Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File:                     XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier:          z6yJkcF66nNicKwVgwqpPs1V700iQVc65xGPyzkKLvY=
Subject key identifier:   4A:A9:FB:34:2E:AC:62:0D:90:37:1C:81:4E:69:02:33:92:0D:27:A9
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer:       /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial:       019D28F2FAD62E876CB0B1EFB410F6B83679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number:          11FF
Signing time:             Thu 26 Mar 2026 07:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:45 +0000
Files and hashes:         1: KceNOn_bCzlpYzkGAtSH71ZEniE.roa (hash: ghG8vlvVhPRN/q5ENiLGfWe2Rdz70LqNWlKQluJ96vs=)
                          2: TnLGleLWbF6Xbip1RIdiru4lzlk.roa (hash: TwgWk/EYTVXEiwe/Z9ywXVNMqxvlSEZDhUOiWjsfVSk=)
                          3: WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa (hash: wF/mTYNEBbK6LQa44t3Ab29Zi1DQ3lUoIwP6+TkkiBA=)
                          4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: KmGRFe9Licaeh9Bjp11OonnAr/N8MR0ltYFVSt4whxo=)
                          5: gXCR-cLYMaojwmIaH2ky7eyIf5g.roa (hash: I8h0Z2ywnH4bteSn3QmarASyoNf+QDRHyu/nb8W4GNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:fa:d6:2e:87:6c:b0:b1:ef:b4:10:f6:b8:36:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
        Validity
            Not Before: Mar 26 07:01:45 2026 GMT
            Not After : Mar 27 07:01:45 2026 GMT
        Subject: CN=4aa9fb342eac620d90371c814e690233920d27a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:52:9f:6d:e5:f6:72:ea:0a:07:53:3f:cc:
                    6e:68:74:94:d3:d2:7d:1a:ad:c4:97:5b:0f:01:c6:
                    ef:3e:1b:2e:d5:9b:26:2e:25:d2:68:0b:f5:68:05:
                    61:70:eb:d8:56:a4:51:73:ba:37:84:7f:82:14:80:
                    98:fe:51:f1:c3:ab:9e:17:92:49:8f:5e:c8:d4:c1:
                    08:d9:bb:b6:9b:16:0a:d1:5c:21:fa:a7:00:9d:ed:
                    84:95:6c:df:c9:f0:b9:22:c1:9c:dd:a2:5e:32:aa:
                    9a:89:48:03:e9:02:b2:93:22:8e:16:fc:3b:72:bf:
                    1c:31:81:93:d3:48:46:91:f0:46:3c:99:6a:f9:c3:
                    d0:eb:60:56:a5:53:18:ea:ab:ba:22:3a:3e:3c:a3:
                    47:e0:ee:81:7a:d3:f9:c7:ba:cd:23:ad:c3:31:f6:
                    33:bd:3f:c8:9e:43:30:78:66:95:63:3c:07:99:08:
                    da:98:1c:4a:15:9c:dc:d2:d0:fa:f1:cf:84:e5:d2:
                    9c:e5:9c:ae:66:5b:9f:12:52:31:50:b8:88:c1:05:
                    bb:a0:3d:63:5c:bd:9a:84:9d:1d:af:96:4d:01:47:
                    c9:34:d8:4b:09:3d:7f:83:49:98:a8:b9:8f:f5:5c:
                    2c:72:fe:d0:da:e2:4b:4c:d4:9c:86:29:55:9d:df:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:FB:34:2E:AC:62:0D:90:37:1C:81:4E:69:02:33:92:0D:27:A9
            X509v3 Authority Key Identifier:
                keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:d1:0b:8a:ec:58:95:a7:e1:10:05:ab:92:2d:67:8b:a8:ea:
         83:33:8a:da:8c:ca:68:25:1c:6b:6b:96:27:26:b5:f7:2e:73:
         cc:66:60:b1:4c:05:75:18:83:cd:d9:42:8a:e5:8e:d6:52:b2:
         1e:90:90:17:d2:dd:75:b0:c1:6e:e9:9f:35:78:01:02:ff:b5:
         94:69:c0:35:f6:10:a0:85:d7:1e:13:00:6b:1a:32:aa:cd:d0:
         37:c2:1b:24:74:1a:85:dc:47:ea:8e:9a:58:28:9a:c2:24:e1:
         c3:94:45:6d:d2:09:54:2c:e6:86:4e:72:26:83:61:2f:e1:d2:
         34:74:21:b9:a9:9b:11:0d:fa:11:9b:ee:8a:12:f5:c8:31:53:
         69:02:36:2e:43:90:15:46:e6:14:7e:ef:18:b5:af:21:1b:05:
         65:00:af:96:62:51:22:28:52:91:8f:48:0c:97:60:73:18:2a:
         a2:de:d5:3d:c2:23:3c:f8:3f:9b:9e:10:59:ed:34:b2:db:dc:
         1b:c2:50:6a:aa:be:69:4b:a6:b5:b0:d2:d0:15:bc:7c:89:88:
         e2:08:75:8a:e1:6a:51:4f:d5:b0:d2:e7:ad:e2:e8:9d:75:af:
         69:21:b4:31:91:e0:30:ab:c3:15:a3:4d:de:82:36:17:ff:e4:
         1d:3e:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:00 2026 by rpki-client