Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File:                     XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier:          6CGMt4IpbB0k0BM22T7a3IKKPrriIA/KjuXfyITM4U0=
Subject key identifier:   D3:09:32:4B:97:75:F4:4A:28:A3:12:7B:33:38:1B:42:27:0E:A5:B3
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer:       /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial:       019E91018624CC389A58BB32FCF3DEB29123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number:          11A0
Signing time:             Thu 04 Jun 2026 05:00:56 +0000
Manifest this update:     Thu 04 Jun 2026 05:00:56 +0000
Manifest next update:     Fri 05 Jun 2026 05:00:56 +0000
Files and hashes:         1: Huv8_F7CU0_Jslnzwh9x9lhwpc0.roa (hash: que/wANCXPBVboi+Ao6/Mhrzm4uO58lF/bE0KnuyKBc=)
                          2: TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa (hash: rGtYPfugPBoAr+vznSLu3abrcQ5ZUu7nfMCulcJMbYg=)
                          3: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: bB9D0BmRaLe7oceQNMZL8cK3tvAlF5PuaryD6hNz5mw=)
                          4: YcTggkw1dIIwon9zpxmI36qcgzY.roa (hash: hJIPq4cJhvmtr5AA2Y+pzfZ+vAbq2fL2IZZMCvtTNqY=)
                          5: qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa (hash: ABpLHA3uxkTxF69tefDioKBR4SIb/ghL74K+XaKX/Ag=)
                          6: wDhMGJ9NzXfEad9sT6Le_xs3iaE.roa (hash: zPKoEOiN3uariB64Rf296KkD/lWfDnDeFg2GGweepII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:01:86:24:cc:38:9a:58:bb:32:fc:f3:de:b2:91:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
        Validity
            Not Before: Jun  4 05:00:56 2026 GMT
            Not After : Jun  5 05:00:56 2026 GMT
        Subject: CN=d309324b9775f44a28a3127b33381b42270ea5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:48:b6:cd:4a:99:f8:d6:64:d4:dd:d1:de:
                    16:7b:09:b5:5f:4f:50:fe:c7:ea:5a:1c:33:6b:c3:
                    36:2e:b7:05:3e:f3:68:fd:24:62:f9:6f:0c:53:99:
                    c6:29:2f:ad:9d:95:39:89:22:f2:03:d7:bc:1b:3f:
                    fa:f5:7b:8d:b7:2c:33:6f:c2:2a:13:8f:be:83:f2:
                    3a:3a:56:39:27:ea:ea:1b:21:04:80:b9:9a:2c:3a:
                    98:e5:91:75:6a:80:7e:ed:82:60:91:fa:2f:09:18:
                    40:db:b4:9b:b9:7e:d2:18:81:42:c7:16:09:9c:cb:
                    b6:5b:33:a0:9b:57:f0:ae:12:54:17:03:4f:48:14:
                    ba:61:f9:81:db:03:9b:8d:7e:49:d7:8a:03:8d:ac:
                    e6:04:ea:c6:c5:21:0a:d4:12:f1:4b:a5:2d:3f:fa:
                    85:9f:4f:53:5b:28:c3:01:92:c5:20:d3:90:d5:67:
                    bd:fb:58:db:02:ed:1d:1a:5d:48:0f:f1:1e:ee:75:
                    c1:22:64:7e:0b:5e:68:73:90:69:d2:fc:37:05:73:
                    12:c7:21:98:cc:a7:f1:a8:4b:e6:89:f5:f5:c1:1b:
                    46:7c:eb:67:39:1e:92:56:47:37:95:04:dc:00:18:
                    3e:31:be:7c:d1:8d:f7:5f:a8:81:a6:14:55:ea:b0:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:09:32:4B:97:75:F4:4A:28:A3:12:7B:33:38:1B:42:27:0E:A5:B3
            X509v3 Authority Key Identifier:
                keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7d:03:53:98:49:82:53:6d:4e:9d:32:fd:2f:ce:50:d6:09:
         cd:48:ba:61:8c:d6:c6:0c:83:44:a5:c0:0a:60:6f:2c:3c:b8:
         d9:a8:24:fb:d2:08:6f:57:5b:94:54:38:d5:86:4b:5c:8d:f0:
         22:98:58:33:59:70:88:0b:8e:db:62:81:02:f0:2a:db:76:94:
         02:f3:30:7f:69:f1:94:db:92:07:21:44:5a:37:74:2f:21:bf:
         c6:01:53:3c:1d:58:b4:31:39:9f:9a:0f:46:3e:1e:f3:6f:58:
         2c:57:a1:77:42:a2:c7:ef:c6:a8:bc:d0:d0:69:9d:3f:4f:fc:
         55:a3:ed:d8:4e:7f:2e:42:12:42:7f:4e:d7:a4:f8:37:ad:ad:
         d0:a6:48:a1:66:89:85:4f:71:17:af:49:d1:05:9d:53:f0:3e:
         ce:48:af:44:23:d6:29:21:03:22:df:33:97:09:2a:80:8e:04:
         2e:65:58:32:35:54:02:dd:5f:49:22:f8:b7:6f:ac:60:71:62:
         13:7d:52:32:2b:75:9c:07:21:a4:8d:d5:21:6f:9a:24:ec:2f:
         c1:11:5d:fd:2b:46:59:3d:4a:99:7f:30:f4:4b:f5:2f:1d:14:
         7d:3e:eb:d9:70:4d:9f:b1:f0:26:6a:c6:ce:3f:d1:48:f5:be:
         72:b0:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:03:36 2026 by rpki-client