Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File:                     XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier:          KhWjv5ldyoV5b1U5wLxlpgA9QeRd/R98+vS0g9TnFWM=
Subject key identifier:   97:3C:86:7D:F6:17:4C:5B:DC:4C:34:F3:2D:F2:2C:FD:3A:70:B3:95
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer:       /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial:       019EC0DADF7F324DAEC6FF1708DFCB14C9AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number:          11C1
Signing time:             Sat 13 Jun 2026 12:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:30 +0000
Files and hashes:         1: AnmyPTbeKIdDpKQo2ow_d3sowCk.roa (hash: 5yDe2nBXJJOjrwl2r1aO5EGRjZW/0EOoxp3H2cvGJfM=)
                          2: H2Ow2vJleUpffVQJUaw-DrOP25Q.roa (hash: KI8QYq2nupDeoMFFlx5O6qkC1YhqNdHz/2qG81EcAxI=)
                          3: OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa (hash: B++2fKZYAzjlOxy+tDnJEo09oVmzZa6HnhPwxHljg8k=)
                          4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: 9J2SdPt/jv1k9gjfM55hJFCh+7IpHKfaGA4N0lybK1k=)
                          5: zmd5DMlEMs7x1X9PCKsNsTMW85A.roa (hash: +YU6hVZe0+5DtmTz9/lx0AEtMcLkshGqyIbMlS0ia0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:df:7f:32:4d:ae:c6:ff:17:08:df:cb:14:c9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
        Validity
            Not Before: Jun 13 12:00:30 2026 GMT
            Not After : Jun 14 12:00:30 2026 GMT
        Subject: CN=973c867df6174c5bdc4c34f32df22cfd3a70b395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:c1:18:bf:4b:3e:6a:eb:ba:3f:52:2a:ec:
                    4e:ce:83:69:f8:e3:41:20:b5:cf:7e:1c:13:4a:48:
                    b5:43:38:09:28:1e:8d:18:21:c3:78:e0:79:83:9e:
                    07:b4:93:f4:6e:2b:c4:86:60:b7:a6:d3:1b:5d:49:
                    21:d2:67:43:b5:d6:99:a9:d2:fe:7f:a3:d5:6a:e6:
                    8e:34:34:b0:71:aa:a6:2c:5c:c4:46:7c:01:86:2a:
                    79:6e:1f:1a:6e:a0:d7:8f:e2:2f:16:58:80:b4:aa:
                    b9:1e:52:85:59:70:23:ec:cc:48:89:e2:ec:8c:85:
                    8c:0f:da:75:1b:2d:51:c7:1a:00:92:12:af:78:8c:
                    2a:80:48:a4:42:65:a0:f1:11:a2:89:17:c9:c6:fa:
                    a5:0d:2b:f8:73:7c:d6:01:08:1f:87:a7:ae:56:d1:
                    5e:ce:ed:fb:b6:2d:8a:e0:7c:88:52:b5:c1:3e:ea:
                    c7:7f:a9:74:e3:6b:b4:34:ed:42:ec:4a:56:1a:c4:
                    2c:77:a5:aa:ca:67:c6:b7:9f:21:5c:b8:df:d6:da:
                    54:43:ca:d2:68:4f:04:0d:40:9f:e8:2b:32:71:ee:
                    37:28:a0:50:f5:fc:32:9b:23:c0:fe:4f:e4:a8:bf:
                    9e:dd:b7:a9:6a:51:f8:61:fd:ce:83:9a:de:79:41:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3C:86:7D:F6:17:4C:5B:DC:4C:34:F3:2D:F2:2C:FD:3A:70:B3:95
            X509v3 Authority Key Identifier:
                keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d9:cd:cb:14:e6:89:4d:55:27:3c:1c:06:9a:e7:02:b4:a6:
         16:ff:a1:1c:c1:08:f6:59:eb:29:51:e2:cf:f9:f6:93:eb:3e:
         1a:8c:e6:5a:6e:75:bf:04:0b:cb:a0:1e:cc:cb:b4:59:10:36:
         c6:6f:69:01:6f:de:cd:0a:97:d3:34:a9:18:75:0c:a7:9a:73:
         a4:59:2f:95:84:4d:92:fe:98:7f:d6:b0:33:f3:de:b9:a8:9a:
         b1:52:0b:9c:38:a6:d1:7d:7e:75:5c:89:a0:5c:06:a6:19:0f:
         2c:c8:96:ad:47:b1:b7:66:b5:cc:4b:8c:ca:73:ba:a2:44:b0:
         52:d4:89:cf:10:c8:25:fb:0b:0e:d3:1d:0c:d3:20:a1:b4:f3:
         03:f8:4e:a9:6a:0d:28:76:24:13:cf:74:4c:e3:aa:e3:15:62:
         73:25:74:e2:f9:81:98:12:6c:49:0d:db:21:91:e2:45:e0:15:
         f4:67:6d:26:44:8f:26:aa:a4:a6:47:f7:a3:83:8d:75:cd:4f:
         67:04:64:8a:0e:61:af:2a:6a:83:10:38:91:a8:1e:f9:01:7f:
         00:f4:1b:f9:ce:c1:ba:a3:91:b0:8a:18:41:27:b0:32:eb:20:
         31:18:d3:b0:84:1b:83:a3:2b:7d:3e:78:2f:bb:78:78:65:1b:
         03:e3:7a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:32:47 2026 by rpki-client