Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          VtaLCr/hR619epdU9c4kWbhrf1AbNaEQUB8xMsm8Mt8=
Subject key identifier:   F4:CD:DD:69:70:E0:8C:A2:BF:0D:AB:69:3C:58:32:51:12:86:51:59
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       019E1FECB249A50A909A40725C8E5404D224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          18A6
Signing time:             Wed 13 May 2026 06:01:06 +0000
Manifest this update:     Wed 13 May 2026 06:01:06 +0000
Manifest next update:     Thu 14 May 2026 06:01:06 +0000
Files and hashes:         1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
                          2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: 9aVhLjP6dTZB2DTjVrCkB724hdjKNqb/ktkK5FNhsNM=)
                          3: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
                          4: xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa (hash: 7eLkL929YGBrLf10p7Xu8H5BWgjYEKgp3pDvwQ/th+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:b2:49:a5:0a:90:9a:40:72:5c:8e:54:04:d2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: May 13 06:01:06 2026 GMT
            Not After : May 14 06:01:06 2026 GMT
        Subject: CN=f4cddd6970e08ca2bf0dab693c58325112865159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:d2:4d:a8:64:9a:d1:93:5c:35:73:cd:c1:
                    71:72:b8:2e:fc:54:63:6d:ba:d0:3f:36:b1:59:70:
                    c0:e2:ed:2e:6a:34:69:9e:78:af:bf:00:09:86:51:
                    1a:e2:77:5b:4d:f1:90:f8:83:5d:54:7c:02:93:04:
                    ca:ea:aa:65:93:e5:10:d8:56:bd:e2:12:78:8a:00:
                    8f:eb:b9:6d:ea:a9:af:fe:2a:26:23:a1:b2:ed:bb:
                    83:c9:1e:bc:6f:0a:c2:54:42:97:62:92:2e:24:b7:
                    2d:da:52:93:e7:f4:5f:e6:c0:2c:5f:3f:47:09:4b:
                    f8:d1:06:c4:73:1d:5a:11:45:41:26:65:96:ae:97:
                    af:49:b4:21:61:0d:f1:b0:5a:cc:ae:d1:6e:17:6c:
                    70:fc:f7:69:34:33:28:98:ff:8d:91:a5:65:d2:e5:
                    0a:01:f8:46:24:dc:cc:e9:70:6d:b0:4c:95:b4:25:
                    5f:ac:d4:c7:f4:a8:3f:8b:27:c4:58:cc:25:6c:79:
                    75:9c:0b:ee:13:91:17:55:6b:87:a1:8d:14:69:c0:
                    4f:bd:51:82:75:c3:40:63:4b:fd:0c:dc:36:d5:86:
                    64:32:d2:7a:20:47:0f:55:66:1e:66:74:3e:9f:1b:
                    11:05:c5:00:25:b2:6e:52:c8:41:cc:7e:92:44:6f:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CD:DD:69:70:E0:8C:A2:BF:0D:AB:69:3C:58:32:51:12:86:51:59
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:5f:a7:d6:5e:7d:e4:9c:5b:91:b3:e0:35:03:2d:44:f2:
         d0:6e:21:40:1d:1d:42:96:ba:27:35:28:60:70:79:05:51:56:
         8a:c5:b4:f1:e1:f4:90:c8:3e:fc:7f:5d:99:7b:1f:dc:6e:ee:
         d2:1a:56:71:08:d6:d5:69:06:fa:ca:5a:b7:57:c9:b1:66:e9:
         a5:04:60:fa:69:3b:d9:5c:9e:1b:70:5b:55:bc:5e:15:6e:7a:
         fb:96:00:97:01:ac:56:61:eb:20:62:fa:93:71:4a:ea:2b:bd:
         92:ff:87:39:6e:a9:cd:5a:a5:d5:dc:a2:1c:f9:e2:d7:15:06:
         37:59:d7:fe:f8:fe:ec:75:b7:ca:ee:54:58:11:f6:9b:81:d5:
         2d:a9:28:11:43:72:71:79:4b:e6:79:53:38:93:79:08:df:b3:
         e7:3f:7c:93:72:cf:30:18:3b:a8:f8:6c:0d:90:29:4f:39:77:
         b0:e7:f2:87:4e:56:ba:5d:b7:6d:fb:b6:dc:3b:c6:ce:ab:5b:
         d1:b3:34:78:35:26:e1:95:79:ee:a2:ae:71:a0:12:aa:bf:32:
         4a:d4:2c:2e:58:50:87:9c:bc:77:e0:c4:e0:30:44:ac:34:f6:
         23:42:65:9e:4d:a2:d0:51:27:f8:30:4a:20:98:ba:82:0d:20:
         76:00:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:31:04 2026 by rpki-client