Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          BXzUknIV1hmx7UT6cGtMqfN3h1m8cLvcULY8EEH1Cr4=
Subject key identifier:   C3:14:C3:C1:95:AD:9E:86:7B:27:6F:B5:74:D3:3A:85:6D:80:23:2F
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019D3AF800A7F9023F42B4360EBEF136121A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          18C7
Signing time:             Sun 29 Mar 2026 19:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 19:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 19:00:24 +0000
Files and hashes:         1: 1EIifzqC9fxhvzHEAG7QPCN3vdM.roa (hash: /bNgUImtZ/hoObEbk4Hpdq72dE66Rz6ysZMoo9cn3i8=)
                          2: TdF0Q3UgTm4iRlwq3nTlXHaVATI.roa (hash: OQ2zCDNUEEm/t4Dk7N3CDcwyQKDc+o2YA3IhBjZrGzM=)
                          3: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
                          4: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
                          5: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
                          6: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: R9AJ+Hy9AwIIAgRIdElucpW2w8YaiXmq63YJlf/zN2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:f8:00:a7:f9:02:3f:42:b4:36:0e:be:f1:36:12:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Mar 29 19:00:24 2026 GMT
            Not After : Mar 30 19:00:24 2026 GMT
        Subject: CN=c314c3c195ad9e867b276fb574d33a856d80232f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:cf:b8:c6:ed:f1:bc:e6:6d:ca:c2:76:7c:
                    58:b9:09:f8:7d:39:2b:4f:3b:cd:00:4f:80:40:e1:
                    5e:8a:13:f6:6f:f9:28:d5:48:9d:c4:61:6f:d7:79:
                    78:9a:70:40:94:51:b4:bf:3c:54:d2:f0:a1:61:ee:
                    18:41:5a:fe:fb:d0:4f:bd:9a:be:16:b9:63:8c:93:
                    2b:c9:11:ba:b1:e6:a2:52:44:e5:a7:48:31:d6:96:
                    84:ed:a6:92:e2:a5:90:4b:a2:4d:4b:f1:b7:97:62:
                    40:dd:a6:01:cd:84:fe:fd:18:99:9b:5a:9f:c2:51:
                    2a:73:59:05:62:72:69:6f:88:a3:1d:22:4b:b8:7b:
                    51:17:fe:49:43:ae:e9:f8:20:73:a5:1e:79:cb:ba:
                    98:1d:af:5b:e9:c0:3b:53:77:49:8d:d9:a4:d3:ef:
                    b6:d9:a5:b6:1f:54:88:18:15:02:d3:46:d7:36:2e:
                    7f:d1:23:0a:b2:f7:93:f8:5d:63:32:e6:24:03:0c:
                    62:8c:32:8d:5c:49:83:05:fa:10:67:93:39:32:09:
                    18:e7:07:eb:a0:ab:aa:fb:6f:16:23:5e:b2:9e:d6:
                    24:73:c3:f0:d7:05:80:8f:cb:8f:7e:0d:7a:66:a9:
                    4b:0e:a6:ea:e2:01:36:73:8d:89:4d:0a:49:e1:e2:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:14:C3:C1:95:AD:9E:86:7B:27:6F:B5:74:D3:3A:85:6D:80:23:2F
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:f6:6e:03:7f:47:7d:6e:38:85:45:12:35:f5:bf:31:90:
         73:64:bc:fc:12:8b:89:59:bd:e0:21:f9:79:93:71:10:b9:b5:
         99:a2:25:51:ef:f1:05:c4:6b:84:90:d4:8d:0c:19:3b:8d:d7:
         c8:35:5c:fe:9c:38:61:9c:19:ca:d7:f2:90:be:51:79:63:56:
         4d:d6:61:bb:6b:7d:fa:f1:a9:ca:eb:2d:96:d0:53:10:0c:87:
         7c:0a:36:3b:76:b5:0e:47:bd:31:98:86:7d:90:ff:00:55:d6:
         f0:6e:1d:46:08:14:e2:e8:8b:e5:2e:64:94:07:83:85:56:15:
         88:42:6e:aa:47:cd:c6:d1:58:be:ff:d2:7f:29:7d:19:1a:25:
         7d:a3:1d:e2:a2:86:34:9d:fa:8a:71:f4:42:48:eb:69:e7:2d:
         a7:c3:9e:cf:44:06:a9:ec:a4:d0:40:60:d5:72:ff:5e:db:41:
         07:20:14:67:6d:5c:1e:f3:de:3a:b7:4c:6b:2a:a1:fc:21:84:
         cb:ef:6b:3c:d4:8d:3a:9f:eb:0d:fc:97:e5:8a:1e:a8:c6:76:
         fb:74:d0:b0:75:88:93:e0:b8:f6:96:02:8d:17:cc:5d:14:ad:
         3b:b8:66:a6:eb:26:2e:47:3a:11:bc:55:df:27:44:d5:96:37:
         bd:3d:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:28:23 2026 by rpki-client