Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File:                     XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier:          J7WPlE01rlfWNf9wg5LWiyQs5aybr9uHZUxOdnL5RIk=
Subject key identifier:   57:3E:34:7E:72:DF:C0:7C:E7:04:36:CA:8F:41:4D:61:A3:E6:60:CF
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer:       /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial:       019E1E35AC074616D98B53811BA2DFF02EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number:          1916
Signing time:             Tue 12 May 2026 22:01:34 +0000
Manifest this update:     Tue 12 May 2026 22:01:34 +0000
Manifest next update:     Wed 13 May 2026 22:01:34 +0000
Files and hashes:         1: Vcrxz5upkyAccEnWWkm1jKbiHCU.roa (hash: DF9acpeNSt3QcU3RLTkyAoSPyBTgnqf4yVUPlH/IEUw=)
                          2: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: kYyvOA1y1gn4ooUv9YzsdkwlVD+1e2w1Zkn7cAn+dKE=)
                          3: d61QkjArffvt5fKMvIXWF8nIPcE.roa (hash: n77B2cSkql2uFL2mgGTUwbPJJQCN8pumVVKiMumdlmQ=)
                          4: gt4NX8URVAv-A4_huezwCBnTr38.roa (hash: vN+Famgpb/hzxjnp6tma5vU9LuyB53AY4c85WPFvJ9g=)
                          5: vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa (hash: rxEx9pdbLlzRrifCSn69fPPljhSEaN1XwXY/F5cFM9M=)
                          6: x9IxkDkzEkDokkzWh7NpXLA6pSU.roa (hash: HHdD49yqs88lPuXMSPj56CT2/FilbQVuZopBY9/6oH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:ac:07:46:16:d9:8b:53:81:1b:a2:df:f0:2e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
        Validity
            Not Before: May 12 22:01:34 2026 GMT
            Not After : May 13 22:01:34 2026 GMT
        Subject: CN=573e347e72dfc07ce70436ca8f414d61a3e660cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:e5:0d:4d:38:c9:cd:ea:e5:8e:b8:39:0e:
                    ca:34:16:a1:fb:8e:da:1a:f4:57:8d:44:dd:bc:d7:
                    2c:db:b4:fd:27:67:55:f3:57:73:25:61:e0:0d:78:
                    3d:7a:49:3f:fe:72:db:df:71:08:83:c0:4a:89:96:
                    de:2a:28:e2:40:f1:0c:f1:98:96:b7:e3:d0:1f:fb:
                    aa:5e:4c:de:64:bd:57:44:db:44:dd:2f:ee:0a:6e:
                    bf:49:bc:d2:07:4c:43:09:dd:c8:0d:8b:80:16:60:
                    a6:24:60:18:08:a6:41:38:56:ea:a5:07:c2:70:a3:
                    39:db:50:81:ce:8e:c7:fe:02:c8:c4:3f:ed:cf:9b:
                    4c:a2:45:15:4e:81:82:75:18:f7:52:42:54:bf:4e:
                    8d:00:dc:b6:f5:26:61:1f:12:6b:14:47:1b:1c:cf:
                    9b:87:41:46:75:d6:14:57:af:21:88:a5:96:55:fe:
                    9e:4e:87:9c:48:2b:61:c7:87:f7:16:a0:44:82:d8:
                    ed:33:0a:c4:f8:43:e4:aa:2f:db:ef:59:58:14:0c:
                    3a:f6:57:89:4d:66:ce:8f:43:7d:50:d5:c1:19:77:
                    e0:11:e6:0a:f5:ba:69:48:4d:dc:b2:18:b0:bc:6c:
                    c4:ee:a6:72:38:e8:48:3b:24:da:13:91:42:af:06:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:34:7E:72:DF:C0:7C:E7:04:36:CA:8F:41:4D:61:A3:E6:60:CF
            X509v3 Authority Key Identifier:
                keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2f:ce:d3:76:e4:14:e6:ab:04:44:25:43:82:f3:cd:2c:ed:
         f6:6b:26:77:63:6b:92:c7:99:29:3d:46:0d:3c:36:14:8d:0a:
         6b:b5:7d:a2:fd:66:77:f3:1f:48:ce:55:e5:b0:7a:6d:5d:8c:
         31:f5:bb:fb:52:02:61:8b:d2:04:76:1d:fa:6d:95:ee:ae:2f:
         3e:d6:68:73:94:50:0a:ca:d5:87:5b:c5:4d:24:60:99:8d:8b:
         be:e2:21:ae:51:08:11:b0:ed:d7:02:aa:fd:d5:8e:84:da:9f:
         37:62:81:bd:d9:10:e1:e8:55:4a:9b:90:66:7e:e6:fc:29:91:
         f8:2f:cd:45:c3:95:55:a2:a5:c0:dc:3a:78:21:6e:c5:13:68:
         f9:75:50:3e:b4:49:c3:85:1e:fb:50:db:09:a6:54:ca:55:70:
         34:2f:8e:80:44:7b:e0:a5:71:fd:d9:d3:f3:19:1e:ba:c0:5b:
         3e:7d:8d:77:28:62:29:40:f0:ce:79:bf:5a:21:52:0b:38:93:
         31:2f:58:6f:e7:7b:4e:c1:4c:9e:04:a1:c5:7b:80:45:b8:f9:
         19:49:f1:20:25:6b:60:9a:70:e4:ae:28:7a:00:1f:a0:15:91:
         f1:ef:5e:4d:ae:62:d7:2e:b8:88:53:89:9f:ff:e5:7a:10:80:
         6d:c2:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:55 2026 by rpki-client