Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          ZoxtiPc6Oh4qttqth30lQgKbEczO58Aq+XDqqv3pFkI=
Subject key identifier:   15:34:E3:52:61:25:D2:DF:AE:2F:DC:DB:21:60:9A:A2:3C:86:F1:8E
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       019D2A04AC8B67BA0EA6F4F06F9F591DD611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          18B9
Signing time:             Thu 26 Mar 2026 12:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:42 +0000
Files and hashes:         1: 03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa (hash: so/wDftuCuhVwNVUjhg5MbT2/4hCaRH4nYQ0u3BjKb0=)
                          2: 4zySZiWhTUg_rSb8KoK0O9QlCnc.roa (hash: gFl6wOPf/Gu9CFX49zoLAcByVCFuRBnN0N7UMDgQVbw=)
                          3: 6okDW562ptIs4iN1y-WMYg-45jY.roa (hash: KaiRGaOivd7uFd01xG4Jps9z07e2u3NUoDlDSh+lkH4=)
                          4: BHlTz3-_hk0tMzZp-IRVezg5RNg.roa (hash: 3CAUKuO6yLGGc6BqD8YXI8xLV+Hesf2PBsRTTbbaRXY=)
                          5: Cw5SfyDzZSwcs1u004-BHBsZJ2k.roa (hash: dTjLGIgHzcuawJEo1z0MGCRL7Fj8URygA4AZ4Hforus=)
                          6: Gxw_WTtXXlB9ovzVsZ-LJ4z0v8Q.asa (hash: WH1dBt0aNelRDH5woRZUZpaGD5516U5Tlex+HGGo1Mg=)
                          7: T7EjLOUNjE599ece2DV4T26b9xY.roa (hash: fsf0dRPygHs9hSe02Kw5kkb/kNnztp8TK8bBIMk8jhU=)
                          8: UlJaOFnMpoO5SgKO7Th_pY-ZAjo.roa (hash: jUSX0KizK2PQI3mj5biaakX23YPg0NJIgDEQv+TXIfQ=)
                          9: WRCnuaJzRXm83oAAxB0GzCKosjw.roa (hash: Zlyy/Icbe5M8aCeFBu4UmwH/OngNWuHDogd3Lscyms4=)
                          10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: Qlm/nKdfWsEyu3TJm14t1rM9pXOFTNu0a/9Dbq5CjHE=)
                          11: b24MgnJElk0t0CZYGUPCS0WiBxQ.roa (hash: cWHhW2paDx5FRXzehDQT7p6siSal6c3Aqs94Jvc3VHg=)
                          12: f9ERBjEpHbN1pfhl_nyFiocjtUM.roa (hash: eOOBr7U1g+HNywPWJzzBaEPCZoT5835M09OomcowoyQ=)
                          13: fZO1V-C0cXhOHVvlHXa0vUYnHZ8.asa (hash: cgi6TIEFIyrc5AnWcFBoC5eGLvx0L0ViQ+5+kfaeFOU=)
                          14: hAf22SRJwgs0SWkdAxUs95Fa0v0.roa (hash: 7vak+mJ/sIQOwdjrAkPrbLJTSGMQ1rFuipgFbAcPiHo=)
                          15: jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa (hash: 0xPjFQyLdMuqT+l7cmEhhj8WC9rilD8CahSrHUjkdaE=)
                          16: k09qltBTafYPaN8mKEjySL8ft6A.roa (hash: MFuya8B+MwfIjFnhNi4ZBDH/cZzScHZPkCXENvMvREQ=)
                          17: nkrV5tLs-lefafrDVBSQgulDPOI.roa (hash: 9SSFucsxAfajh5jClHvePjClBs0ArUj4EcuwFRS1hBA=)
                          18: q7ejmoUa5CLp8FjjBu9-Afywcr0.roa (hash: g5mShwr6G9nNz1wO7zkLNb/6wzwAilrCOEifz/cQvrY=)
                          19: wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa (hash: DtOCWrW/1nLce+oLk7kSY37T9S5ZLMhN/Uio3q7OELI=)
                          20: xI9niScPVURzbD2atpgMk7GVunU.roa (hash: wBTDsm/pz9hBwb3Vy+BwrclzAnI72KZbmuOWlENCDso=)
