Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File:                     xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier:          QaF6XmLmv8a1HVbvihr2B3m58Sx52p/Ik1oBWmEhf1E=
Subject key identifier:   0F:C8:9F:21:46:E0:6C:60:58:B2:B5:2E:9D:A9:23:2E:6D:E7:7B:0D
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer:       /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial:       019F9436F8ADF772E0B7E6F18C6012BC3AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number:          05AD
Signing time:             Fri 24 Jul 2026 13:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:58 +0000
Files and hashes:         1: KzL1NrpF1fIv1UZ-w1843U42opY.roa (hash: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM=)
                          2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: ulqEBtFuFecR2/GKuNUpc5CZwTfpMOJ6gZ9y5F9f4Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:f8:ad:f7:72:e0:b7:e6:f1:8c:60:12:bc:3a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
        Validity
            Not Before: Jul 24 13:00:58 2026 GMT
            Not After : Jul 25 13:00:58 2026 GMT
        Subject: CN=0fc89f2146e06c6058b2b52e9da9232e6de77b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:fb:5e:b0:97:70:cb:40:d2:64:88:94:e8:
                    46:7f:26:b1:da:0a:51:d7:01:c1:11:55:f8:c8:a4:
                    6a:12:1a:a8:9a:ae:f8:b0:0d:2f:3d:01:20:d9:b2:
                    59:d0:49:2d:39:c1:87:48:66:42:4d:ac:1d:7a:ac:
                    d0:18:9c:60:65:3f:f7:da:d1:6a:ab:14:99:e3:db:
                    dc:7e:e4:dc:b1:c9:c0:23:d0:24:ea:e1:63:61:9d:
                    18:3e:8c:9e:68:bd:91:e2:c5:ea:2f:69:94:5e:c0:
                    1c:3f:df:84:1e:3f:9a:3b:13:bf:ba:19:5d:79:8a:
                    bf:e5:f8:18:79:8f:e0:82:37:a5:68:79:c5:52:3d:
                    70:7d:b3:ea:14:30:76:77:85:20:6c:91:ac:af:a5:
                    26:81:ca:c4:25:1c:f2:d0:d2:b1:45:6b:f2:ef:ab:
                    05:35:13:a9:94:37:67:7c:8e:c1:c0:ad:c6:88:d3:
                    32:b9:ad:58:54:53:a1:d2:6a:1b:44:e6:e4:10:a9:
                    15:2e:e8:d1:30:87:e3:7b:f6:b1:e6:bc:7a:6d:77:
                    16:c5:e5:63:cd:4b:30:e3:74:b2:1f:29:42:d0:bd:
                    58:c5:a9:77:fe:90:6d:71:58:a2:b6:a6:17:ee:f8:
                    e3:d1:6e:13:52:67:fd:08:ed:7c:33:41:5e:ef:d6:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C8:9F:21:46:E0:6C:60:58:B2:B5:2E:9D:A9:23:2E:6D:E7:7B:0D
            X509v3 Authority Key Identifier:
                keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:1e:18:74:61:62:4b:23:a7:71:40:34:fe:72:28:b4:31:
         6c:51:38:08:3a:2d:15:a7:69:13:c3:00:f4:04:ef:79:9a:15:
         67:0e:66:d1:97:4b:05:c2:ab:29:73:fd:53:29:aa:9f:6b:79:
         ba:e7:af:0a:e8:3a:1d:34:0e:6a:96:e2:94:4e:a5:06:ca:b9:
         67:cb:f8:ab:96:66:a6:cb:62:33:71:d4:a2:c5:81:43:6d:b2:
         2e:fd:bf:68:69:8f:69:b5:39:5f:e4:8d:1f:e4:3e:c0:08:9c:
         a0:cc:50:61:d6:d2:58:e2:58:16:73:b6:df:a5:c2:1b:7f:cc:
         16:07:a2:ba:22:35:d7:23:a2:12:44:9e:b3:35:65:ab:c5:a0:
         03:43:cd:ff:46:89:b0:22:de:63:d6:64:e3:52:82:73:b9:0a:
         c8:22:b8:25:6b:4b:ca:52:b8:87:5a:dc:ef:60:da:c6:0a:54:
         fe:80:54:a2:a6:ba:5f:e2:62:4f:1e:7e:69:48:0e:a7:97:df:
         f0:2a:08:00:aa:8b:90:f7:76:0c:84:47:f7:3f:8a:8c:f6:8c:
         e3:06:f4:40:fd:89:91:e5:84:5b:29:67:af:68:a0:67:14:5a:
         b5:6a:d9:bd:02:16:c7:69:e8:07:c2:d7:af:6b:d0:ac:f2:2a:
         75:8f:b7:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNvit93Lgt+bxjGASvDr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGU3MjM3ZjE0NTlhZmY0ZDVhZTA5NGJkMmM4NTI1NmUy
ZTJlM2QwHhcNMjYwNzI0MTMwMDU4WhcNMjYwNzI1MTMwMDU4WjAzMTEwLwYDVQQD
EygwZmM4OWYyMTQ2ZTA2YzYwNThiMmI1MmU5ZGE5MjMyZTZkZTc3YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0f7XrCXcMtA0mSIlOhGfyax2gpR
1wHBEVX4yKRqEhqomq74sA0vPQEg2bJZ0EktOcGHSGZCTawdeqzQGJxgZT/32tFq
qxSZ49vcfuTcscnAI9Ak6uFjYZ0YPoyeaL2R4sXqL2mUXsAcP9+EHj+aOxO/uhld
eYq/5fgYeY/ggjelaHnFUj1wfbPqFDB2d4UgbJGsr6UmgcrEJRzy0NKxRWvy76sF
NROplDdnfI7BwK3GiNMyua1YVFOh0mobRObkEKkVLujRMIfje/ax5rx6bXcWxeVj
zUsw43SyHylC0L1Yxal3/pBtcViitqYX7vjj0W4TUmf9CO18M0Fe79YTZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/InyFG4GxgWLK1Lp2pIy5t53sNMB8GA1UdIwQY
MBaAFMUOcjfxRZr/TVrglL0shSVuLi49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAt
NTBkMDE4YmIwYmY2LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAtNTBkMDE4YmIwYmY2
LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE8eGHRh
Yksjp3FANP5yKLQxbFE4CDotFadpE8MA9ATveZoVZw5m0ZdLBcKrKXP9Uymqn2t5
uuevCug6HTQOapbilE6lBsq5Z8v4q5ZmpstiM3HUosWBQ22yLv2/aGmPabU5X+SN
H+Q+wAicoMxQYdbSWOJYFnO236XCG3/MFgeiuiI11yOiEkSeszVlq8WgA0PN/0aJ
sCLeY9Zk41KCc7kKyCK4JWtLylK4h1rc72DaxgpU/oBUoqa6X+JiTx5+aUgOp5ff
8CoIAKqLkPd2DIRH9z+KjPaM4wb0QP2JkeWEWylnr2igZxRatWrZvQIWx2noB8LX
r2vQrPIqdY+3Sw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:12 2026 by rpki-client