Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          EGUhJQs/fo34eV/DioWberE6K6wFVGMxuAsIv2oDC/o=
Subject key identifier:   23:91:73:98:BC:C1:C0:CD:88:0F:83:1C:37:0A:95:09:3A:ED:74:3B
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       019EB98F5FA58740A1447E07672DB34AE8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          0837
Signing time:             Fri 12 Jun 2026 02:00:41 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:41 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:41 +0000
Files and hashes:         1: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: MJOX1IRlBEZoCvOyf3o7jV/BwIrBwWLqR0MGhfZ8V9Q=)
                          2: ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa (hash: 3TzGgdPPeRvq5m4XrgUnNCdTHF2ADSRfiiLFr+IcrFs=)
                          3: e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (hash: hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=)
                          4: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (hash: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:5f:a5:87:40:a1:44:7e:07:67:2d:b3:4a:e8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Jun 12 02:00:41 2026 GMT
            Not After : Jun 13 02:00:41 2026 GMT
        Subject: CN=23917398bcc1c0cd880f831c370a95093aed743b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:7c:8c:57:55:7a:ed:e3:1d:47:1f:29:8c:
                    66:93:b7:c4:9d:cc:63:26:49:04:76:76:c6:ea:13:
                    fc:25:b1:51:c2:e4:ca:92:88:d1:07:01:9e:c6:5a:
                    e7:83:af:dd:54:b0:a9:45:da:d2:0c:4c:bd:72:8a:
                    c1:5c:cf:dd:61:90:fb:3f:9f:8d:e2:d8:06:c5:db:
                    1c:b9:83:d0:cf:60:e3:f5:45:09:cb:bc:66:8f:a0:
                    e7:1a:73:bf:81:22:e5:a5:51:51:0c:21:68:2c:35:
                    2a:eb:65:7b:d5:eb:5f:6a:d6:09:53:99:bb:d2:bc:
                    0a:7d:a6:de:1d:9b:15:6c:52:7f:4a:da:66:80:ee:
                    c4:cd:ab:08:0a:54:dc:18:a6:c0:42:16:a6:8f:72:
                    d2:af:5e:4c:52:c8:2b:a4:47:05:39:db:4c:62:1b:
                    d3:36:bc:2b:f5:52:55:ab:02:35:00:f8:2b:17:33:
                    96:2c:e6:65:86:d0:d5:a7:36:2f:32:59:c5:39:f7:
                    61:db:ea:45:a9:84:fa:7a:d9:39:c5:b8:a8:cd:9a:
                    25:47:43:aa:d1:2a:50:6b:8c:a7:74:16:70:36:37:
                    1b:3d:6a:1f:a1:01:64:4b:d2:d6:a1:ea:fa:e0:20:
                    51:d8:e4:44:a3:43:b8:17:27:38:ff:fc:f2:b2:5d:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:73:98:BC:C1:C0:CD:88:0F:83:1C:37:0A:95:09:3A:ED:74:3B
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:fe:5e:85:c5:3e:a5:c7:d8:1c:c7:7d:e2:ec:6e:5a:f6:
         a2:50:3d:35:e8:4b:32:20:69:59:9f:9c:ce:26:60:db:ab:ed:
         e7:f8:5f:84:e3:50:39:c6:e5:23:c0:68:73:db:04:9e:f6:20:
         b6:86:da:4c:fe:39:78:fb:c5:60:2e:a2:25:2b:32:e7:5a:7e:
         ae:8a:b3:f0:3b:a7:42:82:a9:a6:00:60:53:e3:e9:8d:69:3d:
         e5:ca:f2:93:db:ab:ff:c6:15:1b:36:ba:0e:73:b9:c3:47:22:
         b7:a9:d3:9f:52:f3:46:2e:ad:dc:5a:8a:06:d8:1d:10:0c:3c:
         65:c5:68:27:a6:76:f0:0c:db:46:19:94:82:5e:9c:10:f5:a4:
         6e:29:ec:3e:1c:54:5c:58:5f:8d:2b:ea:46:61:da:6e:61:21:
         37:e5:9c:e3:ba:48:b1:d2:a7:cb:9c:c3:20:f7:9a:e5:ba:da:
         8e:b8:41:2a:e9:75:f0:55:dd:b5:64:5f:fa:e8:18:27:6c:42:
         f6:8b:8c:ba:ca:2b:17:b5:c0:ed:3e:f8:85:0e:2f:0a:3e:c8:
         3c:2b:d7:5f:b8:4e:44:81:58:f3:92:b4:c9:93:c0:a6:df:d8:
         bb:60:0b:99:07:42:2c:a2:12:23:a1:d0:73:d0:ef:aa:3c:0d:
         40:1e:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:39:01 2026 by rpki-client