Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File:                     XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier:          CM7dk0Xy0l3JLZeWKhNeMNSXQQx49y4yu0A9PQhpttA=
Subject key identifier:   DF:B3:54:18:91:3F:F7:7B:5B:10:6D:9A:08:53:F7:03:B1:A7:FE:39
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer:       /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial:       019CA9EADF3454877245F9DF8434D07B5A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number:          10AC
Signing time:             Sun 01 Mar 2026 15:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:07 +0000
Files and hashes:         1: AnmyPTbeKIdDpKQo2ow_d3sowCk.roa (hash: 5yDe2nBXJJOjrwl2r1aO5EGRjZW/0EOoxp3H2cvGJfM=)
                          2: H2Ow2vJleUpffVQJUaw-DrOP25Q.roa (hash: KI8QYq2nupDeoMFFlx5O6qkC1YhqNdHz/2qG81EcAxI=)
                          3: OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa (hash: B++2fKZYAzjlOxy+tDnJEo09oVmzZa6HnhPwxHljg8k=)
                          4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: 1lGTnGkgT3NeAP9f9cWqsfwwqXQh4+EkmPcU0fCIsEU=)
                          5: zmd5DMlEMs7x1X9PCKsNsTMW85A.roa (hash: +YU6hVZe0+5DtmTz9/lx0AEtMcLkshGqyIbMlS0ia0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:df:34:54:87:72:45:f9:df:84:34:d0:7b:5a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
        Validity
            Not Before: Mar  1 15:01:07 2026 GMT
            Not After : Mar  2 15:01:07 2026 GMT
        Subject: CN=dfb35418913ff77b5b106d9a0853f703b1a7fe39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:8f:62:77:d3:ee:86:87:b4:d9:82:ae:5e:
                    7a:be:a1:6a:ee:e3:c5:73:ef:4c:11:fd:15:46:92:
                    2e:04:3d:33:fa:de:de:14:1a:fc:68:d8:69:77:2a:
                    8b:79:94:e5:d3:1d:c3:19:54:42:53:f9:2d:b3:f6:
                    4d:62:fc:5e:99:d7:4e:3a:85:93:0c:69:86:c4:26:
                    e4:c7:e2:86:c6:42:8c:1b:9c:81:0c:96:06:cb:ea:
                    e4:4b:55:6a:8e:05:01:17:76:b8:72:7c:13:07:59:
                    6f:92:41:ed:0b:2a:e5:fd:8d:b2:df:0d:3c:7f:85:
                    6b:d7:7d:f5:e4:4b:7b:6d:d9:c5:73:e4:05:72:1d:
                    45:d4:e7:55:68:97:a3:23:ee:0b:25:05:31:91:18:
                    1b:c7:ed:43:4a:14:32:90:e5:de:d2:16:eb:4b:92:
                    99:cc:f1:31:17:3c:38:87:5b:44:74:fa:54:19:23:
                    94:9f:ef:2f:6f:9b:49:ec:6b:76:09:3d:5e:64:62:
                    33:8e:bf:5d:88:26:c2:dc:bc:65:d6:7a:77:3f:de:
                    5b:d1:ae:c6:1a:91:95:dc:a8:47:e0:42:e2:64:fb:
                    98:59:03:67:5f:a2:fb:76:bc:2e:6f:f7:49:7b:65:
                    aa:79:6d:6c:30:41:4f:df:b0:c1:50:2a:92:72:84:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B3:54:18:91:3F:F7:7B:5B:10:6D:9A:08:53:F7:03:B1:A7:FE:39
            X509v3 Authority Key Identifier:
                keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:7f:2a:1e:a8:e7:f5:89:5e:9e:52:2e:9e:18:ad:64:40:
         4d:66:84:64:a7:27:b2:d1:f2:31:01:2e:59:77:68:4d:53:46:
         76:7b:d1:18:50:ec:e7:85:53:ff:5c:5f:da:1e:e5:47:d8:42:
         28:84:d5:88:e0:6f:3b:c3:55:12:9a:7b:ec:b1:e5:36:23:16:
         d8:80:2d:ee:3b:2f:ed:12:e4:01:44:cf:ef:29:63:bc:00:ac:
         87:64:ce:c0:c6:95:ba:66:8c:d4:ca:d0:e4:3c:fb:64:55:ac:
         fd:c6:3f:6a:bd:ab:f6:64:09:9c:a8:00:22:a7:45:9f:77:97:
         04:52:70:a9:76:e2:f9:7e:15:70:73:a9:65:25:da:ac:df:8d:
         08:67:44:91:e1:84:47:fe:f2:07:9f:0a:97:e2:87:1d:0d:f2:
         58:f9:05:02:39:a8:6e:1c:d8:ff:3c:12:d9:86:6e:34:91:b8:
         52:5e:5c:c0:43:f8:78:39:ee:fa:c2:d0:1c:59:13:ec:e9:5e:
         50:a8:4b:56:13:2e:31:66:16:8e:6b:00:89:dc:4f:b0:72:c9:
         f7:a3:43:49:b4:9b:14:13:38:82:1c:e6:bc:3a:08:0d:bf:ee:
         d5:6a:64:e0:ad:95:ed:2f:9e:70:a6:33:ae:64:91:76:1d:02:
         66:7d:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:10 2026 by rpki-client