Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File:                     XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier:          6vU0WP6I+WCAfO1KSDJknwkb4X2ixFN5DiRmTGQETFs=
Subject key identifier:   27:39:5D:63:38:FC:32:B7:B5:2B:95:36:18:35:EE:CF:A0:20:0B:12
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer:       /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial:       019E32979F49CA92A009CD8ADB54757559CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 21:00:57 +0000
Manifest this update:     Sat 16 May 2026 21:00:57 +0000
Manifest next update:     Sun 17 May 2026 21:00:57 +0000
Files and hashes:         1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
                          2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: 8TfhNfG/MqTo7ElkjplV/OLDPp/sqjA7cDp5jEggnzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:97:9f:49:ca:92:a0:09:cd:8a:db:54:75:75:59:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
        Validity
            Not Before: May 16 21:00:57 2026 GMT
            Not After : May 17 21:00:57 2026 GMT
        Subject: CN=27395d6338fc32b7b52b95361835eecfa0200b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:3b:f9:24:f6:c5:d8:c2:a5:d7:b7:34:c7:
                    42:a2:34:45:32:c9:90:be:71:05:d2:b2:2e:09:b3:
                    d2:e1:fa:52:98:44:5e:9e:02:21:57:30:43:21:a2:
                    b0:c6:f0:06:34:2d:0a:d0:c0:9c:f2:b6:63:26:79:
                    91:6b:b9:b1:49:62:f0:9b:24:eb:d0:d5:6d:97:b5:
                    ef:d6:14:d5:df:5c:06:91:b6:cd:e0:62:fb:fa:cf:
                    d5:13:01:27:a3:e3:5a:81:e0:4e:7a:6f:91:dd:ca:
                    55:37:5a:e1:d1:cf:80:42:5b:a5:47:6a:d7:04:04:
                    ba:d9:66:ba:63:8e:f6:1d:14:a3:67:75:75:eb:85:
                    97:3d:0c:66:cd:89:b2:3e:03:55:45:4b:5d:b0:fb:
                    51:bc:9c:f5:1e:b4:96:54:cb:2c:3e:6e:8e:e5:66:
                    94:ea:8d:a6:35:c7:e3:99:86:3b:e1:b1:c0:2d:c6:
                    00:c5:9d:1f:74:01:2c:71:0e:34:99:6e:02:49:58:
                    38:74:a5:e4:7e:74:3f:fb:a2:dc:4b:db:d2:66:f9:
                    9f:cd:2c:33:88:a6:dd:59:96:c5:93:2e:35:c1:19:
                    b4:78:7b:72:ce:1a:e2:41:2e:5c:46:0d:a3:aa:b8:
                    4d:89:ae:49:97:2e:6d:70:db:f9:8e:df:33:4d:11:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:39:5D:63:38:FC:32:B7:B5:2B:95:36:18:35:EE:CF:A0:20:0B:12
            X509v3 Authority Key Identifier:
                keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:af:78:29:f8:a0:fa:f9:7e:e4:82:22:49:52:e9:46:95:
         f8:51:40:2e:7f:4a:e4:49:c4:25:86:c3:51:f2:cd:a5:9e:91:
         dc:59:ec:45:56:ea:9f:b7:ac:21:d5:82:90:3b:58:b9:11:8b:
         be:dd:6b:3e:97:2c:b4:12:2e:29:47:4d:5f:32:55:99:2c:e0:
         76:fc:d7:f8:d2:7d:f1:70:51:6d:aa:2d:93:c2:06:5a:30:39:
         a3:86:60:f4:9b:12:e7:e4:27:0b:a4:ed:71:9d:d5:03:b6:bf:
         de:5c:ad:a5:7d:fe:06:04:97:74:76:6f:81:e6:b3:ae:27:80:
         d5:f6:cd:4d:11:22:2f:9a:ec:fd:42:76:87:5d:45:75:43:0a:
         fa:a8:f7:04:f5:f0:6f:d0:11:bc:19:23:8d:92:f4:9b:ce:b7:
         5d:3b:48:3a:b9:58:33:40:aa:ff:37:f4:c5:e6:70:ed:79:58:
         bb:3d:47:4f:0f:c2:2f:7e:03:49:1b:6f:60:d6:f3:5b:b8:80:
         78:d4:7b:af:a0:6d:87:a4:78:d8:9d:8a:61:e3:25:ed:83:22:
         a2:0b:75:df:80:25:35:0e:f0:db:93:21:87:f4:62:19:f3:03:
         8c:6f:36:78:10:d2:d3:d7:80:c4:d9:49:58:20:16:ca:09:0c:
         fc:cf:4a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yl59JypKgCc2K21R1dVnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjk1M2RiNDg0MDRiMGM2NmExNWYwZGE2ZWZhN2ZhYzBh
OTM2OWUwHhcNMjYwNTE2MjEwMDU3WhcNMjYwNTE3MjEwMDU3WjAzMTEwLwYDVQQD
EygyNzM5NWQ2MzM4ZmMzMmI3YjUyYjk1MzYxODM1ZWVjZmEwMjAwYjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs87+ST2xdjCpde3NMdCojRFMsmQ
vnEF0rIuCbPS4fpSmERengIhVzBDIaKwxvAGNC0K0MCc8rZjJnmRa7mxSWLwmyTr
0NVtl7Xv1hTV31wGkbbN4GL7+s/VEwEno+NageBOem+R3cpVN1rh0c+AQlulR2rX
BAS62Wa6Y472HRSjZ3V164WXPQxmzYmyPgNVRUtdsPtRvJz1HrSWVMssPm6O5WaU
6o2mNcfjmYY74bHALcYAxZ0fdAEscQ40mW4CSVg4dKXkfnQ/+6LcS9vSZvmfzSwz
iKbdWZbFky41wRm0eHtyzhriQS5cRg2jqrhNia5Jly5tcNv5jt8zTREAvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCc5XWM4/DK3tSuVNhg17s+gIAsSMB8GA1UdIwQY
MBaAFF1pU9tIQEsMZqFfDabvp/rAqTaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQt
ZmEyZmI5NGRhMWEyLzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQtZmEyZmI5NGRhMWEy
LzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLyveCn4
oPr5fuSCIklS6UaV+FFALn9K5EnEJYbDUfLNpZ6R3FnsRVbqn7esIdWCkDtYuRGL
vt1rPpcstBIuKUdNXzJVmSzgdvzX+NJ98XBRbaotk8IGWjA5o4Zg9JsS5+QnC6Tt
cZ3VA7a/3lytpX3+BgSXdHZvgeazrieA1fbNTREiL5rs/UJ2h11FdUMK+qj3BPXw
b9ARvBkjjZL0m863XTtIOrlYM0Cq/zf0xeZw7XlYuz1HTw/CL34DSRtvYNbzW7iA
eNR7r6Bth6R42J2KYeMl7YMiogt134AlNQ7w25Mhh/RiGfMDjG82eBDS09eAxNlJ
WCAWygkM/M9KAA==
-----END CERTIFICATE-----
Generated at Sun May 17 05:13:05 2026 by rpki-client