Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          toX3459Che5nfLzlwUolMBcfIVQ+in2QE8CyqI6KPH0=
Subject key identifier:   CE:E9:44:47:A0:D1:2B:97:77:97:71:24:52:1D:9D:F8:8B:3B:75:51
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019D2C614C984707E30262BC07231DDDB65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          04F8
Signing time:             Thu 26 Mar 2026 23:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 23:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 23:01:07 +0000
Files and hashes:         1: 13lETM7dYwgkukJoWApUFl8dJuI.roa (hash: cZO0/GICe69R1nGUBraIiKZbW7afS/3775vhW3rYR+4=)
                          2: EMqpNBcCNtehXNjtWHmz4Qx27pk.roa (hash: 8njOTJ/2VGv+q8vvCxeqjLAb7iHXNWrxTs90DA1iMqI=)
                          3: KVEesZy60JcmrCD9X0Zw8ckitl8.roa (hash: LDsra63f6peITAW/vE5Lx25+kAf2+irA29kJov0WXy0=)
                          4: Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa (hash: wkeGlAvS62MwRHYU8Z+cHP5CIoQV+KvyovxR/4O84h0=)
                          5: dYPKia158SIrrNF4l9j5f3SItUA.roa (hash: /mvbSwmPXlWJfBXD/fmkRZb24RyV5+E4SIG3bbAtRas=)
                          6: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: 33Tyn1ToUtG8dSQs9SeO6axHcpK+LYFQbR5OVv/ChEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 23:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:61:4c:98:47:07:e3:02:62:bc:07:23:1d:dd:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Mar 26 23:01:07 2026 GMT
            Not After : Mar 27 23:01:07 2026 GMT
        Subject: CN=cee94447a0d12b9777977124521d9df88b3b7551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:b0:0c:c6:54:e5:4e:f3:7c:5d:06:22:8c:
                    2f:a9:f4:18:7b:4a:4b:90:ca:96:a9:a1:23:e5:7f:
                    11:de:d6:96:15:5d:05:de:20:db:e9:9d:8b:f3:ef:
                    6a:63:5a:69:67:f5:03:c0:13:8d:a2:c1:2c:4a:5a:
                    14:e7:6b:0e:c5:7b:d2:75:bd:67:ad:f1:4c:97:c9:
                    9c:0c:7a:ef:c5:17:bf:19:a2:c3:2c:c3:9a:a6:68:
                    c0:85:41:b0:8e:e3:3e:7b:a2:15:dd:df:aa:69:ff:
                    d0:b7:03:8f:72:0c:52:19:e9:1f:d2:b9:82:11:67:
                    2c:c3:ed:2f:20:0f:bb:0f:72:fc:27:91:a0:08:9b:
                    34:5c:26:06:3d:76:b5:73:e2:a1:1b:d5:b7:b0:75:
                    71:b9:5f:4d:32:05:8b:be:ef:a7:40:3f:e4:0a:3b:
                    80:59:dc:0a:c4:9a:4d:ed:a4:11:8b:c1:32:30:42:
                    4e:9b:34:f4:33:ef:eb:5e:d3:2e:83:43:fe:d4:33:
                    ad:4d:e7:a7:8b:3b:8b:48:8a:4d:e0:ec:11:01:fe:
                    2c:51:23:40:06:93:58:2a:55:c2:6a:5a:66:a3:b0:
                    92:f1:aa:e8:ac:f4:29:1d:fe:5f:e4:41:bd:4f:8b:
                    6a:5c:6e:ef:bc:3f:8d:51:f6:9f:94:4c:e8:e3:e8:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E9:44:47:A0:D1:2B:97:77:97:71:24:52:1D:9D:F8:8B:3B:75:51
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0b:ac:1e:1b:2d:8d:34:17:8c:7c:45:14:8e:4c:11:25:6c:
         08:9a:ad:ff:d4:a5:80:ac:9e:f0:cc:5c:ee:30:04:88:54:d8:
         48:0e:1f:96:5d:6b:6d:e7:b4:70:8d:71:c7:e0:89:57:a5:9b:
         e4:56:94:97:06:c1:05:ac:83:1c:ec:8e:ca:70:01:a0:b8:0f:
         d3:7a:05:49:de:f9:0d:df:80:f4:3c:40:96:7b:7d:bd:92:4b:
         33:b9:0a:d5:66:a2:5a:0b:7a:1b:3b:22:5f:be:de:2d:33:45:
         55:68:86:cf:6f:d6:b7:3f:39:14:f3:12:49:c3:62:8c:44:1d:
         7e:65:77:28:bb:4b:9e:ba:d6:e7:7e:68:09:11:2f:94:15:2e:
         08:df:11:9e:97:da:ac:b0:ef:9a:45:0c:3b:b9:1b:e0:5b:be:
         f7:12:60:73:94:8d:46:d2:3c:a8:2b:85:55:b1:df:1e:b8:57:
         ff:36:15:7a:31:28:6e:9b:9c:ac:1e:2a:b3:67:b6:df:99:8d:
         33:b0:d2:8e:ce:0c:e8:57:ba:3c:e1:43:3d:fb:99:3a:fc:3d:
         c5:93:94:da:f0:b2:43:6f:60:74:92:4d:ca:c3:a7:b1:e0:73:
         2f:64:43:28:1e:d5:c7:f0:d7:77:c3:66:4c:b8:1e:96:5f:d9:
         f4:80:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:41:52 2026 by rpki-client