Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File:                     xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier:          JsJ4OvbDExMkfeflZxXbbh85a9hFmGzrS85gEnybsXQ=
Subject key identifier:   0A:7F:80:DF:2C:CB:35:6A:51:8B:37:FA:66:04:C4:D4:A8:BB:F2:CD
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer:       /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial:       019E1EDA70485C5C4BA2A5D1ED0F607AA102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number:          05ED
Signing time:             Wed 13 May 2026 01:01:32 +0000
Manifest this update:     Wed 13 May 2026 01:01:32 +0000
Manifest next update:     Thu 14 May 2026 01:01:32 +0000
Files and hashes:         1: EhoGVGxSzJ85EDf-pwsVPGfHrjk.roa (hash: bYaigFFh4NG+rmCpPKbaSMIoScBrwWuRStJPl8NxmHQ=)
                          2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: bQJ1+fRi1f+vebPlXHRtWTjzlDPuqFYEGHTAdn3MPf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:70:48:5c:5c:4b:a2:a5:d1:ed:0f:60:7a:a1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
        Validity
            Not Before: May 13 01:01:32 2026 GMT
            Not After : May 14 01:01:32 2026 GMT
        Subject: CN=0a7f80df2ccb356a518b37fa6604c4d4a8bbf2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:75:e1:cf:eb:f1:8c:55:ef:9f:a0:c8:bd:
                    eb:68:9b:a3:b3:3f:6c:31:8e:00:f3:17:5a:ba:c9:
                    89:82:b9:32:ae:48:ef:96:52:db:26:73:22:dc:3d:
                    58:b1:89:4a:ae:38:34:ce:a2:ed:5d:a5:94:c8:6a:
                    29:1e:be:f0:5e:83:de:c9:a9:b3:eb:20:94:37:72:
                    a0:26:d9:98:08:65:81:55:dd:ff:9d:24:14:80:19:
                    52:32:f1:8f:7f:47:e6:0e:bc:fe:cd:05:64:c0:6e:
                    89:a3:4c:d2:26:a0:7e:b4:7e:e3:a5:35:3a:75:26:
                    4f:c3:31:4d:f6:2c:89:9e:b3:dd:6b:cb:16:e3:13:
                    06:b8:69:fc:28:5f:7b:42:71:28:dd:e5:88:d7:f3:
                    58:ba:c1:5e:cf:c1:57:d9:50:e6:d1:a8:98:54:56:
                    9f:df:53:a6:4d:bc:20:af:33:e7:0d:e4:81:10:11:
                    42:1a:83:81:bb:da:7d:3c:93:39:e4:f6:33:62:bc:
                    8a:ae:35:a9:18:79:1b:15:5d:4f:db:e2:1c:8b:84:
                    bc:be:de:ae:21:bb:e9:30:96:31:3a:a5:7c:f7:48:
                    06:ce:90:23:c5:b9:1e:e0:b8:e6:99:32:f4:09:16:
                    22:b0:56:d9:8d:ea:38:f2:22:35:56:eb:3d:b5:e2:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7F:80:DF:2C:CB:35:6A:51:8B:37:FA:66:04:C4:D4:A8:BB:F2:CD
            X509v3 Authority Key Identifier:
                keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:85:3c:8c:08:ab:b1:eb:b0:23:49:19:b6:94:9b:b8:f8:
         9a:3b:ce:30:0d:31:4e:47:87:90:fa:52:6d:65:92:ac:75:95:
         b7:02:4b:86:a0:5d:71:d7:b4:e3:17:43:df:da:c6:31:e4:ac:
         23:1f:55:b6:f8:d4:22:47:0e:85:ab:02:a9:63:ee:68:81:b1:
         66:0a:ce:97:b9:80:8c:a0:fb:92:70:1c:52:30:62:a1:a1:57:
         4d:62:4f:e8:e0:af:09:04:ad:c2:0b:92:b0:75:36:61:93:3a:
         6e:73:84:52:02:27:d8:dc:bb:95:d7:6f:54:aa:d5:8f:4b:2b:
         f2:ed:3f:12:62:f8:5b:7b:d2:c4:e1:c8:b1:74:53:8e:fd:7b:
         47:2c:93:ab:72:39:e7:30:50:95:99:ef:4c:f4:f8:52:2c:c2:
         ad:b4:fd:1a:68:dd:26:f3:ed:6e:cf:36:99:f4:2a:16:69:f1:
         8c:2b:71:94:87:58:a3:94:9d:dc:96:fa:d8:98:52:e0:b6:0e:
         ed:f3:c9:32:b2:38:85:a3:33:ea:3f:6c:69:ad:79:39:1c:9f:
         63:65:46:6b:62:ae:91:53:89:59:71:08:a9:3f:dd:e3:93:db:
         a7:73:ed:d0:69:68:b4:05:c8:ea:5e:50:cb:77:f5:b6:49:97:
         0b:24:40:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2nBIXFxLoqXR7Q9geqECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZGNkOGQwYTJhYmFlOGMyNTM5MWYyMzA1MWNjM2YwZjI0
NzkzYWEwHhcNMjYwNTEzMDEwMTMyWhcNMjYwNTE0MDEwMTMyWjAzMTEwLwYDVQQD
EygwYTdmODBkZjJjY2IzNTZhNTE4YjM3ZmE2NjA0YzRkNGE4YmJmMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh914c/r8YxV75+gyL3raJujsz9s
MY4A8xdausmJgrkyrkjvllLbJnMi3D1YsYlKrjg0zqLtXaWUyGopHr7wXoPeyamz
6yCUN3KgJtmYCGWBVd3/nSQUgBlSMvGPf0fmDrz+zQVkwG6Jo0zSJqB+tH7jpTU6
dSZPwzFN9iyJnrPda8sW4xMGuGn8KF97QnEo3eWI1/NYusFez8FX2VDm0aiYVFaf
31OmTbwgrzPnDeSBEBFCGoOBu9p9PJM55PYzYryKrjWpGHkbFV1P2+Ici4S8vt6u
IbvpMJYxOqV890gGzpAjxbke4LjmmTL0CRYisFbZjeo48iI1Vus9teJw6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp/gN8syzVqUYs3+mYExNSou/LNMB8GA1UdIwQY
MBaAFMXc2NCiq66MJTkfIwUcw/DyR5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQt
Yzc5ZDQ2YTkyMzliLzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQtYzc5ZDQ2YTkyMzli
LzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfROFPIwI
q7HrsCNJGbaUm7j4mjvOMA0xTkeHkPpSbWWSrHWVtwJLhqBdcde04xdD39rGMeSs
Ix9VtvjUIkcOhasCqWPuaIGxZgrOl7mAjKD7knAcUjBioaFXTWJP6OCvCQStwguS
sHU2YZM6bnOEUgIn2Ny7lddvVKrVj0sr8u0/EmL4W3vSxOHIsXRTjv17RyyTq3I5
5zBQlZnvTPT4UizCrbT9GmjdJvPtbs82mfQqFmnxjCtxlIdYo5Sd3Jb62JhS4LYO
7fPJMrI4haMz6j9saa15ORyfY2VGa2KukVOJWXEIqT/d45Pbp3Pt0GlotAXI6l5Q
y3f1tkmXCyRAug==
-----END CERTIFICATE-----
Generated at Wed May 13 11:15:49 2026 by rpki-client