Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File:                     xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier:          zz87pKVV/ii/p9KEEvQ2x+6VvJ1VOJtKSMXdVkEMroo=
Subject key identifier:   7C:7F:22:FA:56:F0:06:FC:A3:18:8C:52:A2:A3:92:53:17:43:2D:D5
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer:       /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial:       019E1F10AA047574724515152E07F62483F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number:          14AD
Signing time:             Wed 13 May 2026 02:00:46 +0000
Manifest this update:     Wed 13 May 2026 02:00:46 +0000
Manifest next update:     Thu 14 May 2026 02:00:46 +0000
Files and hashes:         1: Cw_CJ5OIoHGbk_LBH69lh1CZovM.roa (hash: yuy/Yr+PAF0sScRAiUSYVsMjWEF5R7acxEyN+jKmOa4=)
                          2: GUYAfSyAe_7KoSF2zNniTR86G3o.asa (hash: QJFS4MThTD8AoeTU4o5zhEg8FJRAThUcCKNx9GenoTY=)
                          3: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
                          4: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: kxQkv+GbxiVKbsvXrmh3N2oYz+DVPAaohHxeXkBg0jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:aa:04:75:74:72:45:15:15:2e:07:f6:24:83:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
        Validity
            Not Before: May 13 02:00:46 2026 GMT
            Not After : May 14 02:00:46 2026 GMT
        Subject: CN=7c7f22fa56f006fca3188c52a2a3925317432dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:63:fd:98:87:a2:1d:5a:6f:9c:61:14:f5:
                    cf:4a:20:c8:7b:a0:45:8e:fa:da:c9:ff:6b:c0:b9:
                    97:ef:ca:a9:73:86:44:dc:05:43:ef:a1:e2:d2:70:
                    3b:ca:a6:5d:36:d4:8c:04:0e:b3:f8:14:ff:d4:ae:
                    5d:dc:94:ff:c0:8a:47:7c:c7:cd:59:d2:26:dc:cf:
                    f7:58:5c:de:d4:bd:4a:03:17:89:f7:f6:7d:98:5e:
                    3a:d6:1f:4c:05:24:e9:e3:1e:db:a2:1c:63:39:5e:
                    64:a9:22:04:00:ce:ca:01:65:71:ac:41:47:4a:98:
                    dd:1f:e0:59:4e:b7:bc:72:75:df:db:d9:89:84:01:
                    64:77:c6:40:26:e6:3c:60:b6:48:b3:f7:99:1a:15:
                    af:65:14:67:5b:4c:12:79:42:b9:f7:1a:c6:a5:66:
                    99:55:ee:d8:55:5b:97:61:3b:ac:0c:86:83:e4:d2:
                    d6:da:71:84:49:11:f6:7e:96:d5:74:b4:0f:8e:62:
                    97:ea:37:c0:64:2d:c9:95:50:05:1f:f6:f8:15:b5:
                    47:e9:ce:7b:a8:48:5a:42:90:bd:68:9d:9a:8f:ec:
                    62:74:f6:2f:b2:dc:37:e8:34:10:72:46:76:b0:70:
                    28:d2:8d:1d:91:79:fa:e8:11:16:ed:76:da:25:41:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7F:22:FA:56:F0:06:FC:A3:18:8C:52:A2:A3:92:53:17:43:2D:D5
            X509v3 Authority Key Identifier:
                keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d1:97:63:d4:32:dd:f7:0c:8a:00:e8:46:8b:59:7b:38:ec:
         a0:1f:6f:90:77:ff:d1:a3:38:a7:4c:54:00:2e:a0:e6:9b:85:
         6b:45:7b:27:3a:4d:e7:52:84:fb:2a:56:52:d8:84:ad:ee:10:
         05:be:18:6e:ec:9e:7f:4d:bc:62:8d:4b:92:56:4f:10:f6:e5:
         82:a5:57:0e:b0:70:81:18:e1:df:6c:f3:24:5c:e2:8a:d5:ad:
         40:db:04:38:9f:70:70:78:33:f9:15:4b:63:51:71:28:a1:59:
         18:e4:3c:13:1c:7c:5e:0d:9c:fa:57:96:d6:b1:75:e2:7a:0d:
         90:fe:6d:9e:dc:2f:58:20:d6:06:8a:ce:35:ea:58:66:96:50:
         5f:da:55:d3:a1:f4:b0:fb:3e:d7:22:e6:15:d0:e6:97:3d:a7:
         69:71:4f:ef:24:59:0c:e7:09:e3:36:06:e4:a2:31:ab:0d:0a:
         3e:bd:ff:d7:9f:a0:59:6b:a2:1a:3c:60:0e:b0:33:a1:5d:e4:
         f4:e1:bb:e5:f3:b4:08:34:c4:6a:ab:7d:ce:88:4c:21:31:df:
         d7:92:2c:e0:a2:3d:ff:1a:fe:e1:c3:8f:7f:c2:f6:c7:b8:a8:
         b7:34:6a:2b:95:cd:9f:4f:ba:60:90:d1:ed:2a:51:37:48:97:
         57:90:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:52 2026 by rpki-client