Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          Cwq3bSOmnB04/NYbcwiw2slG9BTsgKXTeKJSvtLhdog=
Subject key identifier:   AE:68:1B:AA:C7:B1:51:A3:2F:E5:82:C1:7D:6F:03:67:FF:FE:50:AC
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       019E07E40869A2995C04292D33A0D8D859F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0A31
Signing time:             Fri 08 May 2026 14:00:45 +0000
Manifest this update:     Fri 08 May 2026 14:00:45 +0000
Manifest next update:     Sat 09 May 2026 14:00:45 +0000
Files and hashes:         1: BgM7Z-hf4ZmFOJu6X5CdP5efJ28.roa (hash: 0PK12/6KwOapd3jaEkPiUknqIb57oljJN1nirZLOhCY=)
                          2: kYRR38ICq9ItDhQJiQSFEmuaZCk.roa (hash: 2GZZrZK8I9JcWijw4HIji3r5v/uDz5lVmOVbPE0wJAU=)
                          3: ospxyuscZUt12OJ3jV2ziDWVxr4.roa (hash: HK4EzYmG6c9gmfKK671rBfu/m90Pfh30a4zU8YJa+So=)
                          4: sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa (hash: ZVA4MvGdgvPLSJ8Vi9YqZCQSkNRcAKBUxh0NO1bCuj0=)
                          5: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: G1LsN4J5U4wXw2iCddpeyEey0bOpHanNpAPnb0pYUAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 May 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:07:e4:08:69:a2:99:5c:04:29:2d:33:a0:d8:d8:59:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: May  8 14:00:45 2026 GMT
            Not After : May  9 14:00:45 2026 GMT
        Subject: CN=ae681baac7b151a32fe582c17d6f0367fffe50ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:0c:1c:ba:74:e6:72:c0:a8:d2:07:20:32:
                    78:56:ab:c1:c6:46:03:cc:40:bb:c9:17:a0:d3:a9:
                    de:b7:29:2f:62:f4:84:04:90:76:86:5d:50:0c:0d:
                    f7:7e:08:3d:8f:24:af:3f:cf:23:da:bb:9b:87:ba:
                    e0:c2:b3:91:7a:1f:6e:6d:cf:05:3b:3f:d0:30:38:
                    88:5c:30:62:92:f7:f4:2f:06:7a:1f:55:2a:d7:ec:
                    1d:7a:6b:74:7d:6e:10:e8:55:37:02:a4:d0:e4:a2:
                    43:39:e1:d9:69:93:f6:32:06:5c:ec:cf:da:69:6c:
                    05:f6:30:e9:14:14:aa:c0:13:5d:86:df:5e:1c:5f:
                    9f:a1:8d:e1:ad:67:ec:d9:9a:e3:86:bf:11:e4:6f:
                    c5:7d:12:c9:62:94:49:71:5a:8f:43:f8:53:4a:c1:
                    62:e7:19:0a:56:c4:9b:9d:98:37:99:3f:3b:5f:10:
                    1a:77:c7:aa:a6:2d:6e:a6:fa:09:d1:5d:f1:79:58:
                    81:bd:6a:f0:66:b3:37:89:b7:3e:5f:05:03:79:d2:
                    52:6a:5d:af:6b:22:93:5d:ee:0d:d5:ba:ef:68:27:
                    c2:11:9f:49:2e:78:8d:8c:bf:06:4e:41:66:b5:25:
                    6d:02:c6:2c:dc:3b:c1:3e:6f:56:62:32:59:2a:1c:
                    e1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:68:1B:AA:C7:B1:51:A3:2F:E5:82:C1:7D:6F:03:67:FF:FE:50:AC
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:d6:80:1a:83:17:b3:e4:fb:fe:34:bf:05:4b:f3:dd:39:
         6d:e6:bb:86:48:8f:c1:f6:f6:74:1d:b5:7b:93:21:97:76:c5:
         2d:95:f6:79:b7:d2:e9:a9:07:41:3d:cd:92:c8:e4:40:7a:66:
         72:c3:fa:7e:62:8f:2a:71:70:86:f1:59:b3:10:7c:e6:b5:f0:
         f5:44:f6:23:77:9a:ef:d7:87:dd:3e:e3:06:40:96:72:d0:e6:
         9f:e9:4b:1f:09:09:ad:8f:ce:ab:1f:e5:f0:8d:17:cb:e2:13:
         d3:c9:dd:ab:03:c5:1b:34:e0:62:b0:fc:4b:55:fd:11:ed:f6:
         67:44:7f:d0:7f:a3:15:bf:48:43:c9:7f:66:fe:da:d0:19:15:
         1e:1d:6a:e1:1a:de:a5:25:5c:1c:0a:fd:e7:47:a4:b1:0a:19:
         ab:54:42:eb:21:2c:be:e3:14:16:c1:50:9c:e5:b9:58:af:cd:
         00:ef:9b:14:01:7b:7a:76:dd:8f:51:5f:02:5c:f5:63:19:9a:
         a7:c9:0d:93:78:39:c9:3a:b2:3e:e5:2d:0a:d8:97:3f:78:49:
         6c:e9:6a:c6:8b:4f:3e:0e:16:9c:d0:6b:5d:c8:74:cf:86:f9:
         f0:2e:42:e4:ce:14:fd:d1:fd:0d:99:e2:7e:ad:c7:8a:b9:45:
         f1:4a:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 21:31:03 2026 by rpki-client