Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File:                     xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier:          Txb5XIEmxp1G1xSuWg2EInR/8zi3egwzqMkfNHuY+UQ=
Subject key identifier:   9D:8D:57:60:B3:F4:88:0E:4B:75:D1:92:72:B5:F3:F5:85:09:07:81
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer:       /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial:       019F8E347D8D1A273BC81C3D8714BB5C77B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number:          05E3
Signing time:             Thu 23 Jul 2026 09:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 09:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 09:00:32 +0000
Files and hashes:         1: MWnPy89PH_1TfAr-2f04R8v5sE4.roa (hash: lLx6SLjmp2bg19wDs+FyMt7/MMn+v1mjyT18ZnGU1Mk=)
                          2: gchew8N-s3QGJhaPeq9th0RAwrA.roa (hash: 8LHWubfz5C/zrE3nYoyb2vELJgFr9oL05PR7fmzV9hw=)
                          3: m2sCh5HkLxEE1VASi8B7f5_IGDo.asa (hash: 4Epl+7kUup5rqY+UK4i3mas67nTsku/KVZ8PPtRd/NQ=)
                          4: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: PqwPHzYpVbC1iPdwC+7M/LSG1XcHeMFqazfjn5Ni8oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:34:7d:8d:1a:27:3b:c8:1c:3d:87:14:bb:5c:77:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
        Validity
            Not Before: Jul 23 09:00:32 2026 GMT
            Not After : Jul 24 09:00:32 2026 GMT
        Subject: CN=9d8d5760b3f4880e4b75d19272b5f3f585090781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:f4:57:11:d7:08:fc:8c:2b:8f:90:51:81:
                    a9:e3:5c:2f:af:c6:fc:4a:64:91:6f:5e:82:53:90:
                    35:cc:3f:8e:bb:c0:8e:76:a3:23:96:78:29:87:e6:
                    c1:dd:55:ed:e3:2b:4b:3e:86:ed:14:ac:b2:ef:ad:
                    18:1f:cd:e3:02:a3:c1:80:5b:28:2c:87:b9:78:31:
                    c3:8e:d1:24:83:62:a9:fc:89:d4:28:da:3a:12:0f:
                    8b:b0:8c:d6:15:a2:12:bc:ef:ba:3e:03:f3:8b:e2:
                    33:76:93:d4:84:a6:1e:3a:2a:82:c8:d7:5f:55:09:
                    fb:25:5c:41:87:a3:9a:f8:d0:b7:3f:8d:78:a1:37:
                    ef:22:2b:e8:57:0e:03:ca:8a:e9:7e:f4:d7:8d:08:
                    7b:af:e5:c3:1b:46:4b:31:b2:10:c3:1b:46:3c:70:
                    d8:8a:5a:91:5d:53:43:25:bb:90:d5:1a:b8:76:5d:
                    2d:f5:b4:a5:4d:c8:53:c4:16:90:b0:f2:a7:85:52:
                    4f:c9:68:35:e0:d7:e8:e5:ec:ef:57:08:26:3f:cf:
                    c0:14:d3:ce:e1:23:d0:dd:b1:19:51:4b:a2:ff:9b:
                    2f:1c:db:b4:41:14:4b:c0:88:9a:34:fa:26:20:20:
                    24:80:3f:95:5e:5e:d6:69:ff:b1:fd:7b:35:0c:5f:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8D:57:60:B3:F4:88:0E:4B:75:D1:92:72:B5:F3:F5:85:09:07:81
            X509v3 Authority Key Identifier:
                keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:64:4f:37:f5:d5:63:b0:b1:74:d5:eb:0b:94:4c:af:96:0f:
         20:7d:6b:f0:7b:cb:ee:68:c0:94:c7:fb:72:a6:65:a3:c4:f9:
         85:b0:af:89:2e:47:1d:7d:8d:9d:f4:f2:1b:31:26:22:52:1b:
         9e:50:92:60:36:5d:36:9b:0b:d7:71:50:7f:69:e8:a3:19:d2:
         97:17:91:15:bb:ed:54:0e:e6:1f:87:f5:2b:0f:ff:38:1d:59:
         9e:15:fd:a7:da:19:4e:33:20:17:54:eb:a0:25:18:b2:e8:06:
         4f:2f:29:d7:60:ab:8c:ec:c9:09:19:6f:78:fc:c1:18:a0:91:
         bb:7e:3e:2e:c9:51:fe:e2:f2:2b:c9:4c:de:12:b8:e9:08:9f:
         34:c7:76:67:58:d4:03:f9:27:6a:fe:da:09:3e:85:07:16:b8:
         a1:7e:45:34:fb:34:29:d4:68:61:cb:df:b6:b7:f8:04:c8:fb:
         17:ec:2a:c9:bc:a7:56:2c:af:7b:99:e2:99:1c:a2:8d:c7:b7:
         33:56:cd:30:2f:25:a9:38:1b:4c:40:c4:c0:a8:24:9f:7d:82:
         e1:88:a6:31:4f:82:aa:f4:50:e1:11:fa:27:41:be:19:a6:95:
         8e:27:5c:16:27:b2:83:60:8c:2a:12:97:32:4a:c0:55:ca:b2:
         b4:ea:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:20 2026 by rpki-client