Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File:                     xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier:          jBAdEIcZZ9LqB2uMrBIBEsnYUqwcIEz9DD1OTzFt0gI=
Subject key identifier:   99:72:B9:0C:75:90:51:0D:DF:81:71:36:D4:1A:0B:91:13:DC:3F:E9
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer:       /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial:       019E1F117144B8E720924ED4CCD28DFD4B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number:          160E
Signing time:             Wed 13 May 2026 02:01:37 +0000
Manifest this update:     Wed 13 May 2026 02:01:37 +0000
Manifest next update:     Thu 14 May 2026 02:01:37 +0000
Files and hashes:         1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
                          2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
                          3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
                          4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
                          5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: MkLkSn4J7FuM+wlM6FFhCCohjSsHBxcvDBKO031yDxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:71:44:b8:e7:20:92:4e:d4:cc:d2:8d:fd:4b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
        Validity
            Not Before: May 13 02:01:37 2026 GMT
            Not After : May 14 02:01:37 2026 GMT
        Subject: CN=9972b90c7590510ddf817136d41a0b9113dc3fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:1e:d0:fb:03:ce:d0:4d:a3:98:07:03:31:
                    44:29:b6:73:ae:eb:57:f4:cd:0d:32:83:f1:97:50:
                    e7:1f:b8:ef:39:6e:0d:03:51:4a:60:08:a0:0d:bf:
                    02:07:ac:05:3b:44:68:d9:c0:f5:0e:82:d2:ed:5b:
                    3c:c0:c1:c2:b0:b2:54:5e:df:dd:43:66:cf:db:df:
                    f1:75:ea:13:5c:b9:5f:65:9c:12:a6:93:23:b0:8b:
                    38:97:c9:12:ad:65:b1:d9:fd:3d:d8:bb:3d:da:84:
                    cc:69:f3:f3:b8:e4:29:fe:cc:67:39:40:3f:77:97:
                    e7:4c:3b:57:8c:90:4c:f4:cb:26:1b:4b:03:52:db:
                    6d:f6:ef:7f:84:3d:f2:f4:61:30:8f:a6:fe:8d:a5:
                    1e:fd:8a:1e:8c:13:ab:88:52:ac:3a:c8:1d:8f:d3:
                    af:a4:9c:2b:40:22:db:07:75:bb:cf:40:5e:61:de:
                    e3:aa:5d:7a:ca:bf:72:86:58:3c:b3:fb:71:51:35:
                    97:4b:e3:64:0e:5c:46:0e:9e:b6:4f:e9:29:42:6c:
                    26:dd:d2:cf:e5:d2:b1:22:a9:1e:04:4f:60:ff:ea:
                    86:51:1c:d0:37:f0:df:81:f0:27:57:73:d8:64:a0:
                    de:61:f6:57:8e:52:78:e1:b0:8c:e5:09:eb:97:64:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:72:B9:0C:75:90:51:0D:DF:81:71:36:D4:1A:0B:91:13:DC:3F:E9
            X509v3 Authority Key Identifier:
                keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:af:8d:a7:4b:d6:3d:05:dc:80:97:3b:dc:09:dd:d6:ad:a4:
         4e:7d:65:97:68:16:f9:b1:30:8a:f0:23:16:bc:14:d8:43:0d:
         32:09:b8:7f:cb:63:7e:c1:ae:04:e4:8c:6c:40:e6:82:84:ff:
         6e:55:c2:c7:5c:fa:57:d3:d0:01:e8:ef:f2:42:e3:5b:61:1f:
         af:1b:3f:70:bc:5a:f2:7e:28:72:2b:97:07:31:e4:01:6e:29:
         34:5b:39:e9:bc:f0:ec:d8:9f:d7:af:be:45:3e:fa:4e:39:20:
         6a:1c:cc:98:fe:a6:e9:30:09:c3:d8:90:1a:49:5c:ad:9d:27:
         de:4c:d3:c1:6e:9e:10:6f:25:ca:8e:68:15:5f:ed:f4:74:93:
         97:57:ce:9d:c4:1b:38:4f:44:8a:bf:8d:12:9b:57:b7:e1:98:
         d7:b3:80:89:39:80:02:98:24:a9:2c:8c:d6:c6:fc:69:18:db:
         2a:07:fd:23:49:39:06:e4:34:b6:16:11:c4:dc:98:4a:21:d6:
         c0:dd:48:1e:fd:6c:ef:ef:d7:21:73:cb:94:e8:00:81:c5:97:
         85:25:3b:57:14:ca:83:84:e8:59:da:44:14:50:b9:a4:72:11:
         1e:39:3e:14:c1:74:9b:12:0f:67:d5:18:01:06:67:1d:e3:4e:
         ff:7b:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:20 2026 by rpki-client