                          21: yNIYxMnUO5naybwPyNyh5ewSWWc.roa (hash: JUSRTIxpmqX2Md1pS2aFTtzHv44wRgNWsPuej9W1PDw=)
                          22: yTtc9_cvInn7yvfcK78WqTzFBDM.roa (hash: GZqbLQNtSwfpqv55KNnGoj2TZ2D+L4eB5ErF2hLFt3Y=)
                          23: ztKZKXz5sSSd9mxS9EgI0poqAYg.roa (hash: nBdrQf8RxLCFFDAly/9t+zuqKEqOGBMYF3lSM61ag10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:ac:8b:67:ba:0e:a6:f4:f0:6f:9f:59:1d:d6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Mar 26 12:00:42 2026 GMT
            Not After : Mar 27 12:00:42 2026 GMT
        Subject: CN=1534e3526125d2dfae2fdcdb21609aa23c86f18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:0f:10:d0:ae:bc:a7:12:fc:1d:7f:27:cf:
                    41:1f:f7:ef:1a:e9:e3:f6:25:3a:50:9e:33:42:92:
                    57:e2:11:96:4d:6c:75:e9:6c:32:1a:59:f8:c1:8e:
                    df:7e:ae:a2:b9:20:a2:8d:9a:80:12:c8:c8:fc:b9:
                    be:27:22:74:df:c3:0a:2f:d3:eb:c9:8c:ef:31:7d:
                    cc:74:e0:11:cb:11:6d:e4:71:1c:88:fe:14:3a:ef:
                    70:0f:98:0e:96:cb:63:81:8f:14:4a:58:96:33:10:
                    6c:65:8d:5e:31:d6:d6:75:5d:8e:d3:69:8f:f8:5f:
                    fd:0b:2c:36:9b:83:53:04:ed:1a:6c:01:b0:eb:cb:
                    1b:2f:a9:61:6b:f8:5a:cd:ff:af:6a:99:44:aa:50:
                    72:13:13:aa:b0:de:3a:38:d9:fd:fe:51:b3:e3:27:
                    4f:52:bf:0e:37:85:2d:1f:8d:32:45:4f:56:8b:68:
                    13:5e:58:e8:27:05:47:7c:c7:7b:c8:31:f2:dc:3c:
                    6f:5e:70:e9:e3:4c:72:b1:aa:f6:bc:5f:fd:d3:8a:
                    c0:d0:ce:39:f2:51:7d:c4:89:e3:71:8a:43:28:9e:
                    bd:79:47:26:bc:5b:c5:19:36:d5:3b:b1:27:ed:2e:
                    e1:e8:af:f4:ed:47:62:f1:4b:a2:e2:67:90:6b:e8:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:E3:52:61:25:D2:DF:AE:2F:DC:DB:21:60:9A:A2:3C:86:F1:8E
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:82:2d:7b:91:3a:6f:63:da:b2:b6:dc:26:b4:9c:9b:f4:03:
         f9:06:d4:9d:d8:a2:9e:92:af:25:81:48:68:92:8c:d4:bb:87:
         cb:e3:94:40:f4:a4:a6:81:99:20:a0:8b:7b:b2:ed:6e:fb:b2:
         76:0c:a0:d5:72:82:01:c6:fe:29:a4:54:83:3d:db:7c:dd:66:
         52:3a:6f:b6:37:f1:c7:83:06:b3:f4:c1:df:79:0b:c3:bf:38:
         b7:86:8f:f6:24:84:a2:e6:e0:bb:90:0c:0d:18:e3:03:f9:0a:
         3c:7c:b6:ee:f2:89:4c:e8:4a:d3:3c:77:7f:38:3f:f2:d2:14:
         2e:63:bf:a3:71:7a:b1:bd:67:d4:31:79:b4:de:55:4b:7a:8a:
         2d:c1:15:e4:54:2d:0f:b9:55:27:bb:73:15:2c:0c:48:de:fb:
         f1:2a:6e:b5:7e:ff:f8:dc:0f:7d:67:16:f8:9e:3a:f2:d0:03:
         03:47:9e:b7:5c:6f:8f:25:b2:75:b1:aa:b0:9a:c7:c5:41:6d:
         90:1a:1d:a0:aa:b5:ee:92:98:ba:69:6d:a7:10:5f:59:4b:e3:
         63:1c:e6:d5:36:77:ae:c3:07:ff:d7:17:c7:1d:2c:06:c8:7d:
         30:30:08:9b:19:c9:b2:22:e2:95:44:98:88:d0:94:76:de:b7:
         c1:fe:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:18 2026 by rpki-client