Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File:                     Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier:          10cTTMvq7hxo4Db1Qq4befk4BEiQBvVUgVQcyt4LHNQ=
Subject key identifier:   AD:B6:4A:61:77:2C:BD:8B:D8:B6:E2:CD:83:10:10:27:46:2B:3E:E6
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer:       /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial:       019E1DFDEC1D1B85629C68D83C68A0361FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number:          0C60
Signing time:             Tue 12 May 2026 21:00:40 +0000
Manifest this update:     Tue 12 May 2026 21:00:40 +0000
Manifest next update:     Wed 13 May 2026 21:00:40 +0000
Files and hashes:         1: IGvyNAGkUwt5swY3ZPAsKMi4Y9A.roa (hash: 9R/m5HiUPddcgvtc69T2bzqCBkVGTvcPZN9UWeURM0E=)
                          2: XSXw8zz6wHnklahOljGNkkMK48Q.roa (hash: p4JyRpCAuLEOOG8JHAgwOmpcnmRpxW2S31rpM+z8Q1Y=)
                          3: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: umAKSSYppaZ3c4njVEPDTd+iO0hxBOgU340CgFS6vKg=)
                          4: jfJDf-L9uOm-plysAb0D7Pwv-XM.roa (hash: /1wlo6BoLw4GajX9St+IqQx9/1PVrea3LjLhasyV+pk=)
                          5: jusKsFR2myH5y_SxmZdhc547TOU.roa (hash: FjWKJu5eJdLGQtzzBBkYvevz1z9xR9jrxtDvXtKd9FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:ec:1d:1b:85:62:9c:68:d8:3c:68:a0:36:1f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
        Validity
            Not Before: May 12 21:00:40 2026 GMT
            Not After : May 13 21:00:40 2026 GMT
        Subject: CN=adb64a61772cbd8bd8b6e2cd83101027462b3ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:cd:6f:cf:53:d2:16:9e:d6:56:ed:72:56:
                    9f:56:cd:ad:26:ae:35:8d:d2:b2:1c:4b:38:07:39:
                    6d:a7:e0:c4:5d:63:bd:73:b3:47:f8:01:b2:0f:58:
                    9e:b2:d4:65:29:e8:0c:16:a6:3a:0f:40:2b:90:fe:
                    19:8e:00:34:9f:27:bb:b7:1e:da:47:9a:31:c6:28:
                    15:d5:7e:9d:a1:cd:58:ed:fe:2a:b6:95:77:28:07:
                    24:a9:f5:81:ff:c9:d5:d2:69:bf:2a:c8:10:10:ae:
                    d6:c1:0a:4f:05:5c:b2:eb:f6:ad:85:dc:7a:c7:f0:
                    35:6f:90:1b:e1:97:12:db:1f:a3:3e:da:8f:3d:b4:
                    06:46:55:2f:2f:8a:20:1d:6e:cb:81:c3:44:b8:f1:
                    4d:73:86:2a:00:d7:f6:b2:a4:46:f5:4a:9d:ad:4b:
                    1a:0f:c0:7b:fb:56:bc:66:5f:d3:64:59:95:c5:a0:
                    e5:19:f2:84:7a:ae:a6:5d:58:7e:2a:0a:8d:e9:e0:
                    3f:3a:99:2b:58:8f:1a:d0:f0:1e:c5:3a:eb:f5:f7:
                    fc:be:14:91:25:39:41:04:9a:d6:e8:76:75:44:97:
                    94:ab:ec:01:52:23:6c:7f:a1:5e:e0:ed:75:b6:7c:
