Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File:                     XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier:          oQ2838NaPWEBTmiYov/lxxmPh2a27S7lSNxk0DIVyAk=
Subject key identifier:   66:3A:6B:24:1B:E5:34:1B:C8:02:CA:C8:5D:4F:9D:1C:F8:3A:02:EE
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer:       /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial:       019E2211CF4B9CC93FC3526CFCC87EDE190C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number:          1440
Signing time:             Wed 13 May 2026 16:00:52 +0000
Manifest this update:     Wed 13 May 2026 16:00:52 +0000
Manifest next update:     Thu 14 May 2026 16:00:52 +0000
Files and hashes:         1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
                          2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
                          3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
                          4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: DYQfD8s1btroCWvjRMcp39iKaeRcxJpH6xbZUVoVNFE=)
                          5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:22:11:cf:4b:9c:c9:3f:c3:52:6c:fc:c8:7e:de:19:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
        Validity
            Not Before: May 13 16:00:52 2026 GMT
            Not After : May 14 16:00:52 2026 GMT
        Subject: CN=663a6b241be5341bc802cac85d4f9d1cf83a02ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:40:62:46:56:d4:10:94:08:2f:24:76:ff:d1:
                    78:96:3f:22:48:f8:ce:8e:66:b3:a5:c4:22:3a:8f:
                    ef:5c:11:b3:12:81:d7:c7:81:a3:ee:b9:52:f3:fd:
                    ff:66:38:60:85:f5:aa:5d:ff:5d:b7:7f:70:c8:c2:
                    9e:ae:dc:5d:4b:6b:fb:62:1a:43:68:ef:db:2f:77:
                    57:dd:c2:1d:fa:82:78:20:76:fa:20:c8:ce:01:cf:
                    2e:af:6d:c6:27:79:a3:10:20:00:cb:b1:3b:25:eb:
                    f9:0f:81:10:ac:b4:17:35:94:c0:6e:f1:fc:58:b1:
                    43:14:bc:4a:cf:e5:e2:3e:a3:c5:f5:6a:fa:52:bc:
                    e8:a7:8b:9f:e9:4a:39:3d:91:77:40:09:d4:bd:82:
                    96:1e:52:31:d3:94:49:dd:91:87:e8:e9:de:0f:87:
                    08:f4:b8:19:ef:7a:6e:26:35:b5:89:97:c1:78:15:
                    7b:fc:fb:ee:5c:48:a2:b7:36:99:c4:40:27:07:32:
                    db:00:1e:53:b9:c1:7f:14:d4:70:a1:90:21:9a:f0:
                    f0:d3:a0:87:41:78:4a:2b:0f:94:36:b0:e0:8d:3c:
                    83:89:6d:41:6a:25:2a:d4:ae:f7:ab:7e:c7:17:a1:
                    1d:73:15:10:71:31:96:8b:ee:59:85:95:5c:bc:99:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3A:6B:24:1B:E5:34:1B:C8:02:CA:C8:5D:4F:9D:1C:F8:3A:02:EE
            X509v3 Authority Key Identifier:
                keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:84:c0:5d:7f:6a:59:2c:13:88:ad:2b:48:57:e6:ac:ee:fd:
         d2:1f:84:52:9b:ed:9c:74:3a:eb:2c:18:90:46:ce:67:fa:14:
         d7:28:58:3f:e5:ef:a4:dc:5e:75:b8:5c:28:c7:55:7a:c8:4d:
         e4:24:fd:0a:d3:fc:c5:7b:71:51:41:bb:62:86:db:bf:67:16:
         b4:a6:de:91:3b:bf:3b:c1:fd:de:57:e5:72:d9:4d:d4:7e:8b:
         1d:73:71:44:fa:97:02:69:77:e0:10:a7:91:3c:be:f6:a2:10:
         50:50:54:e8:b1:e4:3d:c5:bb:65:ca:c8:c2:4d:49:a5:a7:cf:
         8d:7a:e6:0e:68:d9:4d:4e:b9:f5:8b:72:d9:de:34:65:78:6b:
         7a:8c:0c:7e:f8:be:aa:de:f2:9a:2e:c6:57:04:2b:e9:57:e1:
         90:e5:de:c5:bc:31:f5:a8:ca:41:18:47:96:87:71:1a:12:e9:
         b3:d6:b8:9b:43:bd:a1:66:9d:db:0e:2f:8e:03:d2:e6:92:52:
         7e:dc:3f:aa:57:3a:a0:ae:7f:e5:d1:0c:18:62:07:92:ef:f5:
         5c:e9:27:16:29:05:4b:ac:3c:c3:b2:04:b9:1e:e1:f3:f8:9a:
         bb:d7:32:43:74:f7:dd:dc:bb:d6:4e:39:21:08:42:56:fa:d5:
         7f:21:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:02 2026 by rpki-client