Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File:                     XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier:          zIimJgKuFYK0oBw1vxZCWn/Z1FkLTC6NVm8TJevBoP8=
Subject key identifier:   D5:F4:A9:9A:DF:3D:12:3F:CA:05:C8:35:DE:63:C3:8B:F1:CB:59:80
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer:       /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial:       019E1EA339277C395533D17FF56B28FFD855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number:          116D
Signing time:             Wed 13 May 2026 00:01:13 +0000
Manifest this update:     Wed 13 May 2026 00:01:13 +0000
Manifest next update:     Thu 14 May 2026 00:01:13 +0000
Files and hashes:         1: AnmyPTbeKIdDpKQo2ow_d3sowCk.roa (hash: 5yDe2nBXJJOjrwl2r1aO5EGRjZW/0EOoxp3H2cvGJfM=)
                          2: H2Ow2vJleUpffVQJUaw-DrOP25Q.roa (hash: KI8QYq2nupDeoMFFlx5O6qkC1YhqNdHz/2qG81EcAxI=)
                          3: OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa (hash: B++2fKZYAzjlOxy+tDnJEo09oVmzZa6HnhPwxHljg8k=)
                          4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: 6Ml7blwAlu8KagidrMrm+ipNo3Q//FTwgS+enRx4ntg=)
                          5: zmd5DMlEMs7x1X9PCKsNsTMW85A.roa (hash: +YU6hVZe0+5DtmTz9/lx0AEtMcLkshGqyIbMlS0ia0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:39:27:7c:39:55:33:d1:7f:f5:6b:28:ff:d8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
        Validity
            Not Before: May 13 00:01:13 2026 GMT
            Not After : May 14 00:01:13 2026 GMT
        Subject: CN=d5f4a99adf3d123fca05c835de63c38bf1cb5980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:dc:29:f2:18:0f:76:fb:fd:1c:d8:b7:bd:
                    70:5c:39:4d:d3:8b:d3:96:5d:c1:a1:68:99:e2:bd:
                    a0:f3:48:0b:9d:7c:78:e7:de:c0:f3:be:a4:6d:87:
                    31:a8:66:43:fe:55:7d:a6:ac:7e:85:1b:4b:8b:a2:
                    66:4e:2c:1e:1f:91:90:5c:cf:4a:98:48:40:e4:ff:
                    8b:2a:fd:f7:54:8b:45:fa:e0:d0:e8:59:77:50:7a:
                    28:cd:85:75:59:8c:c9:b9:77:a5:e1:80:19:8d:04:
                    8f:02:59:35:5a:9f:06:a0:ca:07:e5:8c:9f:d5:f0:
                    5b:70:69:c1:90:ed:01:62:c5:c0:a1:73:42:2b:2c:
                    cc:f8:54:18:f6:ce:e7:45:92:32:16:bd:88:01:75:
                    9a:4d:77:5b:c7:dc:62:a0:b9:6c:94:5c:c0:ab:12:
                    d0:c5:e1:95:a7:da:f8:5d:5f:d5:20:fe:4e:da:3f:
                    be:e8:49:b3:87:8c:15:a3:f2:51:47:86:56:df:dc:
                    80:f4:36:5e:86:3c:55:92:e9:7b:2e:92:13:df:9e:
                    c8:e0:e2:c0:ab:b7:5a:40:50:10:ad:e8:cb:5f:c8:
                    f8:0d:df:97:78:59:ca:05:98:d9:1d:ec:d1:50:e5:
                    8a:c9:7d:ea:63:04:0f:56:5f:03:3b:57:93:63:c7:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:A9:9A:DF:3D:12:3F:CA:05:C8:35:DE:63:C3:8B:F1:CB:59:80
            X509v3 Authority Key Identifier:
                keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a8:8f:77:e9:ea:01:58:e8:74:9f:f0:38:93:93:ac:5f:83:
         90:6c:62:c0:7f:b4:79:7e:63:2c:20:0a:63:70:ba:94:b7:69:
         99:0a:be:e8:9c:4f:75:ef:f4:c8:ad:0b:7f:5a:97:b6:42:39:
         4e:81:41:87:86:33:fe:4b:a3:d5:a1:fb:ee:0c:60:f3:f9:d4:
         57:17:86:77:af:3f:7f:e7:98:cf:40:9e:48:2f:dd:56:c1:1d:
         d2:e8:81:9f:e8:8e:75:ad:49:b4:09:07:b4:ed:42:b9:c9:d4:
         ef:c6:16:72:fa:70:03:8d:99:19:e5:f1:ac:12:7f:d2:fc:97:
         d4:be:d8:7a:18:c0:1d:ec:8e:81:fd:2c:0b:3e:46:c9:11:be:
         99:b9:03:96:d0:1b:95:13:16:72:f0:d2:57:bb:74:9e:39:59:
         c2:5c:bf:33:bc:c1:b5:ee:37:8a:f1:a3:25:12:5d:9e:4a:32:
         dd:c2:d5:d1:37:b0:14:51:08:4f:c9:bf:b3:99:f9:8b:90:de:
         d0:20:b5:87:8d:b7:75:1f:ca:b4:fc:4d:4a:bc:9b:47:68:7f:
         53:b2:9a:87:28:aa:09:db:1d:d2:26:a4:2d:5e:61:53:78:fb:
         b9:ad:8f:bb:ea:ae:18:25:fd:18:da:47:e0:85:ca:bc:36:5a:
         a8:f4:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:37 2026 by rpki-client