Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File:                     Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier:          a9q49G/fz+/pfe/JQe6Xf1QWc9IM1pzfKGqAyvyTnns=
Subject key identifier:   B2:E3:8E:C7:56:B1:DC:C6:3C:D3:8D:6B:A0:0F:ED:E0:38:46:DC:5F
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer:       /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial:       019E20FFF094D16EF7594D5FB054D989100C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 11:01:44 +0000
Manifest this update:     Wed 13 May 2026 11:01:44 +0000
Manifest next update:     Thu 14 May 2026 11:01:44 +0000
Files and hashes:         1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
                          2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: d3fwAvOZWhWeFhp8lE2RvCvLspafCFPpxQYN8mZGJAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:f0:94:d1:6e:f7:59:4d:5f:b0:54:d9:89:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
        Validity
            Not Before: May 13 11:01:44 2026 GMT
            Not After : May 14 11:01:44 2026 GMT
        Subject: CN=b2e38ec756b1dcc63cd38d6ba00fede03846dc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:42:e1:97:93:1b:b1:68:86:d4:75:16:2e:
                    76:12:a6:34:db:8a:3a:45:a5:ea:bd:f8:c6:41:c3:
                    07:2f:16:0b:1f:b0:a4:da:81:bf:87:03:62:10:60:
                    47:c7:b3:30:44:9a:cf:b7:e3:53:b4:0c:84:ac:6c:
                    bd:99:97:f3:26:45:f5:97:4e:4e:1f:8c:af:15:54:
                    b0:9a:06:d0:e9:23:da:56:95:01:f3:3d:8c:6a:a2:
                    11:2c:69:f1:8a:bb:1e:f3:90:9b:07:81:ad:80:bd:
                    27:a2:01:d8:38:1a:d9:da:da:08:6e:35:c1:3d:6b:
                    21:32:e4:0e:ca:2d:8f:59:45:fd:09:41:6b:3e:6a:
                    f6:be:69:6b:53:c9:9a:68:fc:39:a1:c4:a0:a2:2a:
                    dd:cf:48:54:0d:1f:c7:cf:9b:9a:13:2f:49:e5:6a:
                    31:93:39:18:09:40:cb:52:1d:d1:eb:91:4c:2a:03:
                    d9:dc:bf:70:86:8c:ee:73:72:e5:d0:b2:fb:17:69:
                    cc:6f:f9:d0:8e:f7:ad:79:14:aa:69:8d:ce:4b:f1:
                    7b:83:fe:22:94:9e:5b:a1:ab:44:55:39:e1:92:97:
                    0f:09:b5:60:1d:a5:9a:42:48:28:58:88:7c:9e:91:
                    d3:52:e6:08:a0:02:40:64:d3:f7:60:8a:e2:39:93:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E3:8E:C7:56:B1:DC:C6:3C:D3:8D:6B:A0:0F:ED:E0:38:46:DC:5F
            X509v3 Authority Key Identifier:
                keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f5:01:7f:98:70:61:0e:4c:49:e8:0b:f8:7b:4b:95:01:3c:
         83:6b:3a:11:39:9b:2c:f4:40:18:bd:3c:64:cd:9c:2c:22:0f:
         42:b2:d7:d8:88:d5:48:94:b2:9d:84:d4:c4:c1:22:36:e1:71:
         d8:ae:48:60:11:3e:44:09:89:c5:bf:47:6f:3a:78:1b:81:3b:
         fa:55:b6:65:f7:40:64:71:2d:c9:5f:20:5a:06:12:85:92:03:
         e6:21:6d:a4:e4:35:25:3a:0a:e8:21:16:e2:53:1c:53:1d:41:
         17:ce:cd:d7:af:3c:93:70:25:07:68:4b:3e:cc:4f:ef:c0:8a:
         a8:7c:e4:59:54:e7:64:83:fc:6b:e4:93:6f:b4:a0:9e:0e:79:
         88:a8:91:d2:8a:e0:c1:03:cb:56:d8:5e:a8:48:5a:59:30:80:
         b0:0c:10:03:a3:8d:a9:08:a4:40:e6:49:78:aa:37:4b:e4:d1:
         bf:e9:82:2a:d2:b2:05:2a:ec:cb:d4:51:de:b5:ef:29:7b:84:
         83:40:3c:6d:39:2b:7f:22:5c:38:9f:99:d3:18:aa:45:b8:b9:
         4f:f2:c7:ec:82:3c:2d:96:4b:fb:4e:51:39:8d:75:7a:28:37:
         4e:18:a1:58:68:d1:10:e1:a8:08:11:13:d9:ec:0b:10:c8:78:
         1a:4c:11:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g//CU0W73WU1fsFTZiRAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi
NjdlNDkwHhcNMjYwNTEzMTEwMTQ0WhcNMjYwNTE0MTEwMTQ0WjAzMTEwLwYDVQQD
EyhiMmUzOGVjNzU2YjFkY2M2M2NkMzhkNmJhMDBmZWRlMDM4NDZkYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh5C4ZeTG7FohtR1Fi52EqY024o6
RaXqvfjGQcMHLxYLH7Ck2oG/hwNiEGBHx7MwRJrPt+NTtAyErGy9mZfzJkX1l05O
H4yvFVSwmgbQ6SPaVpUB8z2MaqIRLGnxirse85CbB4GtgL0nogHYOBrZ2toIbjXB
PWshMuQOyi2PWUX9CUFrPmr2vmlrU8maaPw5ocSgoirdz0hUDR/Hz5uaEy9J5Wox
kzkYCUDLUh3R65FMKgPZ3L9whozuc3Ll0LL7F2nMb/nQjveteRSqaY3OS/F7g/4i
lJ5boatEVTnhkpcPCbVgHaWaQkgoWIh8npHTUuYIoAJAZNP3YIriOZNV/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLjjsdWsdzGPNONa6AP7eA4RtxfMB8GA1UdIwQY
MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt
YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3
LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPUBf5hw
YQ5MSegL+HtLlQE8g2s6ETmbLPRAGL08ZM2cLCIPQrLX2IjVSJSynYTUxMEiNuFx
2K5IYBE+RAmJxb9Hbzp4G4E7+lW2ZfdAZHEtyV8gWgYShZID5iFtpOQ1JToK6CEW
4lMcUx1BF87N1688k3AlB2hLPsxP78CKqHzkWVTnZIP8a+STb7Sgng55iKiR0org
wQPLVtheqEhaWTCAsAwQA6ONqQikQOZJeKo3S+TRv+mCKtKyBSrsy9RR3rXvKXuE
g0A8bTkrfyJcOJ+Z0xiqRbi5T/LH7II8LZZL+05ROY11eig3ThihWGjREOGoCBET
2ewLEMh4GkwRWg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:15:42 2026 by rpki-client