Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          tPLO9RthBXA0cUewO3LiO4VnVh93S9m/c177YkDpSIU=
Subject key identifier:   B5:02:63:B7:48:C7:E4:23:88:C3:5D:77:0F:11:FF:94:48:85:E8:4D
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       019DFB0427ECD38DD299A1BDF77A115933E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          0A79
Signing time:             Wed 06 May 2026 02:00:46 +0000
Manifest this update:     Wed 06 May 2026 02:00:46 +0000
Manifest next update:     Thu 07 May 2026 02:00:46 +0000
Files and hashes:         1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: Mcl1hDhuCmSWFpk7/Vz+gttrUVpZ8A+aBEet92W5sc0=)
                          2: JjNsdw31mkopTJEXLbd7F3jftjY.roa (hash: DFuBhTTsIvaSw7xpZBBqOn0fJhT7O4EMyfeXK8BYOr4=)
                          3: Z3vCIqOr8cFIHfCAG87UHRnj4gs.roa (hash: Nj8uppubigdG8cIGJW1LyHCqaPIHngDL7HFSlaeDITs=)
                          4: jN1MNJJzz6nkhurADJXEP9ytqmM.roa (hash: GRqEsDxhV3ugvj9OHpXpUsMc7ljdeWmRso4kAcjjsao=)
                          5: omXxQha0HM-pJ0TV0_0uSHRjPXE.roa (hash: Jj3CyBugiBkfT/V/5P2VA5GoJM48HMeye5aq9QG9uls=)
                          6: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (hash: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fb:04:27:ec:d3:8d:d2:99:a1:bd:f7:7a:11:59:33:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: May  6 02:00:46 2026 GMT
            Not After : May  7 02:00:46 2026 GMT
        Subject: CN=b50263b748c7e42388c35d770f11ff944885e84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:da:a6:1a:63:ff:9a:9d:c4:f3:2b:f0:be:
                    2a:6c:40:42:54:c6:a9:87:1c:37:e1:d9:50:4c:73:
                    b8:fa:ab:33:32:28:88:22:6a:20:bd:be:b5:7e:a3:
                    a6:2d:1b:6a:96:18:8d:b5:d4:22:8b:e6:47:a2:87:
                    73:f7:ca:7c:10:08:e0:14:cc:d8:00:67:b9:cb:3f:
                    24:45:1c:0b:b8:d4:b8:19:28:2e:cd:95:79:b2:92:
                    49:f1:39:08:07:6b:be:89:61:52:32:2b:9b:5c:bd:
                    d0:cc:70:de:c3:dc:5a:64:97:cd:19:8a:63:46:5a:
                    91:69:b8:26:f2:c7:da:92:42:5c:16:9a:56:99:e3:
                    cc:ff:95:9d:dd:98:9a:81:21:01:fb:ea:9f:cb:5f:
                    45:06:10:0a:40:9e:6d:4d:f5:3b:86:d1:4d:ad:b4:
                    02:cd:e2:87:30:82:a7:bd:d1:b8:bb:18:4f:39:5a:
                    a9:87:2d:ef:85:13:79:28:a0:a8:aa:b5:18:2d:4f:
                    30:2f:92:3c:44:cf:75:3d:ce:42:cb:4e:e7:88:55:
                    18:55:7a:bf:a1:8f:de:58:d7:06:c3:76:cd:72:14:
                    29:e9:12:dc:64:f0:8f:ba:b7:fb:42:03:78:9c:e6:
                    4c:b5:ff:14:4a:55:ec:7b:f6:82:2c:36:88:4a:38:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:02:63:B7:48:C7:E4:23:88:C3:5D:77:0F:11:FF:94:48:85:E8:4D
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5e:54:8e:c0:5a:6e:38:f4:bf:f2:33:a0:32:a0:81:ce:ed:
         4c:7a:12:51:c8:60:f2:92:02:f2:70:a8:24:10:50:f3:08:07:
         a6:24:04:fa:85:5f:d2:03:6d:53:10:83:93:f3:4f:a4:d4:f5:
         64:c8:58:99:c5:81:74:01:ae:a7:a2:ba:55:fe:0a:02:ea:31:
         86:97:d6:06:cd:32:a9:44:55:7a:25:fa:4d:bc:0c:b6:3e:80:
         0e:0b:09:b7:c2:88:e6:9a:b1:f7:2d:2f:2b:73:e4:51:0a:9b:
         bc:a8:ae:94:d9:e8:12:3a:2d:e9:f8:b6:6f:94:0d:f6:90:cf:
         d4:26:64:85:3a:ba:77:b0:fa:b6:c6:68:8e:a2:06:e6:49:c4:
         38:03:46:a3:fa:a5:17:1d:a2:75:d3:34:66:50:98:c9:89:30:
         f2:6b:69:fd:0b:54:52:c3:28:e6:d9:5f:3b:00:a9:29:c6:e4:
         22:b7:25:6c:22:2a:26:e8:f9:11:6d:89:4b:47:a6:53:12:c2:
         2d:0f:f4:2e:c8:a2:80:07:89:c1:80:1d:f4:eb:a4:52:7d:01:
         24:86:ef:b5:14:a8:8b:e9:c5:e3:96:ab:46:a9:a5:32:c9:c3:
         d3:64:6b:92:47:9c:d0:56:d7:e7:3c:d7:d8:14:c6:82:bd:d4:
         98:7b:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:12:07 2026 by rpki-client