Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          /UNZ9LZmIwLiOLnhkEOvE2MYrufz119WnPcO8l7WoLM=
Subject key identifier:   48:D4:88:57:57:6F:5C:A7:14:1C:8F:98:83:97:49:E7:D9:65:AF:28
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       019E1DFE3501DBC7C2DB48D3974C41CE55EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          10CF
Signing time:             Tue 12 May 2026 21:00:59 +0000
Manifest this update:     Tue 12 May 2026 21:00:59 +0000
Manifest next update:     Wed 13 May 2026 21:00:59 +0000
Files and hashes:         1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
                          2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: q2M4JLKChL7CsO6yYVipq+WFR3EGiO7MOSn0VjQJoFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:35:01:db:c7:c2:db:48:d3:97:4c:41:ce:55:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: May 12 21:00:59 2026 GMT
            Not After : May 13 21:00:59 2026 GMT
        Subject: CN=48d48857576f5ca7141c8f98839749e7d965af28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:c9:55:96:c8:c8:4e:45:ac:5f:47:25:17:
                    95:e6:86:fe:b1:43:f3:44:7a:66:d6:3a:ff:5e:5a:
                    d6:7a:7e:6d:2f:88:0b:b9:d9:fe:2a:35:a0:bf:c2:
                    7a:c8:80:eb:b8:63:ef:b6:6b:53:d9:13:5b:8a:05:
                    77:c8:97:de:86:3a:e4:db:f0:2d:06:c3:cb:7b:44:
                    cf:e6:8a:9d:88:7f:b3:45:df:f7:fc:8c:74:90:b5:
                    b7:53:c9:bb:88:4a:b0:3a:20:19:8a:7a:51:d3:c2:
                    c3:fe:26:b7:72:36:a0:c0:75:dd:ef:28:6e:83:aa:
                    d0:29:4e:c9:8f:ef:f0:95:bf:ab:7c:a0:07:70:c8:
                    9a:29:46:54:05:c7:11:dc:8a:ab:38:18:34:ae:bf:
                    cb:14:a8:34:63:5a:df:d4:6a:7a:18:ee:bd:58:a3:
                    ab:d9:31:32:f0:df:71:58:75:be:11:69:06:e8:db:
                    59:7e:ec:7b:5e:b8:37:03:e6:8e:b9:60:68:cb:c4:
                    9b:1a:07:28:a0:21:e8:9b:ce:8a:5c:9f:e6:ae:25:
                    0e:62:46:81:42:ea:d5:7a:3b:08:5c:7c:9f:ce:ce:
                    15:f7:68:15:8b:5d:5b:28:e7:00:e6:7b:69:dd:c1:
                    15:8f:88:9f:2e:0c:21:00:c6:50:5a:a3:ba:ad:92:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D4:88:57:57:6F:5C:A7:14:1C:8F:98:83:97:49:E7:D9:65:AF:28
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d4:9b:9b:93:c4:35:2b:aa:d9:6a:d7:e5:94:87:ca:4b:99:
         f7:3a:f4:ba:6c:e9:03:32:e1:50:ed:bd:18:f6:78:e9:bf:47:
         64:e4:d4:5a:7b:2b:d3:27:30:c3:e7:0d:6b:a5:64:b2:07:21:
         db:0e:50:f4:65:5d:4a:23:2a:b6:41:d2:4b:d7:cb:3d:9f:c5:
         15:3f:fb:f5:7d:80:21:c2:c9:e2:7f:e8:19:eb:0b:f7:96:de:
         9c:e8:5a:ed:d4:5f:75:a3:86:bf:6d:b4:18:23:18:7c:37:91:
         00:a6:b2:9e:6f:e2:6a:e6:ef:5f:ee:3d:98:78:c1:e4:65:a3:
         6b:db:c8:8d:fb:2b:13:f1:d5:06:38:cc:0f:fb:14:b3:7e:5f:
         77:c5:e2:8f:d8:de:6a:1f:5e:17:58:8b:43:ef:49:65:d6:68:
         be:d4:96:1b:b5:23:b6:63:e9:5b:32:58:57:c9:99:a0:a3:d5:
         1c:00:89:c8:c6:a4:1e:fc:07:e6:82:39:13:88:79:ff:24:54:
         50:39:28:24:91:01:53:95:f5:7f:2d:f7:75:6b:ae:75:f1:2b:
         c9:c9:94:d7:b8:75:85:49:53:7c:34:6b:40:5a:ed:3e:fe:90:
         5f:c8:2e:2d:d9:be:54:d5:97:f1:bd:0a:d4:dd:6f:36:1b:1b:
         43:41:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:03 2026 by rpki-client