Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File:                     Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier:          nOZNuwyRX3jsuMW4bgkuZU2Btg2PXqnpREChrO17iCM=
Subject key identifier:   01:AC:D5:02:17:CB:89:AC:05:07:E2:F6:09:56:0D:80:DE:8F:3B:35
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer:       /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial:       019D382DE5DD7658BDC16E36BE365D80A172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number:          105F
Signing time:             Sun 29 Mar 2026 06:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:25 +0000
Files and hashes:         1: IRKwCUFzai38fr65-FRH_xYS0jI.roa (hash: oO+4buqTDLcCJZOc7fvRD7YLk4AQs3LNbZe5FzwGorY=)
                          2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: D0J7Ap6cJLmPQayjLuY4RSjTLue6l1afMglzB2VFXV0=)
                          3: egWOQdMCICFVY-fSqkSUyufqt9w.asa (hash: KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=)
                          4: vUk1yzbPE2A9Gnc0-jOrueIo8U8.roa (hash: wjQObjyuEr0IkcfHoRoWEyYlXC6f2flFY08zOUVyRWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:e5:dd:76:58:bd:c1:6e:36:be:36:5d:80:a1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
        Validity
            Not Before: Mar 29 06:00:25 2026 GMT
            Not After : Mar 30 06:00:25 2026 GMT
        Subject: CN=01acd50217cb89ac0507e2f609560d80de8f3b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:a5:4b:7b:52:f5:45:91:bc:18:37:16:0e:
                    df:54:6f:12:09:50:4b:f9:62:b4:65:23:0c:77:fa:
                    28:c2:02:30:8e:89:00:ea:39:f6:6b:2e:d3:19:68:
                    50:67:b1:5b:df:3b:e0:df:c5:a0:7c:61:bc:2f:7c:
                    8f:c6:96:56:7c:21:ac:ac:90:51:73:cb:c4:1a:db:
                    37:f5:37:f2:91:42:29:23:54:5c:ee:fe:75:22:9a:
                    e8:8b:86:8c:26:79:c8:19:62:a9:2f:82:34:87:e4:
                    93:15:4c:d7:74:b1:13:1a:5a:6f:f1:bd:43:70:c2:
                    d0:ce:6a:0b:b8:10:b9:8b:89:70:8d:21:5e:28:fa:
                    9b:13:e5:c7:d9:6e:eb:c1:46:54:e4:9f:91:4f:61:
                    f6:17:1d:ed:63:17:cc:33:70:f7:d4:32:38:63:44:
                    d6:df:1f:c3:39:11:bb:8f:4c:ee:67:43:71:60:63:
                    46:be:37:9d:69:28:e2:8e:22:c9:73:0d:58:5a:b1:
                    34:ae:3f:bc:74:e8:69:77:28:40:b7:49:2b:84:6e:
                    95:86:16:8d:aa:37:3f:50:89:62:e2:66:fe:ee:7a:
                    02:34:f9:7a:7c:9a:2a:9c:2a:57:db:68:46:24:3c:
                    36:0f:b3:64:dc:b0:c6:c0:0b:52:af:04:d6:63:ca:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:D5:02:17:CB:89:AC:05:07:E2:F6:09:56:0D:80:DE:8F:3B:35
            X509v3 Authority Key Identifier:
                keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:52:55:9d:c7:57:55:44:16:d5:7e:b2:8f:ec:6b:55:b1:fd:
         2e:7b:2a:1e:fa:67:46:43:7e:2a:8e:05:15:f2:e9:f4:20:02:
         ae:db:b8:74:1c:8a:a1:7d:94:c8:74:f7:e2:79:10:61:36:52:
         08:72:3a:04:30:59:b6:de:a6:e3:25:2a:4d:0c:3f:66:47:d0:
         fa:36:55:bf:27:32:26:ab:f9:10:9a:f0:05:c6:3d:92:cb:07:
         11:bc:39:2a:93:b2:0e:f2:cc:af:bf:ed:d3:25:0f:1a:d6:99:
         fa:cf:0a:45:1f:13:ae:a2:13:f1:a7:d8:05:4a:4f:bd:07:01:
         41:19:42:80:26:1f:ef:7c:ce:fa:4f:d4:9b:5d:9d:2f:bc:69:
         f7:97:6b:97:99:18:5f:f9:ae:9f:d1:14:72:28:f1:dd:65:66:
         65:6d:99:0c:b5:a8:f1:32:41:71:4f:d0:2a:26:3e:0e:26:1b:
         cd:b3:1b:04:7a:30:b8:b4:f5:f0:82:66:22:c5:62:46:4e:57:
         c9:fa:9a:62:74:30:c5:f4:f1:89:b1:1c:dc:3e:5b:fe:94:da:
         7a:d7:b0:6d:fc:8a:21:d4:d8:09:47:13:ca:d2:a1:25:11:89:
         c0:6d:23:8e:5c:36:3b:d7:9b:6a:98:f0:8b:b8:9c:a7:19:ff:
         a7:9e:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:51 2026 by rpki-client