Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File:                     xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier:          ifcAREukqSyWFAIc6D48b+/4MkAIDoO+49/qHTdFumw=
Subject key identifier:   6A:90:AA:65:91:8A:30:98:A1:56:51:08:6E:27:E3:88:D4:0C:FD:AF
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer:       /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial:       019E1F11A193AFB1D7D01AAAC601B0DD8100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number:          175C
Signing time:             Wed 13 May 2026 02:01:49 +0000
Manifest this update:     Wed 13 May 2026 02:01:49 +0000
Manifest next update:     Thu 14 May 2026 02:01:49 +0000
Files and hashes:         1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
                          2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: u5Fz7y1dYEBe5lb+WZo88zL1BjPDT2M0Gk6cN41/TXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:a1:93:af:b1:d7:d0:1a:aa:c6:01:b0:dd:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
        Validity
            Not Before: May 13 02:01:49 2026 GMT
            Not After : May 14 02:01:49 2026 GMT
        Subject: CN=6a90aa65918a3098a15651086e27e388d40cfdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:d0:ee:57:95:fb:55:e4:b2:a2:cc:3f:fa:
                    14:d7:63:d5:db:92:1b:c0:f9:2e:72:30:e7:ce:4b:
                    ba:fd:26:f2:9f:00:34:d5:2f:04:95:0e:1c:68:52:
                    5c:f7:7b:21:67:2f:0a:30:9f:53:b9:e3:ff:2e:66:
                    33:28:ca:00:95:1e:c2:3a:db:c4:07:3e:4f:99:7c:
                    40:85:d9:40:2c:10:01:d4:7c:23:f4:7e:a1:08:02:
                    56:89:50:33:c1:88:00:11:ea:a9:d1:1e:77:dd:58:
                    01:bd:70:49:69:3d:0e:3c:10:5e:5a:1d:a6:39:58:
                    11:be:27:68:62:ed:c0:e0:60:dc:f0:4e:e7:b0:e2:
                    f3:05:6b:fe:29:cb:4c:fc:b5:28:d2:c0:69:c7:ea:
                    81:30:e7:6f:be:be:b6:e9:14:e0:98:9c:a2:9d:ea:
                    70:c8:d3:77:78:76:c0:f2:65:ef:26:53:6d:ca:14:
                    23:b4:bf:73:c6:2e:58:f3:19:48:47:dd:14:91:13:
                    77:45:cc:bf:2d:e7:01:41:23:ed:dc:a3:e4:88:34:
                    78:81:27:cf:a4:c0:58:f7:85:3f:19:2b:bf:58:88:
                    fa:19:53:85:5a:ca:db:1d:c6:1c:cb:ff:db:cf:9f:
                    54:85:ff:ed:8c:ee:31:f5:93:9b:e0:48:30:99:d1:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:90:AA:65:91:8A:30:98:A1:56:51:08:6E:27:E3:88:D4:0C:FD:AF
            X509v3 Authority Key Identifier:
                keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:67:5f:d4:25:e2:5a:e3:7c:2f:f4:88:42:0b:ce:72:67:
         7c:42:2c:22:f6:65:cb:88:a3:5f:7e:16:9a:f5:1a:16:21:ad:
         c4:01:ba:9e:86:c3:c7:6d:ad:e0:29:35:2b:a8:09:48:13:81:
         5c:99:24:58:81:0e:71:33:f7:d7:be:ae:e4:a1:c8:30:7d:8b:
         95:de:15:5b:dc:0f:3b:cb:7c:b3:10:f6:9d:5c:bd:cf:a0:6b:
         af:1e:d7:4d:a9:2b:76:66:64:ef:2c:14:54:01:f2:66:3d:b5:
         79:11:9d:93:8b:b1:71:43:c8:38:f0:7c:11:12:4b:8b:23:78:
         91:9c:7c:0c:04:a6:a2:82:98:91:f3:cc:3c:3e:9f:54:5f:ea:
         a0:5f:b9:62:13:de:28:e4:5a:63:d9:c1:e7:f1:b4:d8:07:c7:
         6a:fa:f5:fa:f2:20:90:4e:90:7d:05:65:c2:ae:c8:7f:02:82:
         0b:30:aa:58:fd:c9:83:b2:47:b2:04:97:df:d5:ac:10:59:a4:
         a2:f8:fe:0f:9a:24:cf:2f:26:bd:ee:ef:7f:59:4c:ed:44:b7:
         2a:14:13:3a:5b:84:d2:51:4e:68:98:e3:8f:c3:79:0d:c0:11:
         6c:44:3e:7d:04:47:24:3e:35:54:bb:36:5c:15:d3:c8:8c:d6:
         35:d6:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:02 2026 by rpki-client