Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
File:                     XO56utwc1TZH4rILdg1aXHqxp8w.mft (raw, json)
Hash identifier:          JCZdh0bntth/qGD8RTWQ0xwvWzqzrhoHBfNYJVInJa8=
Subject key identifier:   AC:C4:97:25:59:6B:C9:7D:A8:84:6A:91:23:EC:61:2F:26:44:14:19
Authority key identifier: 5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
Certificate issuer:       /CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Certificate serial:       019D25F10DA37C5F10A9270BC56CE1C07A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
Manifest number:          0372
Signing time:             Wed 25 Mar 2026 17:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:47 +0000
Files and hashes:         1: XO56utwc1TZH4rILdg1aXHqxp8w.crl (hash: XTpwe1Jc0Pfzy4jWZ3Tz3jmsspiGi2n0DasvqPvCpS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:0d:a3:7c:5f:10:a9:27:0b:c5:6c:e1:c0:7a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
        Validity
            Not Before: Mar 25 17:00:47 2026 GMT
            Not After : Mar 26 17:00:47 2026 GMT
        Subject: CN=acc49725596bc97da8846a9123ec612f26441419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:a9:a6:e8:8d:69:c3:92:09:99:18:77:30:
                    d2:dd:66:c4:47:6c:f5:4c:fa:f1:02:5d:ac:7c:5c:
                    0d:b8:c3:23:fb:28:56:7a:be:3a:40:d5:9d:d6:07:
                    d9:c2:34:01:00:85:9c:69:4d:1b:81:ed:3f:3b:e1:
                    33:63:ab:2d:22:57:39:b2:75:10:01:af:04:db:70:
                    d6:2c:ef:0c:ae:6c:61:c3:64:9f:0a:68:4a:84:c0:
                    d0:66:e2:9d:d5:ef:8b:1e:e4:b0:28:81:64:05:2a:
                    f0:5d:25:2a:c0:3c:a5:d7:56:36:33:68:d9:a4:93:
                    74:5a:2d:af:3b:10:c3:b5:97:6c:bd:d0:01:35:ac:
                    d4:94:d1:2e:52:80:18:9a:9a:15:9e:56:5f:a8:17:
                    ef:7e:ea:b8:c9:0e:7c:ca:a6:c2:6d:7d:be:bd:53:
                    ee:d3:51:07:26:64:1f:56:9a:e0:b3:07:1a:66:4f:
                    94:e2:18:bd:01:9f:be:5c:76:4b:2f:f3:61:6e:32:
                    83:f4:d5:ce:40:cd:8f:ed:d6:f9:81:b8:2b:02:ce:
                    a3:1f:41:2a:81:24:3b:ec:6f:77:f4:f6:8d:92:6d:
                    0c:21:a5:b4:04:16:2f:34:c6:fa:ea:56:26:b1:12:
                    ae:c1:5f:3b:b4:69:c3:94:01:f4:de:3b:40:24:dc:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:97:25:59:6B:C9:7D:A8:84:6A:91:23:EC:61:2F:26:44:14:19
            X509v3 Authority Key Identifier:
                keyid:5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:57:27:f3:aa:62:74:2f:62:13:d0:c9:26:a4:8b:67:9a:d5:
         9a:05:70:95:df:e8:c7:ef:6e:85:8a:ad:5a:1f:d0:a6:b3:93:
         f8:09:7b:e3:e3:6c:fa:3a:45:93:67:dc:55:eb:9b:10:7e:d7:
         18:91:9d:48:c5:71:5f:fe:54:1d:a4:fd:d7:52:0d:cb:84:aa:
         2c:2c:e2:1b:d0:ca:f5:18:72:ee:c2:6f:41:05:13:b1:54:7f:
         f2:91:fb:70:db:6b:ac:14:ff:1e:69:82:bd:da:83:89:54:1d:
         06:c9:b2:ce:d3:ab:a3:a8:c9:c5:47:97:9a:b7:82:73:56:a6:
         2f:7d:e0:25:9a:b2:d3:cd:88:3e:12:2a:32:f6:fa:2b:91:25:
         0f:ec:6e:f8:84:ca:7c:03:3a:e0:95:13:33:45:3b:1b:d3:7a:
         07:cf:57:c9:8d:14:f5:12:ab:88:31:c6:a1:0e:3c:f3:c8:c3:
         40:7b:4d:4f:f0:0d:09:45:4a:3c:d0:9c:39:ac:fc:5f:f1:5a:
         11:71:b4:d1:5b:9e:0d:3b:3b:0b:61:13:43:a3:69:d4:f1:aa:
         86:69:58:58:a9:f1:04:f1:bc:ba:39:c0:8a:cf:2b:04:42:a2:
         c9:66:a9:0c:35:c2:7e:4f:65:40:9e:0f:8f:b6:2b:d6:be:11:
         70:db:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----