Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File:                     xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier:          En7fOjnOwVxR7ruua/QKvhUCL8yEX+PdmS4oH9sWpsk=
Subject key identifier:   AF:41:DC:96:CE:24:74:A1:AA:EB:DB:D8:59:AD:E4:AB:E1:79:DC:26
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer:       /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial:       019E1D9020782E25F7ECAB91DF7F88DF51DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number:          0C7B
Signing time:             Tue 12 May 2026 19:00:44 +0000
Manifest this update:     Tue 12 May 2026 19:00:44 +0000
Manifest next update:     Wed 13 May 2026 19:00:44 +0000
Files and hashes:         1: X88KGnsSuMt-1S71eY9zQ3RZ6tU.asa (hash: 7i3IVTiIuvLVvc+83Pz8wtd/lc6dgYITJMUxdSIn8Do=)
                          2: nVIGqqg1fXe0JSkAFeMlHeHVwU8.roa (hash: xrVagJd5a+kWUDCIbPyPE6cdcRfUEt1we1ew6ErH7ek=)
                          3: wz5sgrsnPew4Yrk1IGqaHIHmEJ8.roa (hash: AT5QO6DjDMSuGJ0ZKzp70XWkFWgmwRaqQGoc1jU0dyk=)
                          4: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: gVlItPvQVdu0ltZD/twVd4LMGCRcbDPgA3oHsgw0Ypk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:20:78:2e:25:f7:ec:ab:91:df:7f:88:df:51:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
        Validity
            Not Before: May 12 19:00:44 2026 GMT
            Not After : May 13 19:00:44 2026 GMT
        Subject: CN=af41dc96ce2474a1aaebdbd859ade4abe179dc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:28:3a:64:94:c0:e9:7d:12:09:79:f6:d6:
                    7b:9f:f5:56:80:c1:87:a5:07:81:ab:c3:ff:ec:9d:
                    77:22:81:e4:71:d5:e4:b4:2f:ed:d0:c3:67:cc:5a:
                    ec:72:97:1c:98:26:77:40:af:26:e9:20:6c:c7:9d:
                    f1:1c:7d:f3:b7:f4:ce:40:89:89:2c:0e:ce:0e:32:
                    9d:9d:52:04:d8:16:2c:94:2c:3b:eb:78:a6:f2:df:
                    e6:70:5a:9c:d0:ae:a9:4a:37:b2:12:98:f2:99:c6:
                    3e:5d:5f:64:7a:0e:5f:92:63:d0:9a:b5:73:58:1e:
                    ee:55:26:b9:46:c0:fd:d5:e7:85:56:cb:50:72:10:
                    da:53:30:25:c4:11:b2:66:f3:3b:0c:0c:42:58:12:
                    c2:be:99:25:85:9a:d6:b8:de:9e:7c:15:a9:0e:ad:
                    8e:83:9e:5d:8a:16:cd:53:f4:9e:27:e0:3d:9d:d0:
                    7f:9c:fc:37:a7:67:e5:09:cb:73:fb:c0:5f:21:5d:
                    dd:09:a5:78:b9:5c:2d:b1:4f:44:97:0c:6a:49:31:
                    cf:82:77:88:7f:dd:1e:0e:97:1c:1a:9f:cc:70:ad:
                    cd:50:2f:12:c9:64:93:ed:a5:94:0a:1b:8c:41:39:
                    e4:72:16:11:82:eb:5c:d0:e5:56:39:4e:b8:0c:2a:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:41:DC:96:CE:24:74:A1:AA:EB:DB:D8:59:AD:E4:AB:E1:79:DC:26
            X509v3 Authority Key Identifier:
                keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:20:27:c6:a2:45:09:c0:0a:76:60:4f:1d:8d:2f:f6:58:2e:
         91:30:18:df:47:4d:b8:71:98:84:b6:00:ec:0b:bf:28:81:b2:
         a1:ad:dc:38:2f:83:df:24:ba:83:7d:c0:54:94:05:37:82:f2:
         d0:53:5d:86:56:fa:1a:d9:ce:25:6a:5b:9c:9c:c6:38:07:ff:
         1a:0f:6c:94:44:11:17:c3:e1:7c:b1:a2:31:69:91:65:f0:aa:
         91:37:63:43:c4:6e:79:3c:6b:47:6a:06:c4:cd:73:c4:9f:ec:
         46:cd:60:0f:ba:20:cb:15:b0:15:0c:7e:1f:70:78:5b:03:06:
         5d:98:69:11:d6:b4:12:54:7c:ec:18:88:cb:80:31:9d:55:87:
         69:89:b1:b2:49:42:be:5d:16:76:77:7d:a2:e2:b1:09:e7:62:
         da:82:21:92:c8:13:84:0e:e3:4a:d8:1b:29:2a:da:34:83:f8:
         52:94:a0:16:3b:16:cc:c5:e3:92:19:65:71:6b:d9:ab:bb:d2:
         83:22:80:8c:a4:13:09:1c:59:71:c0:74:4b:01:fb:fe:18:64:
         a0:71:7d:ce:a8:79:a9:7d:a2:76:7f:36:03:0a:f6:08:cf:ab:
         68:82:a3:76:1e:ce:e3:2f:97:2f:df:a5:c7:99:37:b2:b2:90:
         f0:62:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:01 2026 by rpki-client