Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File:                     xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier:          Gim6wOvrGXqSUw5cGt343JlejUNyIXmrvlfkkP4N98g=
Subject key identifier:   4D:6B:68:D9:1D:46:2E:79:62:86:24:AE:74:DE:5E:7B:0E:40:AE:1F
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       019E1EA3C0D4C874E76B6E84CA5FCDF6E8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number:          0A7A
Signing time:             Wed 13 May 2026 00:01:48 +0000
Manifest this update:     Wed 13 May 2026 00:01:48 +0000
Manifest next update:     Thu 14 May 2026 00:01:48 +0000
Files and hashes:         1: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (hash: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4=)
                          2: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (hash: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4=)
                          3: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (hash: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc=)
                          4: eqTX003eyxyptc_5akwZQ-er_vM.roa (hash: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c=)
                          5: qBNprkht_3wALG390SrSxt6PGBw.roa (hash: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ=)
                          6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: 0KU7pTJzAG/T6AlWo0eHd7xYkM6AoBFVR8OaQjWwUCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:c0:d4:c8:74:e7:6b:6e:84:ca:5f:cd:f6:e8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: May 13 00:01:48 2026 GMT
            Not After : May 14 00:01:48 2026 GMT
        Subject: CN=4d6b68d91d462e79628624ae74de5e7b0e40ae1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:ea:32:42:90:07:fb:93:8a:86:9b:c2:b3:
                    d5:90:03:84:30:57:0d:41:ae:7c:3c:00:fb:27:17:
                    bb:78:e1:83:54:51:88:86:87:9d:71:3b:47:d4:da:
                    7f:63:aa:fb:04:63:1a:16:ab:88:2d:a2:e0:89:48:
                    ee:7f:31:47:62:ee:4d:03:64:00:50:ce:a4:08:eb:
                    b8:9d:11:4a:88:8b:2e:59:48:bf:1b:32:8e:d6:03:
                    17:84:c3:8d:f4:60:d5:9b:cc:63:f7:64:68:84:07:
                    4b:9b:b7:25:cc:ff:84:bd:85:63:c7:98:9d:d6:6a:
                    a3:ed:8a:54:2a:e0:f2:74:cb:3c:66:a9:29:14:49:
                    5f:f2:ee:f3:49:67:fa:b4:36:58:95:d1:77:e1:f9:
                    27:f2:66:b6:01:92:50:47:10:58:14:3c:d8:ae:38:
                    be:10:74:02:cb:b2:47:60:bc:d3:97:ce:4f:7e:d3:
                    58:d6:b2:be:f2:0d:be:9e:ca:50:5a:cf:09:b9:e1:
                    58:58:a7:dd:3c:b9:c4:0f:49:11:1d:b5:cf:0d:5b:
                    eb:4b:91:5c:24:6a:3b:93:db:2f:f5:bb:26:97:a6:
                    26:6a:fe:78:8e:4d:1d:78:63:24:20:46:53:2b:0f:
                    05:60:c4:24:42:28:1b:ee:ce:65:70:1f:d5:3f:06:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6B:68:D9:1D:46:2E:79:62:86:24:AE:74:DE:5E:7B:0E:40:AE:1F
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:0a:0c:d9:32:88:41:1d:db:14:12:10:14:e7:22:2e:51:
         24:4a:29:9e:77:dc:51:5c:5d:07:3b:7b:3b:60:9a:c7:44:49:
         e2:dd:08:12:b7:02:30:13:5d:a7:a6:59:1e:bf:5f:5f:ea:1f:
         24:cf:ef:56:81:7b:93:7e:ff:3b:87:2b:ea:29:96:76:53:63:
         1e:af:62:48:9d:27:e7:e5:5b:da:87:22:82:9b:ae:42:e1:c9:
         f6:ee:ee:e7:f0:95:4f:c0:cb:d5:19:96:fa:04:a0:74:f1:eb:
         72:f8:64:a2:9a:7e:4a:1d:78:00:6b:e5:82:10:3c:1f:74:01:
         69:63:df:59:0a:96:e4:76:45:7f:55:57:fa:1b:7e:68:ce:c4:
         13:a8:ce:d2:ea:b6:1a:00:d9:12:ca:4e:39:6b:71:15:57:f2:
         9d:ae:73:7c:44:91:8a:c1:a3:23:c2:95:e2:86:e6:26:68:16:
         a1:44:0a:a1:4e:e6:d1:01:1e:2f:fc:07:ad:7f:97:71:13:4e:
         5c:d1:0d:74:cf:1c:de:a9:ad:75:f4:af:c2:76:73:6b:c9:49:
         48:a5:e1:b4:24:7d:91:67:12:fb:05:85:d2:bc:03:ae:80:ed:
         ae:16:21:cd:a4:7b:7f:0c:b2:80:53:7e:f0:45:ba:0e:2d:e7:
         95:66:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:05 2026 by rpki-client