Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          966wRf5rnwerMM+Q55fLVMTIM3khzRqIrm6+hDuO4l8=
Subject key identifier:   12:D4:48:11:2A:EB:56:30:6D:A4:63:88:6E:01:73:9B:A2:62:87:9B
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       019E31BC51AA32144958977C080FD46853C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 17:01:25 +0000
Manifest this update:     Sat 16 May 2026 17:01:25 +0000
Manifest next update:     Sun 17 May 2026 17:01:25 +0000
Files and hashes:         1: 4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa (hash: +7cyCy/NdgEzdqXIvMYXBG6PX6qWy1L3JHGAtDMeS30=)
                          2: IVJmRlo_N7uujpHOQ1PY0oGuwPE.roa (hash: HId6QIpCvryq7pzO2cSpzlsjWi8B2cu2NyD1dmCRRqc=)
                          3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: 0rYU5RXEuPJJq3rQrlcCcgwnr1VQM9G0x49lk1tqp0s=)
                          4: YU7DQQUK3WS2GF1fwXGzic4CVRE.roa (hash: 5Kaf0g8MgSwJ+dws3X5JQrcvkrcgCUQzsjR1OpBYhtw=)
                          5: cJHyNL6n_BStyxq8HQ3hJvNAMq4.roa (hash: V4roFS8vi9SUabC+vIIX/fQMu7+uk5jkREg7A/YHemc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 17:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:51:aa:32:14:49:58:97:7c:08:0f:d4:68:53:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: May 16 17:01:25 2026 GMT
            Not After : May 17 17:01:25 2026 GMT
        Subject: CN=12d448112aeb56306da463886e01739ba262879b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:bf:97:e9:9d:fb:25:c9:09:ff:54:49:73:
                    0e:8d:8d:a3:c0:9e:51:3c:fb:7b:8d:06:f6:ff:b8:
                    bc:80:18:9a:48:c0:ab:32:c9:8a:f9:07:5c:96:02:
                    4d:bc:58:1c:ec:ec:e7:a7:7c:85:9d:f8:f7:c2:45:
                    11:82:98:c1:cd:8e:3b:95:a4:0e:c2:9e:b1:50:e2:
                    6b:d8:76:09:e1:c1:7a:59:25:67:29:03:5a:b7:9f:
                    e3:6b:53:ae:23:10:e2:39:e5:a9:be:b8:d8:54:b6:
                    c6:00:0c:b1:2d:34:5f:49:3a:f8:21:88:84:f8:9c:
                    c1:d0:b8:b2:b2:07:d7:a0:2a:df:c4:2a:cb:3f:8a:
                    d1:6a:10:af:b5:d7:67:cf:2d:96:6c:de:f3:03:be:
                    11:33:f8:cd:31:d4:3f:3a:cd:89:51:3c:ff:9e:75:
                    7f:71:de:f3:eb:1e:0a:c4:0a:2c:6e:22:dc:b3:f0:
                    69:e2:c4:3d:b0:2d:c5:18:6e:05:8e:45:33:50:ed:
                    b5:d5:95:50:09:fe:e8:35:4f:41:bc:30:88:8c:bf:
                    0f:eb:72:52:95:95:bd:26:92:ad:72:4a:5b:ee:7e:
                    6c:de:c1:82:c0:c0:81:3f:12:c5:1b:1a:cf:60:da:
                    dc:76:be:a5:c8:eb:d1:bb:7f:7f:d1:87:1d:5c:96:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D4:48:11:2A:EB:56:30:6D:A4:63:88:6E:01:73:9B:A2:62:87:9B
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:e9:7f:7c:8c:58:35:ff:ba:38:d5:2c:b9:d9:ed:22:e6:
         d5:01:e6:3b:87:c7:6b:0f:e1:7d:01:4b:13:1b:b1:82:96:17:
         cf:48:a4:39:45:12:0c:65:f8:16:4b:74:ee:fb:57:52:e7:37:
         02:1d:b1:fb:38:66:b2:e3:b1:79:a2:a0:47:da:5a:e9:f4:06:
         6e:06:03:f4:69:34:0f:39:f6:e3:90:66:5a:94:54:e6:21:e8:
         fd:76:4f:6d:11:cf:68:2d:6d:55:78:bb:71:f2:98:68:45:3b:
         df:6c:71:2d:14:25:84:5b:dd:1a:7a:2f:40:1d:6c:53:e0:d5:
         53:e4:fd:c3:76:77:46:84:1e:c1:10:6b:47:eb:32:15:8b:0e:
         02:92:14:66:a7:9d:0f:05:fb:3f:e0:4c:39:08:70:78:ee:6f:
         41:e6:42:9e:06:62:c8:d3:48:23:90:93:da:68:1a:42:cb:cc:
         c6:6b:6d:f5:07:63:8c:c8:ff:ad:76:8f:4f:76:74:f6:10:4b:
         7b:86:c2:90:ee:07:4a:c3:4a:d6:3c:46:92:f5:d8:68:18:40:
         e4:dc:70:88:66:6f:0a:b5:97:c6:3b:f2:75:1a:cf:47:01:0e:
         c5:8e:01:8e:e6:b8:9b:ce:9d:95:a0:86:06:34:fc:84:0e:3b:
         68:82:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:13:02 2026 by rpki-client