Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File:                     xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier:          1w3z6qpTLf9T3hCxdJxCELcEjSR9rKdV2c1KPU5j63I=
Subject key identifier:   C2:BB:C9:B4:E0:C0:00:2D:F6:E3:92:41:E7:DF:58:40:6E:96:5B:A5
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer:       /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial:       019E1F7F306BBF10E2DCED2B201792B655A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number:          07BB
Signing time:             Wed 13 May 2026 04:01:29 +0000
Manifest this update:     Wed 13 May 2026 04:01:29 +0000
Manifest next update:     Thu 14 May 2026 04:01:29 +0000
Files and hashes:         1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
                          2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: Wycd4ikJzwiQ06zlmbDA9avyb4ZOUbA/qSy6YXb742s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:30:6b:bf:10:e2:dc:ed:2b:20:17:92:b6:55:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
        Validity
            Not Before: May 13 04:01:29 2026 GMT
            Not After : May 14 04:01:29 2026 GMT
        Subject: CN=c2bbc9b4e0c0002df6e39241e7df58406e965ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3c:07:e5:b6:95:6b:99:1d:e2:0a:2f:71:e3:
                    c5:da:de:5c:d4:46:e1:19:2e:4c:1a:f8:b1:69:a7:
                    39:aa:b4:95:70:76:07:57:f1:11:6f:91:3d:81:e5:
                    03:17:93:60:9d:4d:fd:07:0a:13:f7:96:bf:83:14:
                    2d:ff:d3:97:62:11:23:66:78:ae:e9:08:2f:33:c8:
                    a3:d0:16:2d:dd:1c:72:1b:5c:ef:11:92:fc:22:d1:
                    52:38:eb:5c:04:f3:b4:dc:86:b7:1f:bc:ec:97:72:
                    13:03:f8:67:99:c0:52:d7:ca:ed:ec:3e:ca:45:16:
                    48:0b:c9:8d:cd:81:5e:99:16:9c:e6:92:8b:1c:13:
                    a1:74:aa:a4:30:8c:6d:ff:f0:cc:14:9c:ce:a3:9c:
                    bf:0d:69:b6:7d:63:28:eb:91:96:99:5e:38:bf:e6:
                    84:7f:23:6c:49:90:e4:e4:58:12:07:1b:a7:20:ee:
                    7a:dc:f6:bf:c0:89:26:ce:fa:e8:b2:38:a9:85:f6:
                    ed:0c:e0:c6:10:3c:9d:c2:43:42:e7:ee:74:77:4f:
                    bc:e1:b4:13:28:98:6e:1f:af:cc:06:ee:0f:1b:89:
                    c5:22:78:0f:76:ed:d7:d8:83:64:ae:b3:5d:db:d0:
                    19:16:1b:95:33:b0:1c:40:8b:a5:9b:42:99:fd:34:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BB:C9:B4:E0:C0:00:2D:F6:E3:92:41:E7:DF:58:40:6E:96:5B:A5
            X509v3 Authority Key Identifier:
                keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:21:82:0d:e0:84:aa:fc:43:33:c2:4a:47:72:5d:63:26:cc:
         3e:75:cc:90:3f:57:b6:b3:70:77:a5:7d:aa:89:24:f7:ce:1c:
         0b:37:69:04:c1:a0:89:d3:b9:11:ea:a1:c0:57:85:ea:36:1e:
         85:ef:37:ab:df:c0:7e:83:c3:56:3a:c5:be:bf:56:17:b8:ff:
         66:57:25:c6:39:ae:1b:94:9d:0a:69:e5:aa:99:09:81:3b:6f:
         35:fd:48:d5:71:a6:43:17:e5:b6:f4:c5:d4:78:c6:fc:26:a9:
         43:99:74:99:67:0d:d0:5a:90:12:c8:17:3b:2a:be:70:c7:6a:
         44:f0:03:6b:65:e9:b3:48:17:52:ee:52:c6:ca:8c:57:7e:13:
         71:bd:66:dc:e2:a8:47:e0:67:fb:2d:b2:eb:61:62:09:25:54:
         b3:c4:14:45:77:cf:e7:30:cd:7b:31:09:5e:76:03:a0:c6:30:
         d0:77:44:f3:cf:36:14:74:25:7d:92:28:cb:18:fe:15:04:4a:
         60:e3:fa:ce:1f:ad:a8:01:b7:f9:13:fe:0e:12:a8:d4:41:da:
         67:86:3a:01:83:c7:a4:72:b4:6d:17:21:77:4f:7a:25:0c:2d:
         4c:8d:f4:aa:ec:d0:52:43:14:26:42:01:ae:45:85:38:bd:89:
         ed:58:c4:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffzBrvxDi3O0rIBeStlWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzFkOTU4MGE4ZjAxZTQ5YzYxYzVmY2ZkZmYyZTU4OTk1
MzRiOGYwHhcNMjYwNTEzMDQwMTI5WhcNMjYwNTE0MDQwMTI5WjAzMTEwLwYDVQQD
EyhjMmJiYzliNGUwYzAwMDJkZjZlMzkyNDFlN2RmNTg0MDZlOTY1YmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTwH5baVa5kd4govcePF2t5c1Ebh
GS5MGvixaac5qrSVcHYHV/ERb5E9geUDF5NgnU39BwoT95a/gxQt/9OXYhEjZniu
6QgvM8ij0BYt3RxyG1zvEZL8ItFSOOtcBPO03Ia3H7zsl3ITA/hnmcBS18rt7D7K
RRZIC8mNzYFemRac5pKLHBOhdKqkMIxt//DMFJzOo5y/DWm2fWMo65GWmV44v+aE
fyNsSZDk5FgSBxunIO563Pa/wIkmzvrosjiphfbtDODGEDydwkNC5+50d0+84bQT
KJhuH6/MBu4PG4nFIngPdu3X2INkrrNd29AZFhuVM7AcQIulm0KZ/TSGzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK7ybTgwAAt9uOSQeffWEBullulMB8GA1UdIwQY
MBaAFMVx2VgKjwHknGHF/P3/LliZU0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgt
NzU0NmRkMTcxNmM4LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgtNzU0NmRkMTcxNmM4
LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyGCDeCE
qvxDM8JKR3JdYybMPnXMkD9XtrNwd6V9qokk984cCzdpBMGgidO5EeqhwFeF6jYe
he83q9/AfoPDVjrFvr9WF7j/ZlclxjmuG5SdCmnlqpkJgTtvNf1I1XGmQxfltvTF
1HjG/CapQ5l0mWcN0FqQEsgXOyq+cMdqRPADa2Xps0gXUu5SxsqMV34Tcb1m3OKo
R+Bn+y2y62FiCSVUs8QURXfP5zDNezEJXnYDoMYw0HdE8882FHQlfZIoyxj+FQRK
YOP6zh+tqAG3+RP+DhKo1EHaZ4Y6AYPHpHK0bRchd096JQwtTI30quzQUkMUJkIB
rkWFOL2J7VjEig==
-----END CERTIFICATE-----
Generated at Wed May 13 11:02:22 2026 by rpki-client