Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File:                     Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier:          jqxuPD4IcOKerazJ3Pk7NIZvTV4OkG1EO6YekTDLn50=
Subject key identifier:   EE:ED:0E:E9:BC:30:BE:4E:BE:65:07:A4:C6:98:67:3A:76:BC:C0:77
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer:       /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial:       019F1C0E29C230823A43FE4031D7866437DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number:          10EA
Signing time:             Wed 01 Jul 2026 05:01:57 +0000
Manifest this update:     Wed 01 Jul 2026 05:01:57 +0000
Manifest next update:     Thu 02 Jul 2026 05:01:57 +0000
Files and hashes:         1: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: s6jBFYKyNTrCFAXgmPIPaUyRBeRBpc6cwx7Lf0nURB0=)
                          2: yeEabSTnkLeywBVAwxOdpvb42Eo.roa (hash: PvqV+kMqmAte8XfLn6bjSK6JChkDgm/iDFgeeMv/yOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1c:0e:29:c2:30:82:3a:43:fe:40:31:d7:86:64:37:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
        Validity
            Not Before: Jul  1 05:01:57 2026 GMT
            Not After : Jul  2 05:01:57 2026 GMT
        Subject: CN=eeed0ee9bc30be4ebe6507a4c698673a76bcc077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:02:09:1d:6d:47:f1:81:6f:cb:7b:90:ad:
                    b1:6a:ab:67:5f:b8:45:56:22:ad:8f:aa:20:23:40:
                    0e:1d:d2:b1:6b:70:df:cc:13:14:b4:30:b7:6c:f9:
                    09:f7:9f:fd:dd:73:84:38:ae:6e:63:62:cc:c6:ee:
                    57:72:07:f8:c3:65:8e:91:d2:b0:7d:03:e8:6a:62:
                    a6:d0:42:2c:d1:7b:30:0b:2b:0a:3a:8f:3e:44:c2:
                    67:ab:44:9e:0a:17:7e:8c:1a:2a:19:46:26:db:33:
                    a4:41:82:e4:24:e2:84:ab:66:9d:67:01:c8:aa:14:
                    16:bc:04:c1:c7:fa:55:f3:44:e6:b4:1a:85:49:e0:
                    57:4d:fb:f7:1e:fc:2f:03:bd:92:a0:2f:58:76:4f:
                    05:55:64:3d:10:e4:85:db:2f:d5:07:37:91:58:5c:
                    0e:f0:84:39:75:82:25:0e:ec:c1:fa:d8:81:d8:5a:
                    d9:26:81:39:2b:69:47:13:b9:d6:2b:30:38:e4:da:
                    71:f7:62:12:ae:49:0b:37:44:05:32:b9:99:13:34:
                    27:2a:4d:43:98:15:c3:f3:42:f8:8b:88:6e:e9:20:
                    48:4d:dc:14:4a:cd:2c:9b:21:b0:7c:70:a6:fc:44:
                    2e:8e:94:66:c1:d7:c1:30:b1:34:29:b6:a4:75:99:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:0E:E9:BC:30:BE:4E:BE:65:07:A4:C6:98:67:3A:76:BC:C0:77
            X509v3 Authority Key Identifier:
                keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:68:4e:4d:7a:67:2b:09:1e:cb:f6:c6:0d:a3:4d:1c:30:b4:
         cb:83:3a:02:bb:e8:dd:12:58:70:98:17:d3:e7:62:44:04:dc:
         af:28:38:9a:10:b5:11:29:5c:9e:15:a2:01:76:ed:00:c9:48:
         d5:7d:b2:28:a5:b3:93:0f:cf:97:e2:c1:14:62:63:c2:49:9f:
         d0:c3:5d:93:3c:86:03:55:85:63:ed:89:c8:3c:ce:65:d7:22:
         45:6a:3b:55:7a:4a:27:9d:fb:04:f3:5c:bf:24:8a:03:4b:62:
         5b:40:04:16:83:e7:da:b4:d7:ec:97:f0:1c:69:b6:80:95:fa:
         67:fe:03:d9:36:08:9b:a2:70:e5:82:2a:d8:1a:85:c8:e4:81:
         57:22:7c:a5:c5:88:2a:a1:f4:80:7f:81:bc:8b:ec:6c:04:32:
         b9:e8:9e:06:ca:87:0e:fd:94:f3:db:a2:e8:ed:2d:b4:93:73:
         8f:af:67:26:2e:a5:7f:55:f5:10:c6:73:27:42:25:4e:7f:64:
         03:17:fa:87:bc:8a:d6:fe:b2:dc:c7:4d:83:2c:f9:b7:cd:7c:
         a4:2a:80:e1:33:34:0f:b7:2b:26:c0:f2:d3:42:be:44:6e:06:
         81:50:80:4e:1c:39:ad:2a:75:7b:a8:20:5a:23:f3:4c:f8:83:
         80:84:8a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:45:06 2026 by rpki-client