Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File:                     xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier:          Ix0grbSzqXKskoBD2ZTjYWZ4jDrvqUyLWiXbooHpjgI=
Subject key identifier:   7D:80:16:66:F1:5A:B2:EA:58:28:34:0E:6A:4E:A2:8C:3D:CB:3D:35
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer:       /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial:       019E1D900157F0F772C0AF7121375428FF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number:          1899
Signing time:             Tue 12 May 2026 19:00:37 +0000
Manifest this update:     Tue 12 May 2026 19:00:37 +0000
Manifest next update:     Wed 13 May 2026 19:00:37 +0000
Files and hashes:         1: 8cS6Qj5MYE4B8boPnbZ2kcXbU-k.roa (hash: AKR29eJxFVsOMPaiI3uGdOD049mIqIl+nuPgud2mgtc=)
                          2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: RBcxJeqwfaab0qMf5KrzmFyQzvrtslqvlgQtHs2Ibrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:01:57:f0:f7:72:c0:af:71:21:37:54:28:ff:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
        Validity
            Not Before: May 12 19:00:37 2026 GMT
            Not After : May 13 19:00:37 2026 GMT
        Subject: CN=7d801666f15ab2ea5828340e6a4ea28c3dcb3d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:a3:9a:e9:92:f4:96:08:c1:62:b2:d6:23:
                    09:55:49:e7:9a:83:7f:18:9b:d1:2c:50:e3:dc:95:
                    84:22:d9:da:ba:fc:ed:87:95:b4:fb:3f:1e:e5:78:
                    15:a2:e3:cd:b0:7c:14:77:f4:e0:85:ed:b0:2c:8f:
                    94:e7:02:05:b2:aa:67:93:f8:15:c3:64:e3:35:e4:
                    1b:ed:b8:14:00:45:1b:38:4f:a8:63:a8:07:a3:98:
                    3b:6b:a1:24:a0:db:0f:55:26:15:f2:70:af:f8:7e:
                    8a:ab:68:e6:ee:ee:64:49:41:f9:17:5d:0c:4f:8c:
                    27:92:10:f4:3e:1f:39:c7:24:55:aa:e0:81:83:77:
                    27:f3:77:d0:a9:cf:40:10:b1:1a:e8:21:34:f9:4d:
                    fb:0e:df:39:73:b0:b4:33:50:a1:ce:73:94:79:a6:
                    ae:9c:bc:02:cd:6d:e5:69:89:13:ff:30:34:c9:e1:
                    d4:4d:02:e2:4e:d5:50:cf:21:ec:a4:86:2d:f7:8a:
                    45:1c:94:13:44:63:2b:f5:ab:fe:9d:28:1f:25:51:
                    3d:40:1b:2f:8e:3e:0a:52:48:53:86:70:e8:34:d2:
                    ff:35:ef:1b:3f:51:26:4d:8b:26:94:06:f9:00:b8:
                    e9:c3:58:b1:41:94:97:90:3c:d8:01:cb:c2:30:6f:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:16:66:F1:5A:B2:EA:58:28:34:0E:6A:4E:A2:8C:3D:CB:3D:35
            X509v3 Authority Key Identifier:
                keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:eb:88:d8:99:87:1e:6d:71:48:86:47:8c:21:65:cc:55:ce:
         92:6d:8d:4a:fc:b9:04:d6:ed:8c:e5:b0:93:f5:5b:c3:d0:7d:
         1d:14:d9:9b:1c:ef:e3:b5:d2:3b:5d:3d:18:60:92:bf:bc:2a:
         37:ee:de:b4:63:63:88:7a:0d:b4:d0:c7:bc:bf:33:0c:1e:ca:
         37:c3:22:cb:c4:9e:f4:3f:b5:7a:05:9b:a8:44:22:10:41:60:
         3a:3d:cc:f2:2a:70:d5:9c:66:88:45:b2:cb:29:ca:f7:d2:33:
         9a:bf:a8:8b:72:ff:30:05:00:39:2f:4a:be:9b:02:18:ac:3d:
         4e:12:49:6a:e7:3d:94:e3:a2:5f:51:01:60:2e:ba:74:6a:2c:
         74:9d:c8:a1:80:b3:da:de:e6:8b:c0:c3:c6:e3:eb:72:63:09:
         ae:37:9e:94:9a:05:dd:75:13:e1:0d:cb:ce:a0:68:d3:43:80:
         aa:b9:af:66:63:f5:c8:81:d2:c1:fe:3a:e6:bf:73:8b:11:7b:
         43:28:80:04:fe:e2:70:18:01:52:56:ce:02:dd:50:b2:bf:0a:
         5c:11:e2:57:40:cb:68:6f:de:04:42:ea:47:c5:ec:34:62:04:
         b6:0e:f7:17:99:0c:db:50:0a:28:27:6f:4f:b1:b5:94:8a:39:
         b6:a5:67:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkAFX8PdywK9xITdUKP+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWM0MWRhZjAwOTJiNzAzYmMwNTliYTEzNTNmMDcxZWQx
MjE5OWIwHhcNMjYwNTEyMTkwMDM3WhcNMjYwNTEzMTkwMDM3WjAzMTEwLwYDVQQD
Eyg3ZDgwMTY2NmYxNWFiMmVhNTgyODM0MGU2YTRlYTI4YzNkY2IzZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq06jmumS9JYIwWKy1iMJVUnnmoN/
GJvRLFDj3JWEItnauvzth5W0+z8e5XgVouPNsHwUd/Tghe2wLI+U5wIFsqpnk/gV
w2TjNeQb7bgUAEUbOE+oY6gHo5g7a6EkoNsPVSYV8nCv+H6Kq2jm7u5kSUH5F10M
T4wnkhD0Ph85xyRVquCBg3cn83fQqc9AELEa6CE0+U37Dt85c7C0M1ChznOUeaau
nLwCzW3laYkT/zA0yeHUTQLiTtVQzyHspIYt94pFHJQTRGMr9av+nSgfJVE9QBsv
jj4KUkhThnDoNNL/Ne8bP1EmTYsmlAb5ALjpw1ixQZSXkDzYAcvCMG8aCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2AFmbxWrLqWCg0DmpOoow9yz01MB8GA1UdIwQY
MBaAFMWcQdrwCStwO8BZuhNT8HHtEhmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQt
YzU0OTNmZTgyZTI2LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQtYzU0OTNmZTgyZTI2
LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeuI2JmH
Hm1xSIZHjCFlzFXOkm2NSvy5BNbtjOWwk/Vbw9B9HRTZmxzv47XSO109GGCSv7wq
N+7etGNjiHoNtNDHvL8zDB7KN8Miy8Se9D+1egWbqEQiEEFgOj3M8ipw1ZxmiEWy
yynK99Izmr+oi3L/MAUAOS9KvpsCGKw9ThJJauc9lOOiX1EBYC66dGosdJ3IoYCz
2t7mi8DDxuPrcmMJrjeelJoF3XUT4Q3LzqBo00OAqrmvZmP1yIHSwf465r9zixF7
QyiABP7icBgBUlbOAt1Qsr8KXBHiV0DLaG/eBELqR8XsNGIEtg73F5kM21AKKCdv
T7G1lIo5tqVnEg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:52:37 2026 by rpki-client