Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          hAmVZlWaTfabOAX0GCZXuAg6RuFiCnbOOCnpyC/+dkU=
Subject key identifier:   63:C3:15:D5:1E:F2:8F:C2:80:E7:17:20:E2:7A:EC:7F:B6:E2:3B:4A
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       019E1F110CC835A6916E69A1F85770BCEC13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0A3D
Signing time:             Wed 13 May 2026 02:01:11 +0000
Manifest this update:     Wed 13 May 2026 02:01:11 +0000
Manifest next update:     Thu 14 May 2026 02:01:11 +0000
Files and hashes:         1: BgM7Z-hf4ZmFOJu6X5CdP5efJ28.roa (hash: 0PK12/6KwOapd3jaEkPiUknqIb57oljJN1nirZLOhCY=)
                          2: kYRR38ICq9ItDhQJiQSFEmuaZCk.roa (hash: 2GZZrZK8I9JcWijw4HIji3r5v/uDz5lVmOVbPE0wJAU=)
                          3: ospxyuscZUt12OJ3jV2ziDWVxr4.roa (hash: HK4EzYmG6c9gmfKK671rBfu/m90Pfh30a4zU8YJa+So=)
                          4: sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa (hash: ZVA4MvGdgvPLSJ8Vi9YqZCQSkNRcAKBUxh0NO1bCuj0=)
                          5: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: cc5LNNB3Wv7cNGZsy8fq8wpesXZC9RFntNhdptXCN3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:0c:c8:35:a6:91:6e:69:a1:f8:57:70:bc:ec:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: May 13 02:01:11 2026 GMT
            Not After : May 14 02:01:11 2026 GMT
        Subject: CN=63c315d51ef28fc280e71720e27aec7fb6e23b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:51:23:e6:e8:c4:f4:13:5e:19:f8:15:29:
                    f8:4c:cf:5e:42:a2:07:95:50:fa:41:e8:91:ed:9f:
                    41:59:74:46:d2:99:c2:e9:7c:b8:29:0d:01:50:9b:
                    22:d7:1c:35:c5:ea:07:2c:2c:7a:04:40:6b:ec:29:
                    82:19:aa:c2:7e:59:0b:d7:c1:14:c5:4a:ea:b0:4b:
                    36:a5:91:94:e0:0e:b6:3c:8f:08:42:e8:55:f2:ab:
                    bf:05:99:09:87:44:ce:35:35:36:44:7f:07:a4:51:
                    7b:8e:08:50:2f:8e:75:ac:b6:d7:52:c4:75:30:e1:
                    a1:1d:8e:9f:f7:a6:2c:f6:c4:9e:b5:39:2a:91:77:
                    5a:ef:5b:00:71:44:a0:ad:02:3c:e9:e7:b6:c6:65:
                    6b:ed:9e:15:6b:6d:68:3a:76:30:57:3b:05:12:1d:
                    e6:c4:6a:33:0b:a7:c1:7e:8b:5c:ae:21:62:fa:bb:
                    c3:45:f2:4b:e3:8d:37:da:24:b7:44:24:01:5e:50:
                    d3:35:4c:b6:e7:3a:30:98:51:bc:28:c8:0a:62:00:
                    82:64:fd:09:91:00:57:06:18:85:52:62:7b:c8:0f:
                    44:c5:88:99:42:18:4e:c1:7a:e9:a4:15:e2:83:5d:
                    91:0a:d9:48:75:e1:3c:05:69:7c:8e:03:78:57:12:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C3:15:D5:1E:F2:8F:C2:80:E7:17:20:E2:7A:EC:7F:B6:E2:3B:4A
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ec:0f:3a:b0:0c:f7:9d:85:e5:0f:d0:06:a7:1b:ff:5b:7b:
         44:68:71:b6:6f:c4:ab:a4:16:fd:2e:b4:9c:3c:b8:05:29:7a:
         44:4b:e2:65:94:15:71:08:30:a9:d8:e5:ce:97:87:5c:50:66:
         71:e3:60:93:15:23:30:ae:37:e7:68:de:20:04:cf:e7:e0:04:
         12:8e:41:2b:dc:06:49:b9:67:ac:7f:d8:81:e6:64:e1:af:c0:
         d8:bb:c2:7e:ed:09:7f:e5:13:d4:80:51:37:e0:b2:64:96:6f:
         70:94:65:d7:5a:d9:19:64:88:e4:34:fd:55:59:75:1d:7b:1c:
         68:42:22:d4:f8:8b:52:e7:3c:a3:48:13:99:22:58:84:44:c9:
         57:1e:c0:5b:d8:5a:cd:7a:d8:ab:32:eb:9c:dc:2d:3f:49:2c:
         79:ac:95:c8:d5:95:79:c0:8d:bd:74:68:65:6e:8d:20:9b:7d:
         8a:ab:a7:c5:f9:03:1e:d8:5c:ef:4d:88:e4:21:5b:82:2c:05:
         16:1d:fd:ff:8b:3f:c9:ad:da:55:c0:08:3c:36:38:c0:99:78:
         1b:33:ab:a4:b8:40:b9:e1:2e:0b:54:35:c9:7c:b6:3b:7b:ec:
         c7:0a:c5:be:ad:2d:7c:9f:4f:46:e1:0d:cd:6d:e4:9a:01:39:
         c1:8c:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:06 2026 by rpki-client