Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File:                     Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier:          4FT9tWHvxjDvRHxf16KTl78xVSWuc7icpSvYTDO1ErY=
Subject key identifier:   5F:1E:DC:11:39:5A:7C:FA:ED:88:0A:A0:6C:F3:73:E2:F5:82:E0:59
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer:       /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial:       019D28BB7BD9C1FDAC7F8E4BAC7FAEF54481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 06:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:08 +0000
Files and hashes:         1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
                          2: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
                          3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: sf8sfe81E9yEBtgOLxL/virhDfB0E1Mv5bSAY85pZXg=)
                          4: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:7b:d9:c1:fd:ac:7f:8e:4b:ac:7f:ae:f5:44:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
        Validity
            Not Before: Mar 26 06:01:08 2026 GMT
            Not After : Mar 27 06:01:08 2026 GMT
        Subject: CN=5f1edc11395a7cfaed880aa06cf373e2f582e059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:95:37:29:07:0b:b1:bb:1d:09:03:36:c6:
                    28:4a:5f:5a:62:e7:81:11:48:c8:37:17:fb:21:ab:
                    f7:97:3c:8f:ff:d2:62:c9:c7:d9:32:98:be:22:99:
                    e1:4c:a6:94:88:2d:73:5f:8a:41:13:72:e7:3e:4f:
                    f5:6d:81:61:98:f7:0e:0b:8c:a7:1a:58:f1:d5:2d:
                    7f:b9:59:18:37:54:5c:75:30:ff:1c:71:81:ae:37:
                    e0:c0:f7:15:19:b3:12:cb:2b:b2:bf:5d:3a:7e:e3:
                    50:41:9c:cf:c3:35:df:9a:04:a6:67:31:35:e3:2a:
                    da:01:eb:3e:24:a2:3e:be:bf:8a:e7:e3:55:e0:c9:
                    7f:cc:c4:d4:df:5a:d9:7f:cd:c0:da:57:d9:12:40:
                    51:6e:0e:e2:ab:04:8c:67:9d:ab:9e:cd:d9:66:fc:
                    5c:c4:d4:5e:ff:2b:bc:35:2d:dd:a0:b9:cd:b9:5f:
                    14:22:a0:73:55:d2:73:a2:61:5d:e5:d2:cd:18:2c:
                    3d:8d:e9:cb:9a:7d:6e:04:e6:c3:2b:0f:6c:e7:0e:
                    b4:fd:1e:7e:30:ba:15:9a:32:e9:7e:78:40:21:9d:
                    f1:5f:ef:40:a4:7f:8c:7d:40:22:14:86:f5:2f:71:
                    84:de:9b:f0:2e:87:38:4a:08:9c:a7:c5:b6:d7:d3:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1E:DC:11:39:5A:7C:FA:ED:88:0A:A0:6C:F3:73:E2:F5:82:E0:59
            X509v3 Authority Key Identifier:
                keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:d1:61:c5:c2:28:2b:9a:00:cd:dd:94:29:0b:41:57:b1:
         8c:35:fe:1f:a1:43:12:e8:03:de:35:d1:58:2c:c7:4d:60:1e:
         26:e5:ec:b9:e1:96:e3:03:25:10:25:3c:7e:82:03:d0:54:ca:
         35:ac:4d:cf:ab:e8:10:75:b2:67:f7:84:68:95:0c:02:b4:48:
         8a:60:0b:29:20:45:c3:46:d4:76:d4:96:20:af:06:d4:74:76:
         be:57:87:95:0f:0f:53:ad:4e:0d:61:15:99:3f:65:35:39:bd:
         e9:46:17:6d:72:b1:69:a4:9e:17:bc:f5:df:32:b5:bb:76:0a:
         83:9b:05:b3:1f:f7:f0:aa:bb:03:98:a4:fe:ac:d2:98:16:24:
         57:c1:cb:f2:79:a9:2c:33:24:f2:7c:ca:d5:d8:c7:13:87:87:
         97:cf:dc:39:0d:5f:68:ad:10:fc:c1:ae:42:23:f9:e8:45:40:
         8d:b1:cd:e9:bc:87:56:b6:ed:ff:79:ae:95:be:53:5f:8c:42:
         6d:dd:08:23:b4:4a:da:d8:d0:12:21:68:f6:8e:4f:7a:7e:8b:
         bb:06:d3:bc:9f:80:a6:71:65:47:c5:3b:cb:f6:50:0e:b3:38:
         04:68:bd:ea:f3:3f:69:ca:f7:ed:23:a0:74:e2:7f:ae:d4:4f:
         de:50:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:20 2026 by rpki-client