Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          KkvvhuW5n2qLsZ8EQNLMjt9JbSoLOn2p4lJ34KnOyPE=
Subject key identifier:   5C:4D:E9:4F:C5:67:8B:DE:C5:1F:D0:AB:C5:D3:25:92:0C:99:B2:F5
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       019E1F117CD666E075D430C1A9E81B2B7033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          10C4
Signing time:             Wed 13 May 2026 02:01:39 +0000
Manifest this update:     Wed 13 May 2026 02:01:39 +0000
Manifest next update:     Thu 14 May 2026 02:01:39 +0000
Files and hashes:         1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
                          2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: W6n3MZcnj9Q/GRMkhyfo1c9IgIAV4djQBHk+QCN24Lg=)
                          3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
                          4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
                          5: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
                          6: te3FBz79GYifGb3qq-rDfAn5q7I.roa (hash: 8JJ8Rj+5NIqp3neVi3adeudGuIpzTz7arVf+MmH6wks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:7c:d6:66:e0:75:d4:30:c1:a9:e8:1b:2b:70:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: May 13 02:01:39 2026 GMT
            Not After : May 14 02:01:39 2026 GMT
        Subject: CN=5c4de94fc5678bdec51fd0abc5d325920c99b2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:41:b2:00:04:c2:20:26:9d:8b:e8:2c:52:
                    ae:87:f7:7f:b3:c2:3b:6f:c8:be:1a:38:7e:ba:e0:
                    cc:7f:54:2d:6b:3f:11:63:4d:19:79:70:d6:da:d8:
                    0c:3a:41:0f:a8:f7:6f:93:e3:83:f1:f0:59:a4:15:
                    e9:ac:d0:5f:a7:d8:9a:4c:06:f1:df:d3:1c:fb:9f:
                    6b:d6:f9:e8:74:b1:eb:89:cc:d0:a9:3e:a7:8c:fb:
                    39:e4:25:49:9b:5c:30:93:e5:50:b8:97:d9:a8:67:
                    c8:ca:c1:b7:33:b9:03:28:d1:b7:ee:30:c3:46:ed:
                    17:bd:68:75:6a:7c:4d:00:39:67:43:9f:1c:59:d2:
                    2d:06:05:39:50:cf:e3:a8:88:f3:b5:57:44:bd:00:
                    38:a0:d8:c2:8a:db:8d:c0:3e:11:58:42:bf:d7:d4:
                    8c:e8:aa:17:55:6f:73:58:63:6a:2f:4b:2e:9b:8e:
                    53:90:80:4e:cb:da:61:4b:5d:79:0a:99:93:ec:e0:
                    42:ee:28:3b:e4:51:d0:2d:91:fe:eb:60:4f:0a:76:
                    78:81:f2:58:10:46:b3:c2:42:d8:f2:aa:d9:df:3d:
                    a0:6e:50:07:2b:b3:f0:5c:60:7b:8c:a0:df:74:85:
                    40:cf:0b:f5:41:f2:74:d1:6a:d5:68:e4:32:6d:34:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:E9:4F:C5:67:8B:DE:C5:1F:D0:AB:C5:D3:25:92:0C:99:B2:F5
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:d8:d0:fa:06:08:0c:2e:a6:3b:3e:f9:dc:1e:f3:78:19:
         ba:53:99:ae:18:10:4d:3e:58:9a:d4:3f:05:b6:92:53:27:a6:
         83:d4:a9:4e:c0:3f:3f:ac:96:1b:40:04:d2:df:78:c3:4d:04:
         83:3b:71:c6:38:bf:d3:4b:36:bc:ea:ae:34:ba:c5:34:06:5c:
         5d:28:68:9b:3f:46:d2:b1:b9:90:0b:b3:01:33:11:3f:50:a3:
         02:f3:9f:a3:e5:c2:a5:37:75:5a:2b:f6:c6:23:cb:19:4d:14:
         14:bb:ff:1a:e9:bc:f5:31:79:32:ec:43:68:6b:42:da:15:e5:
         7b:df:63:e8:58:d5:bb:7b:f9:dd:93:d8:0d:e4:d5:e0:bd:16:
         92:2f:42:22:98:0f:19:8d:98:74:57:e5:02:25:57:29:56:f3:
         3b:94:df:bb:67:af:e8:94:b8:3a:d6:7d:6e:17:ff:5a:9f:1b:
         7f:4e:29:1d:7e:cf:68:53:84:a2:cf:d6:aa:ed:01:c1:63:27:
         c9:54:02:ed:13:45:4c:5c:26:ff:f5:0e:a8:e5:02:f2:a2:c3:
         42:88:66:98:24:8c:af:94:ed:19:9f:0b:c9:81:63:5c:30:77:
         4c:0d:3f:58:e3:a7:9f:9b:5b:f9:27:9a:6d:74:cc:31:90:cb:
         6e:cc:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:29 2026 by rpki-client