Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File:                     xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier:          YYld9NUGOlEIfzYmS6RJS8ayP+nShzkDu83HaNKUqkw=
Subject key identifier:   BE:0D:3C:43:CD:82:77:75:06:71:8A:41:2E:AD:CD:83:E9:82:1D:36
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer:       /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial:       019E1DFE8C7F50FBE18956DE02E5B548D2E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number:          02FD
Signing time:             Tue 12 May 2026 21:01:21 +0000
Manifest this update:     Tue 12 May 2026 21:01:21 +0000
Manifest next update:     Wed 13 May 2026 21:01:21 +0000
Files and hashes:         1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
                          2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: VLEwRzpYirePxu7JpjiuS0waKg5IJAxzBXwLO7hAjwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:8c:7f:50:fb:e1:89:56:de:02:e5:b5:48:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
        Validity
            Not Before: May 12 21:01:21 2026 GMT
            Not After : May 13 21:01:21 2026 GMT
        Subject: CN=be0d3c43cd82777506718a412eadcd83e9821d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:15:54:9c:22:a3:7c:82:eb:0c:8f:6d:c0:
                    46:03:89:a7:ef:50:67:a9:54:1c:ed:60:c3:0d:12:
                    d6:f3:4c:ca:58:95:69:0f:1d:f2:d6:33:38:1a:d7:
                    ef:5b:dd:f0:0c:1f:93:76:29:e9:ef:8b:fc:ba:93:
                    60:43:9b:1d:ea:ee:eb:ef:76:1f:3e:18:0f:34:59:
                    c6:c1:c6:c9:a3:ab:45:46:01:f6:0c:8b:de:4d:69:
                    ec:56:d3:5c:90:41:d9:1f:d9:56:81:95:b2:78:55:
                    85:0b:aa:52:34:55:51:73:8a:bd:64:d5:02:c5:25:
                    47:43:d8:c1:98:0a:64:3a:c1:40:4d:5d:2d:ad:52:
                    27:18:86:04:da:7e:8c:5f:94:83:a8:b6:80:41:da:
                    a7:97:4e:8e:a7:74:dc:15:85:41:66:31:88:9f:92:
                    15:2b:6f:12:4c:dc:0b:43:cc:1e:2b:10:4b:c2:a1:
                    9e:3a:3e:01:10:26:4b:38:0c:55:f9:06:2b:f3:2c:
                    1a:13:7f:ca:41:d6:7e:ec:a5:88:ed:98:45:d1:2e:
                    c3:d3:26:d6:8c:02:1c:63:1a:29:73:b5:96:15:1b:
                    d8:a5:6a:d9:11:80:ca:9a:7c:af:99:39:c8:04:d0:
                    06:1a:43:d8:66:e3:ce:f4:61:6b:83:13:a1:29:85:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0D:3C:43:CD:82:77:75:06:71:8A:41:2E:AD:CD:83:E9:82:1D:36
            X509v3 Authority Key Identifier:
                keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:10:9d:54:eb:b2:56:8f:41:6a:ee:1e:f8:51:e0:40:75:1d:
         06:27:50:90:77:58:3c:31:9c:28:be:e6:3e:6b:b6:17:ac:9a:
         66:e7:2f:0d:63:2a:1f:c5:cc:09:3d:89:ef:a4:f4:99:27:7c:
         15:b8:87:2c:a1:d8:04:9d:98:76:22:4c:eb:94:92:a9:53:47:
         70:46:5f:f4:09:23:29:3c:7a:2e:08:cd:14:38:53:74:de:e9:
         11:bb:a6:1e:63:d5:41:37:bc:e9:79:8c:8c:e2:8e:54:37:07:
         93:8a:12:d3:5a:ee:ce:8d:e7:a0:ac:68:62:fa:15:3a:01:fd:
         90:de:a0:46:8d:86:ae:c5:13:64:ea:b7:c6:10:ae:8f:15:7c:
         c6:0c:d4:ef:6f:83:94:9a:35:ad:b0:b1:aa:a5:d3:68:e1:f7:
         13:11:41:12:ec:5c:96:5a:f9:79:eb:34:d5:35:17:4a:7f:00:
         d2:0d:c4:70:bf:64:ed:97:1d:af:05:73:ad:2b:50:44:7a:8d:
         6c:2b:10:04:77:a4:67:c7:54:08:4d:a5:e0:ac:11:d7:b1:b4:
         04:92:70:67:18:56:a1:28:1f:3c:7c:09:e1:12:36:11:8c:04:
         84:a3:96:92:5c:b7:a5:08:70:47:9c:70:5d:ac:da:70:d1:ad:
         d9:64:53:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/ox/UPvhiVbeAuW1SNLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTEwYzdjYmZmZDc0ODhhOTZhMDJkNWM5MTJmOWY5MjU2
NGJiNWMwHhcNMjYwNTEyMjEwMTIxWhcNMjYwNTEzMjEwMTIxWjAzMTEwLwYDVQQD
EyhiZTBkM2M0M2NkODI3Nzc1MDY3MThhNDEyZWFkY2Q4M2U5ODIxZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE4VVJwio3yC6wyPbcBGA4mn71Bn
qVQc7WDDDRLW80zKWJVpDx3y1jM4GtfvW93wDB+Tdinp74v8upNgQ5sd6u7r73Yf
PhgPNFnGwcbJo6tFRgH2DIveTWnsVtNckEHZH9lWgZWyeFWFC6pSNFVRc4q9ZNUC
xSVHQ9jBmApkOsFATV0trVInGIYE2n6MX5SDqLaAQdqnl06Op3TcFYVBZjGIn5IV
K28STNwLQ8weKxBLwqGeOj4BECZLOAxV+QYr8ywaE3/KQdZ+7KWI7ZhF0S7D0ybW
jAIcYxopc7WWFRvYpWrZEYDKmnyvmTnIBNAGGkPYZuPO9GFrgxOhKYWkXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4NPEPNgnd1BnGKQS6tzYPpgh02MB8GA1UdIwQY
MBaAFMThDHy//XSIqWoC1ckS+fklZLtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUt
NDU4YmY1OTY4ZGQxLzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUtNDU4YmY1OTY4ZGQx
LzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxCdVOuy
Vo9Bau4e+FHgQHUdBidQkHdYPDGcKL7mPmu2F6yaZucvDWMqH8XMCT2J76T0mSd8
FbiHLKHYBJ2YdiJM65SSqVNHcEZf9AkjKTx6LgjNFDhTdN7pEbumHmPVQTe86XmM
jOKOVDcHk4oS01ruzo3noKxoYvoVOgH9kN6gRo2GrsUTZOq3xhCujxV8xgzU72+D
lJo1rbCxqqXTaOH3ExFBEuxcllr5ees01TUXSn8A0g3EcL9k7ZcdrwVzrStQRHqN
bCsQBHekZ8dUCE2l4KwR17G0BJJwZxhWoSgfPHwJ4RI2EYwEhKOWkly3pQhwR5xw
XazacNGt2WRTxQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:17:54 2026 by rpki-client