Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File:                     XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier:          5ddWLgJKezq402QrZ6h0q2xDVu3Xz7XY89tfa+E+UQs=
Subject key identifier:   EB:81:D9:B7:8C:22:CC:13:28:95:F7:23:E1:7F:63:50:B2:11:F1:89
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer:       /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial:       019E205AA7BDEDF1F622E37DFF64A860AB24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 08:01:12 +0000
Manifest this update:     Wed 13 May 2026 08:01:12 +0000
Manifest next update:     Thu 14 May 2026 08:01:12 +0000
Files and hashes:         1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: qV+Igm8Wy9h9n2HRnmm1xbHyAavc+Hk8CtTF2WqQkAc=)
                          2: rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa (hash: CyKHZsof9BroFMJ4kJHFaNGpd7KJ3UUKrH85vt5M3yM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:a7:bd:ed:f1:f6:22:e3:7d:ff:64:a8:60:ab:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
        Validity
            Not Before: May 13 08:01:12 2026 GMT
            Not After : May 14 08:01:12 2026 GMT
        Subject: CN=eb81d9b78c22cc132895f723e17f6350b211f189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:20:ce:25:b5:d7:34:b1:ff:1d:d2:27:36:
                    48:4e:30:f5:78:e0:b3:7b:c7:3c:f3:7e:14:83:d7:
                    a3:52:86:09:f4:e3:fb:26:75:32:68:ee:aa:49:0e:
                    91:d6:38:d7:c5:be:0f:53:7f:55:0c:ea:9c:ff:43:
                    2a:96:e0:1a:1a:59:8b:9a:9c:4d:15:cd:ff:99:43:
                    b9:74:76:12:eb:52:8a:35:de:2a:74:b4:e2:24:97:
                    f4:7f:33:68:10:32:15:d9:d4:ac:ca:c8:8d:df:21:
                    cb:6c:2b:34:8d:e5:c3:8b:4e:89:b1:b5:f1:c5:23:
                    8c:c8:da:04:c0:d6:cb:32:ab:45:da:1e:dc:55:fb:
                    6f:61:a3:80:7c:1a:7a:8e:22:af:4f:e8:e4:69:c5:
                    bf:66:19:4f:6c:88:23:6b:63:96:a1:b8:a7:90:1b:
                    2c:3b:5d:48:d2:e1:0a:e4:ea:72:0d:77:d4:47:08:
                    20:b5:0c:c7:a5:39:dd:04:fa:7c:ac:86:4e:67:30:
                    12:85:b7:99:38:20:fc:38:7c:01:ca:8d:8c:7c:38:
                    e4:bb:1d:1f:de:3c:b0:ad:57:bb:d0:f3:45:2f:c8:
                    f4:0d:c2:95:40:8d:92:52:0c:a2:86:4f:0a:db:7d:
                    52:e9:de:73:5f:e0:51:7e:17:b9:fd:18:c1:bb:1e:
                    2f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:D9:B7:8C:22:CC:13:28:95:F7:23:E1:7F:63:50:B2:11:F1:89
            X509v3 Authority Key Identifier:
                keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:72:73:33:54:19:ba:5c:6d:52:8f:3e:95:5e:91:64:e4:
         49:62:14:99:fc:ac:db:a0:c5:38:35:3b:81:0d:81:e0:2b:00:
         dc:a0:d3:d9:7b:40:06:7d:a9:47:07:b7:e5:d6:42:db:cf:05:
         7f:02:92:6a:9d:d9:d0:e6:7f:5a:f6:8f:a0:9f:08:86:7e:24:
         91:af:71:2e:26:87:03:72:05:f0:6c:4a:24:6b:38:00:56:08:
         ee:3c:6b:98:df:7e:c3:03:18:76:a9:fc:82:8e:06:f1:e1:01:
         53:15:f4:d3:b8:cc:12:02:77:27:c3:74:7b:89:4e:86:9c:32:
         31:c6:2b:3b:aa:74:c5:b8:8b:40:c5:2f:06:a8:0a:f3:f6:5e:
         09:ad:3d:a3:3b:ae:ec:00:29:fe:bb:2f:50:90:19:d8:e5:51:
         05:c7:6d:57:d9:de:c5:25:9a:39:94:44:39:d8:f5:22:a7:dd:
         2f:33:b1:fd:68:fa:e5:5f:04:5a:9c:68:29:7b:cd:ea:46:8d:
         44:fe:76:df:ec:42:90:f3:05:f3:57:c3:17:49:40:6f:dc:60:
         4c:05:52:e1:a6:10:06:f8:c3:2a:a1:15:92:68:b4:6a:cc:c6:
         55:f9:dc:c6:d8:e1:c5:71:ae:e0:66:ce:23:84:ba:6c:92:ad:
         4c:24:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:32 2026 by rpki-client