Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          pd0d+uqZY44lMrqgfrrNQR2ERfmQiwx1Taqaoj6JJ6Q=
Subject key identifier:   75:82:15:65:4A:92:29:2B:39:2C:CE:C1:CD:B4:65:EE:A5:19:2F:56
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       019D29CDF50FFCD1C5CA767E4DFB3AED00F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          0768
Signing time:             Thu 26 Mar 2026 11:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:56 +0000
Files and hashes:         1: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: waIo/6grMOyWS3vZWGojrMc5z2FB4MGKhlhuylU8AQ0=)
                          2: ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa (hash: 3TzGgdPPeRvq5m4XrgUnNCdTHF2ADSRfiiLFr+IcrFs=)
                          3: e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (hash: hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=)
                          4: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (hash: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:f5:0f:fc:d1:c5:ca:76:7e:4d:fb:3a:ed:00:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Mar 26 11:00:56 2026 GMT
            Not After : Mar 27 11:00:56 2026 GMT
        Subject: CN=758215654a92292b392ccec1cdb465eea5192f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:97:30:69:c2:74:c8:6c:77:99:e0:8d:60:22:
                    be:05:c1:7b:d9:b2:e7:24:e5:7e:e1:43:fb:a8:d8:
                    59:bd:6d:00:2e:e3:b6:dd:40:23:6a:bd:93:70:d7:
                    2d:6d:07:9b:d6:bd:22:7f:2a:3b:f1:7e:c8:c5:fc:
                    8e:ad:8d:23:81:c1:6c:52:0d:7d:fd:9e:82:37:71:
                    90:37:a0:a0:4c:ee:3c:98:80:9f:3b:04:a9:3a:de:
                    b8:dd:f1:66:bf:c7:ae:bd:7d:80:52:7a:55:7b:b8:
                    5f:f0:bc:68:dc:4d:f7:3a:dc:26:d7:68:a8:ea:eb:
                    15:fc:51:92:c4:e9:a2:63:c3:03:51:86:59:e4:43:
                    26:50:4f:71:02:10:cf:3c:37:c6:5f:61:44:68:b2:
                    55:37:0b:1a:59:e2:e9:fc:9a:dd:91:e9:1f:11:8d:
                    ee:07:61:6f:95:e0:38:69:08:f6:f0:07:b5:96:cd:
                    b0:c6:8f:22:ae:7a:af:dd:86:79:89:5a:34:68:0b:
                    67:fe:93:b2:f2:af:2a:15:bb:ee:d2:05:4b:e0:4d:
                    b3:43:5c:ae:c4:8d:45:cb:bf:10:26:37:88:66:cf:
                    25:83:19:3b:84:e6:74:95:49:64:2e:67:c3:95:59:
                    8e:fe:bf:4f:d5:fd:18:61:9c:e6:66:07:36:60:67:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:82:15:65:4A:92:29:2B:39:2C:CE:C1:CD:B4:65:EE:A5:19:2F:56
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:85:08:c3:85:cb:ad:a4:60:c7:e0:b3:bb:60:94:94:88:11:
         a9:3d:71:ca:eb:85:d2:72:d2:e7:59:f0:5d:0e:a2:60:6f:f8:
         28:92:87:a1:dc:08:70:8f:00:c7:7b:e5:e5:3f:e0:aa:76:5a:
         09:b3:73:8e:07:ce:0c:d4:be:d4:19:c2:c1:2f:7d:78:b0:ff:
         e9:63:7b:60:22:46:bc:35:b2:36:1e:03:6d:33:22:c6:e2:d5:
         f2:ca:3d:17:39:6f:8d:00:16:8b:45:05:63:93:d6:9c:06:8e:
         f7:85:e7:6b:b6:26:0b:70:86:23:e3:62:07:76:8a:9b:43:1f:
         44:5a:8a:21:e4:bb:87:61:55:ba:60:6f:f7:14:86:67:58:b5:
         82:11:bf:b8:3f:45:01:26:c4:33:ae:c4:1a:dc:9a:2e:1f:ab:
         56:79:49:f3:16:c3:d3:e9:59:a4:c1:7a:d9:02:12:95:3b:cd:
         9a:96:38:c4:dc:72:27:64:cd:bc:34:db:26:4a:35:a8:db:da:
         f6:16:d1:88:55:96:f4:b3:19:5b:4d:c2:7b:78:2c:2a:a0:05:
         ea:d2:46:ee:21:59:e9:88:58:d4:f6:07:15:f1:03:d6:d6:32:
         b9:5f:21:98:c1:fe:ff:68:57:fa:22:d8:32:4a:58:15:eb:99:
         aa:8f:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:32 2026 by rpki-client