                    9d:9f:f0:ec:0c:c4:38:f0:e1:4e:ff:67:db:f1:07:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B6:4A:61:77:2C:BD:8B:D8:B6:E2:CD:83:10:10:27:46:2B:3E:E6
            X509v3 Authority Key Identifier:
                keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:f8:47:15:ec:b9:5e:cd:dd:19:83:ca:67:c4:be:0d:6a:20:
         69:40:2b:8a:39:49:fc:ea:b0:29:27:a4:7b:3d:4a:42:9f:b3:
         ff:e8:eb:e8:d0:8c:1a:68:b9:4b:aa:28:d3:45:be:de:c5:07:
         93:15:69:9d:75:23:b1:56:1a:5f:02:47:0c:00:cf:cf:ed:32:
         4a:00:f3:a3:1f:d8:b6:02:2d:8a:37:b2:62:69:f1:64:ff:fd:
         2e:f1:48:20:73:e8:c8:77:db:5c:5a:07:29:a0:d8:07:0e:27:
         d5:af:da:45:16:8e:20:d4:63:b1:ca:94:ad:b3:80:1f:5c:54:
         15:d0:6f:13:bb:d6:39:ec:26:18:98:da:a8:86:27:09:91:51:
         73:6e:c7:23:4b:40:91:cc:59:00:8a:96:19:3b:27:8b:5b:42:
         fc:44:0d:62:18:84:61:97:05:90:24:59:47:c5:0e:38:ce:0b:
         9c:80:12:53:2b:05:73:c0:90:5c:2c:32:99:85:a4:23:1e:5b:
         f1:88:98:d3:89:62:af:be:35:a0:e5:d4:fd:16:ec:13:73:ab:
         fd:92:17:14:6a:94:4e:3f:4b:18:26:42:c6:53:9c:8a:f2:60:
         9c:2b:6f:ec:c3:31:04:47:fa:c7:82:91:b4:13:5b:ca:1c:9f:
         fb:e1:8f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/ewdG4VinGjYPGigNh/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGZkOTBkOTg3Mjk3Y2I1ZGQ0ZTA3YmU4NDBkMjgwZDFl
MmNjNGEwHhcNMjYwNTEyMjEwMDQwWhcNMjYwNTEzMjEwMDQwWjAzMTEwLwYDVQQD
EyhhZGI2NGE2MTc3MmNiZDhiZDhiNmUyY2Q4MzEwMTAyNzQ2MmIzZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nDNb89T0hae1lbtclafVs2tJq41
jdKyHEs4Bzltp+DEXWO9c7NH+AGyD1iestRlKegMFqY6D0ArkP4ZjgA0nye7tx7a
R5oxxigV1X6doc1Y7f4qtpV3KAckqfWB/8nV0mm/KsgQEK7WwQpPBVyy6/athdx6
x/A1b5Ab4ZcS2x+jPtqPPbQGRlUvL4ogHW7LgcNEuPFNc4YqANf2sqRG9UqdrUsa
D8B7+1a8Zl/TZFmVxaDlGfKEeq6mXVh+KgqN6eA/OpkrWI8a0PAexTrr9ff8vhSR
JTlBBJrW6HZ1RJeUq+wBUiNsf6Fe4O11tnydn/DsDMQ48OFO/2fb8Qf5EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK22SmF3LL2L2LbizYMQECdGKz7mMB8GA1UdIwQY
MBaAFF8P2Q2YcpfLXdTge+hA0oDR4sxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjIt
N2JjZWZhOWY1OWU4LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjItN2JjZWZhOWY1OWU4
LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy/hHFey5
Xs3dGYPKZ8S+DWogaUArijlJ/OqwKSekez1KQp+z/+jr6NCMGmi5S6oo00W+3sUH
kxVpnXUjsVYaXwJHDADPz+0ySgDzox/YtgItijeyYmnxZP/9LvFIIHPoyHfbXFoH
KaDYBw4n1a/aRRaOINRjscqUrbOAH1xUFdBvE7vWOewmGJjaqIYnCZFRc27HI0tA
kcxZAIqWGTsni1tC/EQNYhiEYZcFkCRZR8UOOM4LnIASUysFc8CQXCwymYWkIx5b
8YiY04lir741oOXU/RbsE3Or/ZIXFGqUTj9LGCZCxlOcivJgnCtv7MMxBEf6x4KR
tBNbyhyf++GPvg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:44:28 2026 by rpki-client