Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File:                     xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier:          eSzoJ7o/mbL18aijNzohEFhT6upGzx/ybksD16Zfg0Y=
Subject key identifier:   33:82:F3:99:4A:5B:55:CB:36:7E:C2:0A:BD:C0:B2:4C:02:BA:7D:BF
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       019DA30AA501D32296FF9BFBD430B2A4432A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number:          0A3A
Signing time:             Sun 19 Apr 2026 00:01:16 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:16 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:16 +0000
Files and hashes:         1: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (hash: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4=)
                          2: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (hash: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4=)
                          3: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (hash: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc=)
                          4: eqTX003eyxyptc_5akwZQ-er_vM.roa (hash: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c=)
                          5: qBNprkht_3wALG390SrSxt6PGBw.roa (hash: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ=)
                          6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: /FzVCoXXMUrx2miIxypYcUSB0CkBH1nt9nsWA3pia7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:a5:01:d3:22:96:ff:9b:fb:d4:30:b2:a4:43:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: Apr 19 00:01:16 2026 GMT
            Not After : Apr 20 00:01:16 2026 GMT
        Subject: CN=3382f3994a5b55cb367ec20abdc0b24c02ba7dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:75:7f:78:6f:9f:8b:93:8a:70:22:10:e0:
                    1e:69:b9:12:dc:dd:e5:66:de:9f:65:5b:e2:94:e7:
                    18:55:ed:e3:da:ee:92:51:1a:ba:4c:86:5a:34:8f:
                    1f:68:c1:18:4b:6d:86:e0:11:ed:27:d6:51:fe:93:
                    0a:8d:c2:56:3d:17:09:be:17:e9:24:fe:9e:62:a6:
                    d0:62:72:c5:e0:76:eb:7c:ed:d0:92:63:94:5f:4e:
                    ed:7d:8b:c4:9f:57:96:27:a3:3e:23:1a:25:3e:20:
                    c5:d1:d8:03:17:5c:22:b7:65:60:f1:f0:35:2c:25:
                    ef:1a:21:0d:e8:33:c0:18:3d:0d:d9:ca:fd:76:cc:
                    00:9a:02:a7:94:fc:80:a6:a0:10:84:82:4c:8f:09:
                    4c:18:0d:93:59:a1:1c:2a:31:1f:fe:80:e2:93:b1:
                    ad:ed:0f:b3:b2:3a:f7:19:17:69:b0:74:aa:27:7a:
                    9b:0e:40:5d:b4:a7:93:6b:18:f4:ff:da:35:2a:27:
                    1f:d4:ae:bb:7a:f9:a8:41:6a:1c:26:6e:5b:93:b5:
                    c6:c7:58:30:b2:fd:ea:0b:1b:ad:37:94:c7:22:71:
                    aa:42:ae:e6:c3:1c:a4:3c:a8:24:25:ab:d5:c4:d6:
                    49:1e:a2:82:28:b0:92:ea:c4:50:0e:5e:da:1c:07:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:82:F3:99:4A:5B:55:CB:36:7E:C2:0A:BD:C0:B2:4C:02:BA:7D:BF
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:2d:62:31:a7:8d:5c:19:2c:26:bd:d8:0b:8c:7d:a1:86:05:
         9f:6d:7c:85:d0:13:1b:c0:ce:41:72:7b:33:a0:4b:d7:ed:dc:
         af:9a:e9:53:a0:54:65:1c:d5:f2:1c:fb:6f:dd:09:f0:5f:61:
         b9:86:45:b4:70:fa:0c:1d:d9:f2:94:a8:c4:63:10:ec:23:63:
         15:05:be:c4:fe:78:58:3d:60:16:ef:c8:1b:ec:cd:a2:a8:4e:
         47:c4:d1:35:67:fc:be:64:c1:91:f3:26:6f:a0:a4:3e:87:c1:
         f0:1e:7e:53:cf:b8:e1:ec:ab:5a:45:e4:37:06:02:9d:9f:e8:
         77:92:93:6c:58:b5:b0:e2:65:61:c0:f2:b6:e1:c5:6f:07:ec:
         05:7d:d9:82:6f:33:c5:6a:6e:da:a0:4c:11:1a:c5:f2:ec:93:
         31:ae:d6:69:7f:14:bc:d2:17:2b:89:78:25:5c:00:8e:76:00:
         85:d9:31:23:5d:2c:f5:a2:56:21:cd:57:a8:74:9f:56:c2:73:
         1b:25:09:c0:8a:4b:2e:c1:6d:d8:e7:ed:47:ef:3b:67:74:b0:
         29:2d:ad:1f:76:06:1a:19:51:79:18:85:8e:18:ce:ce:7e:67:
         eb:29:79:52:18:16:f3:2e:fd:20:4a:90:2f:f2:5f:20:26:69:
         5d:9e:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:37 2026 by rpki-client