Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          d20SSPlyVFExThVl9j54kKxZNrNaGxKPMr9jF8J3YYo=
Subject key identifier:   0F:58:90:C2:50:FC:D6:4D:2E:C7:44:05:0C:FE:CB:76:63:5C:19:9C
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       019E1D599DAAFA96432F8E0B45C1648BFA48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          181B
Signing time:             Tue 12 May 2026 18:01:12 +0000
Manifest this update:     Tue 12 May 2026 18:01:12 +0000
Manifest next update:     Wed 13 May 2026 18:01:12 +0000
Files and hashes:         1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
                          2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
                          3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
                          4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: JOkPc9zG+91xhBQApHXvmO0yhSXJGkDs64MdNxGeAKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:9d:aa:fa:96:43:2f:8e:0b:45:c1:64:8b:fa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: May 12 18:01:12 2026 GMT
            Not After : May 13 18:01:12 2026 GMT
        Subject: CN=0f5890c250fcd64d2ec744050cfecb76635c199c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:b8:9e:d5:12:c7:84:83:9c:d8:93:4d:bd:
                    83:5b:3d:0d:f0:d0:1c:5b:73:56:98:6c:3a:c0:56:
                    12:dd:3a:70:17:69:40:06:81:16:0d:7c:dd:41:7f:
                    81:0a:33:f2:2e:e9:3b:78:75:cd:02:01:2a:59:b8:
                    94:6f:00:27:7c:c4:3f:79:ff:c8:5c:76:23:09:b7:
                    bc:67:63:a8:60:cd:b7:14:67:d3:a5:e1:5e:58:3a:
                    28:de:2b:7e:c0:5d:e7:82:e9:e0:f4:28:48:b3:2d:
                    e2:ef:be:ac:58:f6:bc:8b:a5:cd:98:7e:67:63:4b:
                    57:b3:54:59:00:19:60:5d:e4:5a:fb:f0:b7:96:8e:
                    fa:f1:f5:4f:a3:05:0f:11:ae:a9:6a:b2:11:66:98:
                    24:a4:2f:5c:3c:89:22:d3:3b:7b:8f:f4:cd:4e:a1:
                    b5:05:9d:fb:19:de:f3:f4:89:12:97:8e:14:31:22:
                    21:46:c4:86:04:0b:87:42:45:e8:e0:91:3b:18:48:
                    3f:61:17:89:43:bc:64:0b:b8:24:f0:18:cb:ef:37:
                    33:28:53:7f:50:76:f9:4c:1c:85:80:e9:85:52:e9:
                    12:a8:47:6c:a5:fc:7c:9e:b0:13:cd:40:21:20:54:
                    2d:ff:41:74:8f:5c:b7:7f:ed:57:8d:f6:56:a4:5a:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:90:C2:50:FC:D6:4D:2E:C7:44:05:0C:FE:CB:76:63:5C:19:9C
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:f8:ce:e6:b4:70:49:42:b3:fc:4c:7f:4a:8d:60:b2:2c:
         db:79:5d:87:3a:c4:6f:df:eb:fb:bf:9a:d0:cd:41:a2:f6:33:
         b4:cc:8e:f3:16:4b:14:d2:64:60:cd:7d:a6:21:00:b2:46:ee:
         b0:52:50:79:89:3e:72:88:a1:90:1a:3b:43:d2:6c:f8:1f:1a:
         18:e7:24:a1:89:c4:16:7f:eb:3f:8a:80:d4:33:bb:19:39:5d:
         98:72:03:52:68:ce:24:67:b7:57:1e:b3:41:bd:5e:6b:d7:fb:
         12:3e:68:64:45:8c:a9:61:e2:fe:7e:9b:d6:75:76:d2:58:4c:
         2d:f4:c9:e0:1f:97:e0:97:27:61:a5:0b:92:f0:33:eb:33:bb:
         ae:5a:26:e9:68:4e:53:7b:8c:ce:a5:43:12:c9:6a:76:f5:ec:
         27:c8:83:1f:6d:5a:48:82:4d:7b:f7:4c:69:2f:9d:75:d8:6d:
         20:ed:e3:86:99:b2:85:03:19:8a:92:2f:08:a0:9d:66:fb:04:
         d4:dd:2c:87:23:be:ed:de:df:ae:47:b0:cd:69:da:ce:4b:cd:
         ae:f9:a8:ea:a2:7a:e5:56:df:28:b8:58:a9:6f:69:32:84:a7:
         9e:94:9a:cd:76:ad:1a:d2:eb:57:2a:d0:80:1b:b4:74:46:10:
         cd:52:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:04 2026 by rpki-client