Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          IB3X27Ciw8nL2vlRKbOwpw8oFBEaYgkCVzaqjX0ff70=
Subject key identifier:   8A:C6:5A:ED:C4:F1:70:EE:72:12:4A:A4:9B:AA:E0:2B:D2:7B:0B:FE
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       019E1E6C864C806009B0EBA6A36B42031267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1C80
Signing time:             Tue 12 May 2026 23:01:28 +0000
Manifest this update:     Tue 12 May 2026 23:01:28 +0000
Manifest next update:     Wed 13 May 2026 23:01:28 +0000
Files and hashes:         1: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (hash: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY=)
                          2: XdXnJJNQx1Gro3ybU88xw6xDkfQ.roa (hash: U5O5AQ6RdjLYU1eTeY7hgeyHXCcFQr0H848uMOVY6NI=)
                          3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: IUD5EcXORhyXnMbuIUCZi8WUJN8NEBrsZ4V5AWtY4xo=)
                          4: XlsLvbVU193m2Z6UVxU87ZTboqY.roa (hash: UZGfcrrCQJHsGlbF2mwHoSkh+ONgNYGr3BnRwDE44rU=)
                          5: lc3PJAgvxFYiCPuFizSb6p2_rb0.roa (hash: 8n7ows7LhYLCYlNHtSZDiWLFK5qYarcEitxWeuEGLtI=)
                          6: onUcHcMkvFv3eRd2HH3aPRf6vhg.roa (hash: FMvdGW8G/i8Ujn/8ecIl88xpPzK27z5df59EqMBKxi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:86:4c:80:60:09:b0:eb:a6:a3:6b:42:03:12:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: May 12 23:01:28 2026 GMT
            Not After : May 13 23:01:28 2026 GMT
        Subject: CN=8ac65aedc4f170ee72124aa49baae02bd27b0bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:cf:4b:65:b2:91:71:81:f4:dd:fd:d7:33:
                    0f:ed:fc:7d:48:a2:e0:54:ca:68:85:c2:19:bd:d4:
                    d1:13:60:34:1f:1e:ef:ec:b2:b6:36:e5:13:c2:ea:
                    0f:67:4d:e1:fb:41:09:4f:b2:b1:20:73:43:38:c7:
                    cf:a4:7f:35:35:7f:e5:cb:d5:7d:fb:7a:c5:9c:00:
                    80:85:23:2f:88:e9:8c:3f:40:35:82:bb:48:76:5a:
                    d2:c4:71:e8:03:f0:30:d2:c0:8b:31:bf:a5:7a:21:
                    7b:2d:ba:8e:af:fe:51:26:33:a2:d1:0d:6e:3e:e8:
                    b7:96:d8:f1:4f:94:98:71:ec:99:df:99:af:4c:4b:
                    a2:92:11:f7:66:f1:98:89:28:b3:6b:19:8d:de:32:
                    bd:9d:63:06:05:14:3c:32:b4:fb:33:37:fe:e8:22:
                    71:2d:a8:de:b1:aa:37:a0:8a:01:56:21:c4:b1:93:
                    ab:7a:05:c6:38:2e:5a:fe:05:c7:81:aa:c0:02:bd:
                    fc:44:ca:fc:36:39:be:62:75:5e:b9:91:ce:f0:51:
                    fa:18:12:fc:76:97:a5:c0:b6:f2:f5:5b:ef:0a:42:
                    32:6d:01:13:5b:9c:3e:d0:3d:da:b9:c0:26:98:7f:
                    02:91:d5:43:35:4b:41:bb:ae:a2:b0:c6:64:54:06:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C6:5A:ED:C4:F1:70:EE:72:12:4A:A4:9B:AA:E0:2B:D2:7B:0B:FE
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:39:87:2e:45:f0:94:e3:89:45:eb:b0:fe:51:3c:4a:10:ee:
         8d:45:65:dc:c4:8c:88:f5:36:ae:3c:0b:e5:0a:c2:97:d1:aa:
         a2:5a:f2:9b:03:9f:24:d2:b7:30:dc:7e:a6:db:eb:d3:04:51:
         19:96:fa:14:36:02:68:c0:61:8b:5f:c1:d8:76:00:ae:30:f0:
         fe:a4:f2:7c:28:03:ae:5b:d9:32:16:6c:84:c3:c3:28:89:cd:
         a0:cd:1d:b6:f5:71:f7:62:19:35:08:f0:28:97:87:55:47:4f:
         82:33:ef:d6:b3:fe:2f:39:98:95:86:58:0c:15:a3:2a:d8:94:
         0a:bd:d4:8b:06:23:15:88:8f:7b:00:60:60:62:77:12:d1:a0:
         cc:6f:8a:47:72:81:6d:c8:7d:ca:47:00:fc:68:b3:04:99:88:
         93:12:91:05:79:4a:d7:25:98:d3:a5:1a:1d:d8:23:80:f7:95:
         e0:70:15:79:74:28:c0:cd:b2:a8:64:94:83:3b:c1:6a:6a:00:
         e9:24:80:d9:40:5e:97:10:16:92:59:68:e7:96:04:e1:47:1d:
         4b:7f:b6:dc:24:2c:e2:b3:c7:71:d1:88:91:5f:b5:50:83:7e:
         87:a3:84:fb:8d:ba:df:f0:e7:fa:14:50:88:e7:4f:76:0d:1e:
         36:82:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:01 2026 by rpki-client