Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
File:                     X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json)
Hash identifier:          0lF0foIYic1Q4DYf4vFLLyCNoojQcW0t78k2TOkh3GE=
Subject key identifier:   B7:01:BA:53:6B:2F:1A:53:0D:01:48:9B:B7:DF:D5:FB:FE:53:EC:5B
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Certificate issuer:       /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial:       019E1DC730C4799101DA11D57CBF83338A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
Manifest number:          01AF
Signing time:             Tue 12 May 2026 20:00:53 +0000
Manifest this update:     Tue 12 May 2026 20:00:53 +0000
Manifest next update:     Wed 13 May 2026 20:00:53 +0000
Files and hashes:         1: 5uXpm1mK2Lkx_hom9YzVY6h3X8g.roa (hash: Cn3egeW7Svzjn6B2DztmCBuQlzu52DOzJj+3bmdAQVc=)
                          2: 6PCZUJB3ipwVXLiyKcyJrFQu4wQ.roa (hash: m4ynyhKu4YCsiRrg6pHmEytuHr7lJuhn9fuEsyhPlJc=)
                          3: UgHcaBSwg0Iexf-S3Ppu9ltxOdY.roa (hash: uwkGrsjIen3tBe54+2c/5zWUfceUkyrc4GB8+Uk2gSA=)
                          4: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: pNPEE3NhKcoi0/7c//L8a1O38gM1FDD/7mCTuu0vOvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:30:c4:79:91:01:da:11:d5:7c:bf:83:33:8a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
        Validity
            Not Before: May 12 20:00:53 2026 GMT
            Not After : May 13 20:00:53 2026 GMT
        Subject: CN=b701ba536b2f1a530d01489bb7dfd5fbfe53ec5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:96:8c:88:26:09:1d:ce:1c:a5:9e:12:b0:
                    32:a7:0f:e9:fd:11:3b:0b:69:05:88:7b:75:47:44:
                    18:b6:63:ed:50:9e:04:7c:6d:c5:e1:4e:7e:4b:91:
                    05:d6:5f:dc:1c:89:4c:f2:ef:08:6a:81:fd:84:66:
                    13:c8:2c:0e:48:5c:f3:89:e5:a8:50:3c:d8:4b:e5:
                    98:4a:03:7d:22:ff:15:d9:e8:f9:fc:04:e3:c0:4a:
                    ea:8c:c5:c6:0d:e9:95:b2:ae:44:7a:10:10:81:b0:
                    77:6a:c9:fe:d8:a7:07:81:a8:f3:e2:2f:36:09:05:
                    0e:a0:27:0d:44:99:8b:16:96:ca:25:56:12:f9:47:
                    5e:f2:10:64:45:2c:5b:93:63:e7:3f:43:a3:d4:ac:
                    dc:cb:fb:b3:da:e3:d4:fb:e7:fa:d7:84:da:da:72:
                    bb:82:b2:90:e2:a3:58:c5:ad:c9:25:c0:3f:45:ff:
                    22:cb:83:4e:8f:a5:40:fc:b9:14:af:8e:85:e4:94:
                    df:87:3c:16:76:07:4a:c4:b0:73:73:70:0a:e9:42:
                    81:ed:24:a8:3c:c5:2d:cd:cd:b4:6e:49:eb:50:18:
                    a6:e4:f4:4d:59:a3:a2:51:a7:d9:74:1e:58:66:d6:
                    de:39:0d:54:4c:ff:74:3d:76:17:f0:2b:7f:f9:4b:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:01:BA:53:6B:2F:1A:53:0D:01:48:9B:B7:DF:D5:FB:FE:53:EC:5B
            X509v3 Authority Key Identifier:
                keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:fc:52:1e:9a:3a:31:8e:c9:1f:1f:68:42:d6:e3:dc:f8:
         6b:10:df:89:6c:bf:a4:fd:aa:44:7f:f0:20:18:b3:8b:f0:0c:
         40:c0:0f:05:9f:f5:2d:2e:9b:47:53:74:92:54:f8:a8:11:f5:
         4e:75:22:05:8a:29:69:6e:b9:6d:0e:90:ea:b0:e8:ab:e7:97:
         69:48:3b:d1:bc:62:7a:63:60:d4:87:ba:85:54:40:7f:bf:92:
         32:42:40:a3:1b:ea:4f:2e:b6:ae:b0:d9:45:e7:3d:0c:ea:95:
         c4:fb:f2:2d:c4:0e:13:69:65:5c:2e:54:7b:b8:20:6a:da:2a:
         0d:44:08:f1:e1:45:a4:69:53:d5:7a:b3:35:3d:0a:12:26:de:
         5b:1f:15:15:84:dd:f5:68:30:84:90:5b:cc:49:59:d5:ca:f3:
         a7:2e:08:b3:4e:8e:c6:8a:90:04:7c:35:c6:e0:27:fa:b8:86:
         21:5d:ce:40:98:90:de:82:e4:ff:96:21:35:50:e7:0b:e6:43:
         56:43:32:e9:64:23:a7:0b:f6:b3:90:4c:1c:c7:e5:ae:e2:09:
         c7:a9:0d:76:62:22:ac:ce:45:b0:48:06:8e:76:a3:77:92:fb:
         db:fe:3c:0e:7a:bb:64:a9:0f:59:18:d2:c4:ec:e0:70:69:45:
         dc:2b:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:57 2026 by rpki-client