:84:94:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7F:7F:00:62:E6:E9:0A:17:6C:F3:F3:E6:F2:E7:BC:87:BB:18:BF
            X509v3 Authority Key Identifier:
                keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b7:34:b9:76:d9:4a:00:ab:e5:a2:b3:16:9c:47:0f:c1:79:
         50:74:e9:16:79:6b:29:12:01:1c:e5:44:50:6e:97:e1:05:6f:
         92:1d:72:1c:8a:d4:f7:6b:24:9d:7b:8b:98:a7:e1:d9:1d:be:
         31:96:c0:0f:27:c7:41:52:b2:1c:fd:c2:90:4f:9d:86:44:cd:
         39:99:0b:e2:cc:7e:75:4c:95:4c:fd:d8:1c:9c:c6:7b:37:58:
         d9:d1:8c:5a:04:98:78:fb:4b:4f:57:e0:26:46:12:5b:8a:b2:
         40:88:b7:9f:85:f5:dc:24:4f:be:ce:ba:85:9b:76:39:c0:e5:
         76:08:0d:33:6c:c7:72:d0:df:2e:24:a5:44:37:a7:5b:91:4d:
         69:97:f5:45:23:a3:dd:f8:0b:1e:bc:7c:fb:ce:d2:d8:59:88:
         d9:c9:d2:11:df:27:f5:a8:b0:c3:d4:02:1f:83:3b:97:3f:fa:
         80:d3:42:9a:64:49:e3:1d:cf:16:f3:8f:5b:06:cb:81:10:07:
         3f:50:05:37:34:4a:c9:bf:11:fc:a1:de:5a:25:f6:fa:81:70:
         52:19:8a:5f:19:38:23:41:93:11:9c:69:d6:9f:bd:e5:75:36:
         9e:f7:57:16:ca:e9:d9:96:da:e2:9b:ed:09:25:54:38:56:bd:
         4c:11:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:34:26 2026 by rpki-client