Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File:                     XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier:          IfPf7fUs1iLuCvzzfml/XNrKTbqwFqaRrJHQusa/hKE=
Subject key identifier:   CF:B1:69:89:07:A5:6E:3A:A5:C3:34:51:06:70:3F:0B:59:70:18:CD
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer:       /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial:       019E20FF2A2CC7F3BB652152EF12F0AEF0D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number:          03C8
Signing time:             Wed 13 May 2026 11:00:53 +0000
Manifest this update:     Wed 13 May 2026 11:00:53 +0000
Manifest next update:     Thu 14 May 2026 11:00:53 +0000
Files and hashes:         1: GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa (hash: afD0B4wX8ENk5NOyojNKqywcV5cJB2IJVzbUoTBJNnw=)
                          2: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: /neO6dIWGQ4yYBFN3bhep0Viy6br2LfbNK8hpymGldA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:2a:2c:c7:f3:bb:65:21:52:ef:12:f0:ae:f0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
        Validity
            Not Before: May 13 11:00:53 2026 GMT
            Not After : May 14 11:00:53 2026 GMT
        Subject: CN=cfb1698907a56e3aa5c3345106703f0b597018cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:73:d0:31:33:87:c0:75:a9:f5:8f:9d:1a:da:
                    73:e4:33:4b:50:ce:05:2c:0d:2d:c0:0e:98:97:52:
                    3f:cf:b7:d2:6a:12:42:d2:56:95:7d:dc:da:7a:6a:
                    82:72:30:8a:89:4d:af:1e:99:f0:46:15:1f:3a:c2:
                    3c:6e:66:f6:4a:98:ac:4e:9f:fd:c0:bd:56:93:06:
                    d7:67:77:37:82:c7:1f:f1:b3:f6:65:db:7b:f6:80:
                    e9:fc:62:4f:4a:01:1f:1c:e4:52:62:89:ee:db:b1:
                    88:5d:1f:20:e8:45:95:30:59:2d:b1:ea:7c:bc:4a:
                    55:b6:b9:1d:60:ad:d3:a7:00:c5:2d:f5:28:66:a4:
                    8d:c6:ed:69:1f:e9:e6:5e:3d:ef:87:89:86:f0:b7:
                    f6:51:4e:b4:e7:ea:d8:f5:3b:5c:0b:50:8b:00:84:
                    d3:a2:c5:23:2e:99:c4:1f:f2:ab:21:4f:e1:52:b5:
                    0e:f6:ee:df:bb:4f:5b:05:28:4e:55:d3:62:f1:0a:
                    ba:dd:c0:42:0e:6e:a5:e3:b7:ab:ce:5b:e3:1c:ea:
                    81:cd:f9:c2:3f:19:8d:7d:30:7d:de:81:7c:55:80:
                    f9:96:a9:e1:4e:cc:f9:e0:2d:a0:52:da:4f:16:6e:
                    81:c1:3d:ed:00:f5:11:26:69:7d:c4:e7:f4:86:d2:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B1:69:89:07:A5:6E:3A:A5:C3:34:51:06:70:3F:0B:59:70:18:CD
            X509v3 Authority Key Identifier:
                keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:89:80:b4:c1:92:cd:d6:7a:79:e1:61:74:fa:b2:39:bf:c3:
         f6:f9:9d:bd:1e:a8:04:10:b2:55:d1:55:54:40:7a:10:2e:6d:
         17:39:c3:c7:fc:a6:64:d3:5d:f1:d0:3d:75:9b:ad:2c:b2:07:
         84:63:dd:a7:c7:6e:dd:9b:35:5d:64:5c:ef:00:6e:17:83:a7:
         cc:a7:fa:14:0a:92:9c:ea:f4:b6:58:80:6a:08:e2:48:dc:c9:
         68:da:61:ef:b0:df:3e:1f:83:03:f0:79:05:c7:4d:83:58:1d:
         a2:07:d1:33:5d:38:79:8a:4e:0d:b5:db:b7:d6:ac:3a:48:a4:
         d4:0b:23:c6:f8:ad:83:e8:35:5a:2f:90:fc:bc:b0:10:af:9a:
         39:3f:f8:88:5b:1e:20:66:ef:d1:7e:28:05:81:ad:63:0e:47:
         6b:66:7e:89:b4:22:52:d4:75:47:f7:03:0b:63:0c:80:37:35:
         47:03:73:2b:69:0a:ce:b1:b4:9b:25:a2:6d:6b:cf:c5:4b:8d:
         2a:e2:75:15:b8:f3:35:26:45:4c:e1:f0:12:2a:10:45:44:92:
         f2:73:c7:6b:c4:de:5d:4b:22:eb:c6:a2:cf:3e:7f:35:49:80:
         aa:d1:2c:f3:b9:39:3e:da:75:11:a6:52:87:75:05:bc:f6:e9:
         f9:16:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:38:17 2026 by rpki-client