Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          1LOcB29N76zXtoqSZeGkWFtEg1bI8gjSAJOxAs40bg0=
Subject key identifier:   E3:21:74:00:57:84:4E:09:8E:2E:D9:3F:A8:09:4B:64:E9:D3:C8:75
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       019E1EA332F7F03ED89C722ED82126DDE4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          1927
Signing time:             Wed 13 May 2026 00:01:12 +0000
Manifest this update:     Wed 13 May 2026 00:01:12 +0000
Manifest next update:     Thu 14 May 2026 00:01:12 +0000
Files and hashes:         1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
                          2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
                          3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
                          4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
                          5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
                          6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
                          7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: JR+THLtW7bSaCX+F5/zZqrxhR7vp4coSKL3SAcDwt8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:32:f7:f0:3e:d8:9c:72:2e:d8:21:26:dd:e4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: May 13 00:01:12 2026 GMT
            Not After : May 14 00:01:12 2026 GMT
        Subject: CN=e321740057844e098e2ed93fa8094b64e9d3c875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:f6:42:38:cc:e4:fd:97:cf:9e:66:3e:e5:
                    05:44:b2:8c:f6:36:31:97:d5:86:74:f2:38:30:4f:
                    62:41:95:c1:2e:58:0b:b6:ab:61:09:66:ca:16:a1:
                    39:8c:9a:7d:57:22:ba:b4:7f:56:40:b3:4e:0c:f5:
                    1f:52:b1:7f:f9:02:81:f8:13:8f:53:63:64:1d:14:
                    e7:e4:dc:16:1e:54:45:2b:6e:c8:09:e4:91:2c:ae:
                    54:ab:31:8e:ab:5e:a4:39:e1:d1:3d:02:17:8f:7f:
                    5a:bf:5d:e1:ae:22:d9:ca:82:da:3e:b0:56:7f:34:
                    53:a5:5f:8e:c9:74:80:a1:f2:b8:ab:92:5d:1c:da:
                    0d:68:f8:5b:ad:0c:2a:03:8a:6e:d9:f2:04:12:9e:
                    ea:b1:82:66:7f:79:5e:1e:15:99:c6:4a:2d:56:57:
                    e0:57:aa:7a:53:b9:2e:38:3a:32:46:e9:77:e4:7a:
                    04:77:b6:84:29:42:f3:c0:fb:4b:37:d9:5d:01:de:
                    4c:8b:b5:e3:56:11:e7:df:de:19:2e:82:28:39:df:
                    1f:97:3f:86:ad:72:fc:99:cd:71:c2:48:4c:0e:0c:
                    5d:03:79:10:4f:c7:cf:c7:4d:57:8a:52:d5:c1:9d:
                    a0:da:7a:58:14:c3:5d:76:ea:1c:3b:97:6c:7e:36:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:74:00:57:84:4E:09:8E:2E:D9:3F:A8:09:4B:64:E9:D3:C8:75
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5b:0c:e1:99:00:62:9e:4a:41:7e:83:d7:50:10:bc:16:79:
         bb:94:aa:66:50:3e:39:d4:94:6c:ce:4b:15:e5:8f:07:2b:35:
         67:74:3d:1d:e1:2d:53:1e:da:32:dd:8d:6b:dd:04:f9:c4:58:
         d4:9f:95:f6:80:b9:b7:bd:fb:6c:5f:7a:70:86:17:40:7c:8a:
         81:34:4c:74:89:a7:75:95:07:a9:79:9a:97:1c:45:4c:51:bc:
         85:b3:d3:2e:20:45:ba:5c:41:97:17:b9:73:be:99:b3:d8:c5:
         94:f6:6d:49:b9:be:b8:40:b4:5d:fb:04:e2:9d:0e:88:1a:2a:
         12:23:e3:33:7d:f1:3c:dd:87:ee:ed:dd:91:f7:fe:ba:f2:c2:
         ce:7e:e5:ce:ec:64:e3:04:b2:f2:3b:3d:17:b8:c9:9b:39:a3:
         10:d4:0d:54:ae:ba:0e:b5:28:7a:3d:9e:1a:ca:59:3b:af:fd:
         e6:53:ff:dc:db:7d:05:35:50:50:d8:7b:db:5e:50:dc:2b:a5:
         eb:04:ea:b3:58:f8:fa:1b:3c:53:2c:00:4f:69:88:c6:e1:a1:
         c6:3e:6f:2f:53:24:5a:db:c2:57:9f:d1:4f:c5:09:9e:ad:f4:
         6b:f8:c8:91:a9:c3:d4:ac:c4:25:10:d3:18:74:96:78:de:c6:
         ab:59:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:37 2026 by rpki-client