Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File:                     XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier:          mRgGUSZQ6Tck251poTNrmKjJk13p9usqHruRyMw3/Ek=
Subject key identifier:   CD:09:F7:2F:CD:0B:F5:4E:12:86:F5:97:B2:14:D3:05:E5:E5:98:8E
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer:       /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial:       019D284D76D37E20B0AE3890EE7CBF5B6BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number:          14A6
Signing time:             Thu 26 Mar 2026 04:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:58 +0000
Files and hashes:         1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: yOS2C0dK3TqUR1TrrcGB0baurqWUfZ9Wd/8BvlcnTMk=)
                          2: z3YhbfGJKz0n1N9-q-WqwEE57pE.roa (hash: HPGr92xFtSHh/56bmu7RXnry6DCCpjl7s7L94VoQwsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:76:d3:7e:20:b0:ae:38:90:ee:7c:bf:5b:6b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
        Validity
            Not Before: Mar 26 04:00:58 2026 GMT
            Not After : Mar 27 04:00:58 2026 GMT
        Subject: CN=cd09f72fcd0bf54e1286f597b214d305e5e5988e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:b9:80:79:ec:81:4c:6c:e4:09:fd:89:9c:
                    ed:a3:37:e9:55:4e:41:6e:04:bf:ce:51:dd:db:0e:
                    6a:2e:e3:02:90:4d:92:8d:e0:48:28:cb:6d:24:93:
                    ac:4e:6b:a1:37:31:6e:06:e6:f4:ef:c9:8c:71:ef:
                    95:90:12:d6:09:f6:00:08:57:5f:53:85:52:54:8f:
                    c9:25:1f:e5:88:56:90:b9:f1:88:91:f7:c1:68:9a:
                    bb:a5:87:01:2b:c8:c9:25:98:1b:c7:b5:ee:12:78:
                    2e:64:f9:32:a0:a0:59:4a:73:8c:3c:b0:37:7c:e6:
                    bb:69:32:83:59:40:2e:4e:cb:4b:7e:8a:a9:93:d0:
                    4c:fa:dc:ac:1d:64:7d:3e:99:90:81:1d:50:5b:e6:
                    c1:49:fe:c1:65:99:9d:f6:94:36:46:68:7f:ce:c9:
                    e1:84:e8:22:03:2d:ba:40:ee:d6:f0:f7:26:83:4a:
                    0f:0c:02:a1:4a:92:ea:63:63:64:24:e9:6b:73:25:
                    00:d1:b2:8c:7d:b8:f9:21:ea:67:f5:c1:1a:94:48:
                    9d:9a:c8:3c:3b:cb:8e:d4:9d:a0:e7:a3:d3:41:e1:
                    73:ae:65:4d:30:17:73:24:3c:f5:c1:fa:2e:45:9e:
                    5f:01:fc:7c:df:76:87:d6:aa:ed:37:e3:b3:49:ed:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:F7:2F:CD:0B:F5:4E:12:86:F5:97:B2:14:D3:05:E5:E5:98:8E
            X509v3 Authority Key Identifier:
                keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:d6:e3:6e:42:29:6c:d9:9e:74:e2:d3:c6:26:44:f4:b7:
         4b:55:50:cb:59:fe:56:75:7e:d8:86:dd:76:e6:c5:c2:ed:89:
         72:66:14:fd:ff:a8:50:cd:bc:e8:89:ef:bb:89:e6:af:f4:fe:
         6a:69:db:60:19:c3:2b:d5:13:59:59:fc:4b:84:cf:39:c8:b5:
         8b:29:9c:f1:ba:c1:61:cf:56:4b:29:3f:59:f3:66:ff:cc:5a:
         02:0e:eb:9d:f9:15:b0:ea:6a:ba:eb:a0:8f:fa:45:84:57:da:
         0c:ba:15:e7:8e:c5:97:01:76:dc:35:c9:bf:d0:27:01:e0:57:
         81:e7:23:49:c2:2e:73:b2:52:d1:a6:f9:0e:bb:3c:07:2e:9f:
         48:ff:e4:e7:45:20:aa:0c:10:72:73:e4:ad:fc:eb:0d:52:46:
         ab:ca:23:38:0d:4c:68:75:50:1b:2d:29:52:13:8d:f6:08:b8:
         04:a8:30:4a:75:6d:d3:c0:b1:e8:46:08:77:82:37:4e:16:13:
         f7:bc:4e:fa:bd:27:95:8f:d7:3a:4f:c7:1c:84:c6:63:63:ab:
         91:8f:1d:e8:4c:62:f3:c4:10:fc:21:fc:7f:4f:ba:ad:8d:24:
         d2:b2:12:a3:06:32:86:b4:bb:b4:e1:45:75:82:ae:f8:38:be:
         49:ec:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:17 2026 by rpki-client