Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File:                     xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier:          3jhr4mB+aFaxDFEXlbB3gk9UyhRnFAZLFS6WfhDikP4=
Subject key identifier:   52:CB:EA:DE:87:5F:D9:46:EB:28:06:77:BC:1E:AE:54:87:0D:4C:81
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer:       /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial:       019E1FECBCE6A0AADDF2DFE2BA92AAAB4418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number:          055A
Signing time:             Wed 13 May 2026 06:01:08 +0000
Manifest this update:     Wed 13 May 2026 06:01:08 +0000
Manifest next update:     Thu 14 May 2026 06:01:08 +0000
Files and hashes:         1: aWkix5BEPhzF9HtAUh40Ya0hP5U.roa (hash: M4zeKlcKBskhzVuZ5EZH3G1hReQMWU2Dxp+IVnGHsic=)
                          2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: syB2UplQDGJL4PIOlh4GnxeMfvwrePCHWMwluD3Klcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:bc:e6:a0:aa:dd:f2:df:e2:ba:92:aa:ab:44:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
        Validity
            Not Before: May 13 06:01:08 2026 GMT
            Not After : May 14 06:01:08 2026 GMT
        Subject: CN=52cbeade875fd946eb280677bc1eae54870d4c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c8:fb:e1:6d:94:37:93:e4:9e:f3:8f:6b:ea:
                    09:50:30:f0:f2:9b:81:f6:1a:ef:09:9f:b4:e5:5f:
                    d0:58:34:4e:fe:6c:7a:4a:d1:bc:8b:e5:2e:12:45:
                    a4:83:31:0d:bd:11:f1:07:cb:03:c5:41:23:b1:2d:
                    a2:cb:1c:e5:f6:75:f1:6e:69:8a:2a:ba:9c:f9:69:
                    7b:13:dc:79:f9:bb:30:a6:d2:f3:ed:8e:2f:48:27:
                    04:72:97:89:90:8d:0f:7a:17:0b:05:46:42:44:49:
                    a9:16:67:fe:98:d7:3c:f3:ae:64:d3:ef:81:21:de:
                    64:fc:fe:38:33:f8:b8:34:7f:57:b5:79:cc:22:05:
                    ce:c9:f6:16:06:b7:5c:93:81:66:5f:0c:8c:d1:de:
                    4c:eb:79:5b:c0:8e:ab:04:3a:2a:10:e3:bf:12:b7:
                    e9:84:ed:ef:e0:f2:ec:6a:d7:53:a7:62:f4:2e:5d:
                    2e:7a:b5:78:35:b1:5c:0a:7c:e6:98:1b:9b:28:28:
                    c2:23:b2:e6:96:ab:c8:0e:0c:d1:86:38:d2:bd:56:
                    fb:54:a9:e3:54:7b:e1:f3:ee:5b:96:8a:3c:14:78:
                    ca:a1:f9:f6:42:a8:4a:2a:40:6a:a5:0c:f5:bb:2c:
                    80:3a:23:4e:6c:8b:f8:7c:91:cb:b8:5f:4b:c8:38:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CB:EA:DE:87:5F:D9:46:EB:28:06:77:BC:1E:AE:54:87:0D:4C:81
            X509v3 Authority Key Identifier:
                keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:a6:81:4b:74:43:01:9e:0f:df:7e:40:14:2d:90:1e:31:
         a2:73:6f:86:e4:e6:10:82:1f:57:22:c1:bd:4c:25:ee:42:ec:
         db:a7:d1:ca:0b:8f:18:cc:52:b8:af:a7:66:d3:11:ba:18:40:
         9d:6c:37:41:0d:e9:87:6e:28:0a:b1:41:a2:39:f0:2f:72:c2:
         a5:4a:4a:55:2f:f2:04:8d:43:60:ce:72:93:57:31:86:54:c1:
         25:61:f3:26:1b:0e:a3:a6:f5:69:12:d6:1f:76:9b:25:1d:eb:
         c6:07:5b:f0:96:da:7d:9f:1b:27:cc:82:b8:13:86:c4:47:c0:
         2f:cd:40:23:93:b9:30:03:ad:34:3c:43:ea:d7:3e:9f:54:17:
         e7:4f:45:89:73:d6:4d:8e:0a:00:3e:8f:6f:c4:68:5d:6c:e2:
         93:5b:b2:ca:cb:a8:34:13:77:d9:02:5b:79:ec:8a:b7:d0:9d:
         9a:aa:d4:8d:83:55:b2:24:1d:cb:07:6a:b0:39:70:d6:b2:a0:
         f4:93:8a:99:cb:77:0b:17:64:e8:e8:63:fa:b1:cd:a7:1f:6e:
         52:7d:08:b7:ad:c9:06:51:9b:1b:85:99:40:f5:9e:e7:dd:b4:
         e7:f0:52:34:8a:04:fd:48:6c:b0:cc:5c:b1:74:35:cb:62:1d:
         e5:b1:df:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7LzmoKrd8t/iupKqq0QYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NjYyZjk4MDIwZGE0ZTM3ZDUwZWQzYmIzMDIwMjc3NGYy
OTJkN2EwHhcNMjYwNTEzMDYwMTA4WhcNMjYwNTE0MDYwMTA4WjAzMTEwLwYDVQQD
Eyg1MmNiZWFkZTg3NWZkOTQ2ZWIyODA2NzdiYzFlYWU1NDg3MGQ0YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88j74W2UN5PknvOPa+oJUDDw8puB
9hrvCZ+05V/QWDRO/mx6StG8i+UuEkWkgzENvRHxB8sDxUEjsS2iyxzl9nXxbmmK
Krqc+Wl7E9x5+bswptLz7Y4vSCcEcpeJkI0PehcLBUZCREmpFmf+mNc8865k0++B
Id5k/P44M/i4NH9XtXnMIgXOyfYWBrdck4FmXwyM0d5M63lbwI6rBDoqEOO/Erfp
hO3v4PLsatdTp2L0Ll0uerV4NbFcCnzmmBubKCjCI7LmlqvIDgzRhjjSvVb7VKnj
VHvh8+5bloo8FHjKofn2QqhKKkBqpQz1uyyAOiNObIv4fJHLuF9LyDhLJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLL6t6HX9lG6ygGd7werlSHDUyBMB8GA1UdIwQY
MBaAFMVmL5gCDaTjfVDtO7MCAndPKS16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTIt
Zjg5OTc3YTQ1YjYwLzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTItZjg5OTc3YTQ1YjYw
LzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR22mgUt0
QwGeD99+QBQtkB4xonNvhuTmEIIfVyLBvUwl7kLs26fRyguPGMxSuK+nZtMRuhhA
nWw3QQ3ph24oCrFBojnwL3LCpUpKVS/yBI1DYM5yk1cxhlTBJWHzJhsOo6b1aRLW
H3abJR3rxgdb8JbafZ8bJ8yCuBOGxEfAL81AI5O5MAOtNDxD6tc+n1QX509FiXPW
TY4KAD6Pb8RoXWzik1uyysuoNBN32QJbeeyKt9CdmqrUjYNVsiQdywdqsDlw1rKg
9JOKmct3Cxdk6Ohj+rHNpx9uUn0It63JBlGbG4WZQPWe59205/BSNIoE/UhssMxc
sXQ1y2Id5bHfng==
-----END CERTIFICATE-----
Generated at Wed May 13 13:07:43 2026 by rpki-client