Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File:                     xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier:          BY+2P2vZ1M07mt2l/iJte6Gl+XN/r74rz+4M9Z0dDvw=
Subject key identifier:   E1:D6:87:34:83:50:C7:43:5A:E4:D5:DE:07:3E:5C:B3:AF:14:0C:CE
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer:       /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial:       01A08B68306C3CB74AEBDA18E087DFD6ADA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number:          062D
Signing time:             Thu 10 Sep 2026 13:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 13:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 13:00:56 +0000
Files and hashes:         1: KzL1NrpF1fIv1UZ-w1843U42opY.roa (hash: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM=)
                          2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: FpuVRetwWJ4eXrAv6tKXpw315lNVmSGFbVrsn0zMmSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:30:6c:3c:b7:4a:eb:da:18:e0:87:df:d6:ad:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
        Validity
            Not Before: Sep 10 13:00:56 2026 GMT
            Not After : Sep 11 13:00:56 2026 GMT
        Subject: CN=e1d687348350c7435ae4d5de073e5cb3af140cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:4f:40:3d:32:0f:51:59:00:50:2c:a6:57:
                    36:e6:43:20:27:9f:8e:59:bf:94:e9:ab:9a:fe:0d:
                    16:be:d8:3f:db:0e:ac:cc:16:b0:3c:8d:0c:35:f3:
                    4e:31:13:a2:1f:f2:59:cc:c7:87:6f:fd:54:46:e7:
                    85:36:b9:39:17:0f:e1:8b:59:1d:75:ec:89:59:56:
                    c8:dc:f9:e0:9a:8f:00:ce:ae:51:a8:86:d0:4a:03:
                    80:e1:67:c3:91:b3:bb:75:be:0a:7f:bc:3d:8e:db:
                    72:21:80:dc:2c:10:57:bc:b8:15:7d:d5:95:23:90:
                    6b:7e:62:b8:dc:54:e3:39:0c:68:50:ac:95:4b:29:
                    5e:2b:e9:80:e4:cd:12:5f:4b:29:89:e0:db:83:cb:
                    fd:3f:d2:4b:42:91:c4:90:3c:8c:cd:79:3e:41:96:
                    d8:4d:4d:9a:c0:3a:84:64:d5:19:cf:66:41:26:47:
                    e0:2b:91:d8:9d:a8:66:1b:c9:a1:df:f4:bf:f4:3c:
                    58:8a:d1:3c:35:8b:ff:6d:84:2a:07:c3:a4:73:31:
                    7a:6f:56:21:10:45:6a:55:67:4a:ec:89:84:65:72:
                    b2:30:7a:f9:54:74:44:81:ea:65:e9:e3:d2:b9:5f:
                    d6:c5:d4:12:d7:30:8e:7c:ed:18:1b:08:5e:d8:e8:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D6:87:34:83:50:C7:43:5A:E4:D5:DE:07:3E:5C:B3:AF:14:0C:CE
            X509v3 Authority Key Identifier:
                keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:38:c0:a0:94:53:09:fb:fc:5b:54:40:a0:9f:b1:53:42:
         d7:39:8a:17:be:b9:75:86:6c:e0:89:9e:ea:55:54:bc:5a:a5:
         a4:39:fd:73:6d:19:13:19:55:95:cb:90:0b:17:73:e3:3f:e2:
         0f:ab:93:74:87:d1:a7:db:f8:6e:e2:9d:58:bb:93:20:b4:f5:
         b5:16:b3:5b:af:2d:bd:1d:c7:79:a4:0b:2f:48:c9:5e:0c:eb:
         fe:39:58:fc:99:e9:9a:13:d4:fb:a1:a3:13:2e:10:59:9f:3a:
         18:c7:53:ac:a4:e0:7c:54:bf:cd:b2:2b:28:07:16:ef:dd:2d:
         3f:c0:a5:7a:f3:90:ef:cd:d9:9a:01:4c:59:94:b0:cc:6c:5b:
         47:63:74:44:a9:ee:f4:06:72:7f:db:3e:05:4f:bd:2a:29:04:
         61:98:3c:4c:6e:78:56:16:97:78:10:9f:2b:2a:32:0b:a6:e0:
         a4:9f:e0:e8:2c:1e:42:c5:90:7f:e4:57:16:45:69:c6:77:d2:
         aa:2f:ed:43:b6:7b:ca:86:a3:69:b2:cd:89:9c:bb:52:9b:5e:
         fd:ba:01:86:47:cb:bd:30:13:83:8c:8d:e2:45:0c:ef:10:5a:
         3c:78:75:ce:ae:87:dc:fd:c1:f6:db:54:c6:63:8f:6b:44:ef:
         c6:6d:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:24 2026 by rpki-client