Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File:                     X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier:          Hd6xqQsCcsX+PF8G9K1rPO5s1TadgebB+aN5DJwmi2s=
Subject key identifier:   80:B0:8D:D2:3D:46:77:6F:D5:6F:AE:A4:24:56:FC:02:58:E2:A0:5A
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer:       /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial:       019E1DFE437056B7F453ECC63CBEAFD1A200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number:          0B29
Signing time:             Tue 12 May 2026 21:01:03 +0000
Manifest this update:     Tue 12 May 2026 21:01:03 +0000
Manifest next update:     Wed 13 May 2026 21:01:03 +0000
Files and hashes:         1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
                          2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: cyDiC+4IXtpj+nwB7chByRoC41xaijRfiOVCO9wFJ8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:43:70:56:b7:f4:53:ec:c6:3c:be:af:d1:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
        Validity
            Not Before: May 12 21:01:03 2026 GMT
            Not After : May 13 21:01:03 2026 GMT
        Subject: CN=80b08dd23d46776fd56faea42456fc0258e2a05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:c1:4e:da:aa:96:1c:cc:4f:74:10:8e:77:
                    4a:50:3a:71:b4:e5:73:fb:fc:49:ce:fc:f2:e8:5b:
                    6b:66:03:11:1e:55:0e:50:09:16:41:94:49:a8:76:
                    be:c1:e3:25:10:72:fc:34:28:0b:24:10:2e:ad:5d:
                    db:29:fd:fb:5f:40:3c:26:c3:45:4e:e4:b9:68:e9:
                    f3:2f:52:9c:1c:12:96:11:eb:bd:1c:80:24:27:d2:
                    97:b3:76:d9:e0:ef:b7:4c:74:e1:0f:72:e2:0b:4b:
                    92:0a:8a:e1:d3:cf:12:bc:54:1d:8f:5f:0b:9b:3a:
                    d0:54:72:39:7c:d3:1e:1a:1a:0c:54:9a:49:0b:fc:
                    c7:63:30:f7:8f:df:da:db:2f:e5:92:50:c6:69:fa:
                    5a:4c:5f:0d:4e:76:61:31:02:0e:75:d9:d0:ce:02:
                    50:36:11:67:db:6d:59:e3:60:82:c7:55:89:30:d7:
                    43:66:f7:b8:87:7a:f8:82:08:10:94:d0:b6:01:00:
                    58:4e:0f:5d:89:d4:83:64:65:9c:03:ef:80:40:d8:
                    52:2d:53:68:a7:10:10:d3:f9:e5:6e:c1:b5:12:6f:
                    1e:d2:53:76:de:eb:e0:1e:09:49:86:8f:92:dc:59:
                    b2:c6:4a:88:34:4e:c4:a9:8f:f7:6c:c5:1b:ac:85:
                    27:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:8D:D2:3D:46:77:6F:D5:6F:AE:A4:24:56:FC:02:58:E2:A0:5A
            X509v3 Authority Key Identifier:
                keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8d:6c:70:a6:19:9c:3b:b3:9d:94:73:bb:d1:36:0e:1d:76:
         4f:8b:f9:78:5d:41:c8:b8:f3:28:7c:5c:a8:ea:a8:7d:f5:03:
         6d:a8:8e:90:9b:ea:4e:ea:30:66:f5:a8:6b:1f:56:ea:1d:2c:
         71:69:57:ae:a0:5b:02:99:8d:b4:d4:78:51:27:d2:3a:7f:8c:
         49:c4:7a:0c:8d:4c:72:04:4a:99:38:8f:00:4d:7e:61:c8:84:
         dd:1d:16:6b:17:1e:9a:ee:fc:19:50:c5:7b:89:32:6e:65:4a:
         97:25:01:26:29:18:49:57:3f:71:35:33:7d:80:2f:80:7a:e9:
         37:81:53:c4:b9:1c:2b:65:2e:55:8a:c1:aa:10:33:e8:07:eb:
         46:9d:f4:df:0b:7d:b9:8e:c3:4f:09:32:0c:0c:bd:46:87:ae:
         f6:77:1f:43:a1:9e:a4:9f:98:37:24:73:36:67:f3:89:41:a9:
         42:98:43:45:fc:89:13:af:cf:3f:94:c3:fc:74:a1:79:8d:99:
         59:81:9a:d4:10:20:28:64:ed:52:d5:8a:b4:40:59:6f:db:24:
         64:6e:b8:d2:3d:36:21:6f:47:4e:0d:3a:e8:9f:25:ce:36:97:
         6d:29:e7:f1:d1:58:83:4c:2b:0a:f7:0f:ed:14:78:58:44:f8:
         cc:5a:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:49 2026 by rpki-client