Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File:                     xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier:          Qbp+3vFf00+07dfuLElYd17XwSfCVgCjikcednNmqsM=
Subject key identifier:   4A:39:29:CE:FB:59:66:D6:DA:1A:AB:7F:56:A7:7B:FA:98:00:5A:90
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer:       /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial:       019E8E0001E4D24CAAAF2B5A453F619905EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number:          1742
Signing time:             Wed 03 Jun 2026 15:00:25 +0000
Manifest this update:     Wed 03 Jun 2026 15:00:25 +0000
Manifest next update:     Thu 04 Jun 2026 15:00:25 +0000
Files and hashes:         1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
                          2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: PXGXTfFVolAPCkEEKM87VeZWDv/ZGDqFaIp/gYxmLgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:00:01:e4:d2:4c:aa:af:2b:5a:45:3f:61:99:05:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
        Validity
            Not Before: Jun  3 15:00:25 2026 GMT
            Not After : Jun  4 15:00:25 2026 GMT
        Subject: CN=4a3929cefb5966d6da1aab7f56a77bfa98005a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:09:67:2f:15:28:a2:94:7c:89:c7:5a:53:
                    d1:b1:ec:dd:39:43:96:b9:76:17:4d:c7:aa:4a:99:
                    8e:8c:35:ac:cb:1e:6e:66:a2:53:ef:fe:c0:91:0e:
                    fa:0d:7f:64:4c:fc:3c:77:f8:bd:fb:d5:ff:1b:ab:
                    ef:b8:a0:ef:7e:40:34:45:ca:75:8e:a3:10:8e:63:
                    a7:3a:f2:fb:7b:d4:c0:45:0e:90:52:55:d3:28:03:
                    fa:3b:a4:4a:52:50:9b:d6:35:2f:f7:24:99:6b:08:
                    54:f8:51:b8:5d:1d:9f:2d:66:02:94:0f:58:ec:46:
                    33:1b:61:8a:90:67:ed:a2:9d:25:84:c0:86:e3:70:
                    5c:ce:1d:ce:bc:8c:75:e1:ec:be:76:78:fe:8d:d8:
                    67:7e:89:4d:6d:8f:c9:3f:6c:0f:91:98:f7:fa:c8:
                    0e:9e:34:05:27:03:6a:02:90:0b:a1:5d:52:ca:d5:
                    ca:b3:77:22:75:7f:a9:f9:cf:10:e0:64:3b:20:60:
                    8b:8e:f5:94:c8:69:f6:7e:82:d3:3c:e7:a8:36:f0:
                    e5:4b:0f:38:70:52:4e:0d:ad:38:53:0d:4e:2d:4d:
                    9d:ae:5b:b2:cf:e3:5d:a6:f8:70:16:eb:77:0f:07:
                    03:ae:04:b2:18:46:38:29:b4:99:d1:5d:43:0d:4e:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:39:29:CE:FB:59:66:D6:DA:1A:AB:7F:56:A7:7B:FA:98:00:5A:90
            X509v3 Authority Key Identifier:
                keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:a2:1b:88:21:8a:d2:02:8d:12:d0:a9:17:98:d9:9d:86:
         00:b7:44:50:0c:ae:95:3c:62:7a:cb:23:8b:8d:c0:4e:1c:39:
         7a:07:b7:15:3b:6e:d4:2e:b4:7b:0b:a9:f3:f5:08:83:eb:43:
         95:ff:92:95:b1:4d:e1:0e:72:38:06:c5:21:d7:52:8b:13:ee:
         21:10:0f:32:79:db:64:73:fa:a1:c2:0d:a4:6a:44:70:af:3b:
         38:cb:df:cc:6f:05:a8:cf:03:7a:28:5b:bd:87:0d:00:8a:bc:
         5d:05:54:a8:27:4c:d7:6f:ba:a5:b8:5b:83:86:ae:5b:d8:da:
         95:33:13:78:e2:8b:5b:8e:69:32:75:c6:9d:41:32:29:c9:b2:
         74:13:00:3d:5e:f0:de:27:60:70:e3:03:8b:3d:5c:7a:78:75:
         53:cb:10:f3:a3:98:91:8a:fd:97:f7:4f:da:7e:03:02:7a:d9:
         2f:ae:74:33:27:05:ee:5b:72:dc:ce:e4:c7:97:f7:d3:31:73:
         35:56:93:6e:ae:25:ff:ef:86:e0:da:4a:84:8c:17:5b:32:e6:
         99:ec:f8:54:5e:1f:a9:5f:c5:ba:7f:9a:62:26:2c:69:a3:8f:
         99:00:12:7e:6b:ed:79:b2:22:2f:d9:b9:22:c4:6b:1c:0f:80:
         1d:0b:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:35:58 2026 by rpki-client