Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          PqYdzqXnohLodmkx1ohnbskbQo79126gpxbvBqzTmHs=
Subject key identifier:   80:F2:65:AD:88:B6:F7:65:F5:03:FE:30:21:CD:2D:F5:19:48:CE:56
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       019D28BBC92CEE0AA22E2067481C77348293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          06C8
Signing time:             Thu 26 Mar 2026 06:01:28 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:28 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:28 +0000
Files and hashes:         1: 0-9sd-qmadUujczOz2WkJX2kNQA.roa (hash: GjNrMaOgADYzx542miG7jXCQg7xlwiNJxr+8IrSPpjc=)
                          2: LNYXeGK0fNHFOXoFsTX923sjqo4.roa (hash: HMZywae9ctDuPusaGMZ0nvtbkQTFjTevWXrmDyy57E0=)
                          3: W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa (hash: FSZFedNs1YnxbjhewAgdDVFznFYlPK2O05FcBLwFtyk=)
                          4: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: 55tRIAKZBCnWzH3o5RoLOV3psQNwEFf4nv21Zb3Esh4=)
                          5: jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa (hash: EV9l1WgVc2rsgYc/+T8QGA8A2PJD5mEc20rAUOjgeu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:c9:2c:ee:0a:a2:2e:20:67:48:1c:77:34:82:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Mar 26 06:01:28 2026 GMT
            Not After : Mar 27 06:01:28 2026 GMT
        Subject: CN=80f265ad88b6f765f503fe3021cd2df51948ce56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:3a:7f:6e:73:15:23:90:58:bc:6c:53:46:
                    f9:76:5a:c4:db:15:8c:61:b7:55:54:d2:a2:a0:ad:
                    ad:48:c2:c7:8c:13:07:89:fa:3a:75:ba:77:6f:01:
                    b9:dd:4f:f7:fb:80:2d:4e:f2:bd:b1:c0:16:c5:47:
                    b4:e2:02:6b:e9:b9:48:24:75:d6:25:15:cb:17:37:
                    81:9b:b5:67:58:31:ed:d2:65:61:6f:71:85:90:d3:
                    4a:bf:44:bc:3b:39:12:b2:99:80:91:dc:a5:58:2c:
                    24:a4:5f:f0:bf:25:bf:e9:f1:73:2d:bb:03:cb:ff:
                    26:8a:f3:e8:81:df:6b:4e:53:08:98:58:33:2f:21:
                    50:9f:7e:7e:fc:26:9d:02:7f:f1:21:f1:35:50:80:
                    df:49:ce:90:c7:c4:9c:0a:75:65:cb:a0:aa:fd:61:
                    05:9e:2d:fc:0e:73:be:55:ba:29:d8:ee:84:cb:4b:
                    41:89:9c:66:13:cb:35:5d:88:ca:12:e0:50:a6:83:
                    e0:2e:8e:b3:0f:89:9a:e1:1a:ca:dd:ab:12:96:e7:
                    3b:a2:aa:9e:1d:ef:7b:5b:ac:e1:aa:a9:66:48:70:
                    83:1d:2e:23:3d:4a:60:66:dc:f7:4f:0e:50:c6:5e:
                    e3:c9:18:ae:c9:c7:36:b5:89:79:81:39:43:53:c7:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F2:65:AD:88:B6:F7:65:F5:03:FE:30:21:CD:2D:F5:19:48:CE:56
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:25:83:7a:c7:7a:5d:34:10:36:75:2f:9a:92:ee:04:9c:8f:
         b9:a8:ee:74:b3:41:a2:f6:17:15:56:2c:f3:7c:5c:86:46:20:
         b6:98:53:94:33:63:f7:60:88:e6:25:77:0b:73:99:4b:6c:ac:
         4a:30:74:e8:ca:ad:2c:01:65:17:65:aa:8a:4c:b6:86:0e:39:
         3e:57:a3:8e:3f:7e:33:77:c1:15:c2:aa:5f:33:50:de:ae:5c:
         11:49:b5:de:ad:25:7a:8a:5a:d0:e1:eb:39:75:b8:3a:c6:af:
         82:e1:ae:e5:e2:f7:51:72:65:44:e4:c2:1d:ed:7a:69:58:97:
         4a:a0:29:b3:94:80:f8:08:f0:4a:97:fc:69:ab:2f:37:1e:4f:
         3b:e5:5b:46:55:77:d6:71:f5:01:11:5b:8d:4a:f9:c3:de:13:
         3c:ed:b5:d7:59:b9:11:be:ab:e2:23:ff:5b:1a:ae:9c:84:62:
         d8:66:7d:91:7d:bf:dc:a3:79:88:15:10:c6:ab:75:70:c1:c3:
         00:b4:6c:87:56:1b:49:2e:86:d7:13:79:d7:87:d6:56:d7:c5:
         38:87:1c:a7:8e:93:bd:f9:61:a3:7d:a5:72:4c:c5:a6:79:76:
         2c:22:5d:8a:4c:2c:f6:c4:1c:d8:2a:00:e7:40:53:b6:6e:c7:
         fd:c0:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:39 2026 by rpki-client