Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File:                     xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier:          eqq3QAQBlCv46DqYVNQh84KOquG44+bnE/6e8GPh89k=
Subject key identifier:   B0:94:80:9A:B1:61:C5:18:32:F1:A1:F9:71:15:FB:2B:D8:88:FF:6D
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer:       /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial:       019E1E354211508E36EEF16BC5F478E9B917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number:          1753
Signing time:             Tue 12 May 2026 22:01:07 +0000
Manifest this update:     Tue 12 May 2026 22:01:07 +0000
Manifest next update:     Wed 13 May 2026 22:01:07 +0000
Files and hashes:         1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
                          2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: +JVdqOJd3pQzbv+oIjvdWw8Zpp/jMv8Avo31ui6ULBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:42:11:50:8e:36:ee:f1:6b:c5:f4:78:e9:b9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
        Validity
            Not Before: May 12 22:01:07 2026 GMT
            Not After : May 13 22:01:07 2026 GMT
        Subject: CN=b094809ab161c51832f1a1f97115fb2bd888ff6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c3:fe:36:54:8b:19:97:d3:33:57:eb:94:14:
                    e5:36:69:a7:f3:c8:bc:d3:ac:fb:7a:e6:46:c8:a6:
                    71:b5:b7:de:0c:42:0e:5e:e8:e3:81:79:a4:4e:6c:
                    d9:4b:7c:f7:60:73:ac:7b:31:bd:90:8f:02:c4:2f:
                    c3:21:ca:e9:f3:3d:dc:2b:e6:cd:3a:48:93:f0:4c:
                    fc:9f:e2:7f:0c:3e:70:5b:22:ec:c2:d4:8a:45:ff:
                    5a:66:fe:a2:11:aa:66:b7:93:cf:cf:df:19:1a:52:
                    73:ac:81:dd:12:81:e7:22:0e:cc:99:fe:5d:4a:f0:
                    32:2c:61:e6:db:cb:f0:09:fa:60:29:94:fd:79:98:
                    39:4b:99:72:c5:67:35:07:6a:81:3c:e5:2e:1c:cc:
                    00:ac:cf:2b:22:88:48:09:30:42:fb:98:78:3d:ea:
                    e2:ba:bb:8c:38:35:94:ea:fe:7f:11:0f:5c:a1:fa:
                    64:4a:71:67:fa:6d:c5:55:91:ce:28:7f:a8:16:75:
                    47:59:43:8e:36:4e:c3:6f:32:dd:54:31:79:36:b9:
                    bc:92:59:1f:42:ba:3c:83:80:ab:9f:d7:ff:85:0e:
                    da:87:24:28:d9:ef:44:74:6c:0b:10:e9:c7:02:11:
                    c9:b5:07:e6:8f:9b:77:ef:87:9c:b6:cd:fb:c3:98:
                    64:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:94:80:9A:B1:61:C5:18:32:F1:A1:F9:71:15:FB:2B:D8:88:FF:6D
            X509v3 Authority Key Identifier:
                keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:f1:19:f9:1a:bf:f3:65:07:b1:85:21:64:4c:db:3e:ef:
         53:f5:3c:98:ca:11:6c:0e:be:16:f8:3f:1e:ff:04:41:fa:59:
         b9:3b:29:cd:43:47:c3:5e:33:0a:1c:13:f4:f5:41:01:3a:82:
         47:8b:58:c4:66:ea:1e:65:53:83:14:0d:9b:c4:45:63:08:0f:
         cb:9f:71:5d:4c:93:e1:3e:33:d5:ca:3c:bf:c9:54:09:c6:1f:
         c5:1a:9f:9f:af:dd:42:1f:fd:b7:e3:80:d5:5f:5b:27:d0:b1:
         67:60:8e:ad:36:8b:58:87:10:aa:b6:e4:47:f1:24:4f:29:9a:
         eb:b7:a9:1b:78:6c:24:0b:95:99:ca:52:f5:3c:71:98:36:db:
         49:c9:5c:54:36:fc:25:01:8d:cd:21:9a:95:51:69:a9:90:1e:
         e7:68:9d:67:ee:d7:ef:9a:71:88:19:04:61:5c:93:6e:40:70:
         d4:97:70:d9:8b:3e:d9:31:7c:4d:b9:6d:3a:a0:19:44:c9:7c:
         e7:2c:a6:40:e8:7e:f3:f2:f1:07:6d:90:d3:de:c7:e7:9e:89:
         66:63:db:af:bc:96:61:53:fa:1f:a3:35:24:d0:de:03:86:75:
         13:8d:75:05:7e:d5:87:e0:69:fd:ec:92:f7:c1:56:ea:56:44:
         ab:c2:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:16 2026 by rpki-client