Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          BnXCKrGSUjPam6DsRAoBTjGn9dLxHmE9LPUYZB48GGA=
Subject key identifier:   D4:F7:AC:3D:67:B1:34:35:F1:B6:C8:11:A3:B4:EC:DC:94:3E:C8:23
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       019D99D089F4E6BB6F384E4AD97455F3142E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          107F
Signing time:             Fri 17 Apr 2026 05:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:14 +0000
Files and hashes:         1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
                          2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: Q1BNYcEkv67aQX00Mu0Jq2k1zljvMUGn1Gq+N+vXzT8=)
                          3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
                          4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
                          5: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
                          6: te3FBz79GYifGb3qq-rDfAn5q7I.roa (hash: 8JJ8Rj+5NIqp3neVi3adeudGuIpzTz7arVf+MmH6wks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:89:f4:e6:bb:6f:38:4e:4a:d9:74:55:f3:14:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: Apr 17 05:01:14 2026 GMT
            Not After : Apr 18 05:01:14 2026 GMT
        Subject: CN=d4f7ac3d67b13435f1b6c811a3b4ecdc943ec823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:b8:00:3f:2a:ba:6c:85:cb:c6:e0:87:b8:
                    f2:a4:28:5a:0a:a0:92:43:30:a8:2b:de:a0:aa:1c:
                    fc:ca:7f:51:44:1b:b2:4e:97:bd:a4:54:4f:63:ae:
                    a3:fc:52:10:45:30:d4:5f:e6:97:24:ce:9c:d0:0e:
                    58:a9:a9:3c:5b:55:1a:02:53:4c:01:c2:5c:c9:00:
                    98:38:a5:bd:fb:33:b8:3e:6e:b7:6c:b8:0d:27:f1:
                    fe:28:59:5b:ed:c9:ab:c5:e0:4f:c6:70:ef:f3:8a:
                    cd:6a:97:1b:d1:5e:33:66:83:09:78:45:a7:46:92:
                    db:32:3d:e7:c2:7e:42:68:44:eb:09:45:2c:08:12:
                    e0:a9:d6:04:1d:af:c1:fd:a3:0b:06:86:5a:46:9e:
                    c3:54:4c:6f:51:77:9f:ed:28:05:74:4a:6c:93:29:
                    66:cc:8f:1e:44:5e:f8:59:4c:34:44:a5:e6:e1:8d:
                    4b:df:e6:8d:fe:96:eb:12:b8:f9:61:0a:09:6d:99:
                    ff:e8:6d:30:d7:ef:8b:2f:f0:20:2e:fd:84:86:0b:
                    6d:02:83:9a:50:49:2f:47:bb:5a:74:be:00:c5:04:
                    dc:cc:83:5c:3f:e5:dd:77:bc:b3:b4:b1:83:6b:08:
                    7a:3c:5a:a7:db:38:e9:86:55:aa:ad:d1:ff:9b:6e:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F7:AC:3D:67:B1:34:35:F1:B6:C8:11:A3:B4:EC:DC:94:3E:C8:23
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:04:1a:10:78:35:d1:2d:02:2c:47:a5:80:88:2d:2b:ae:
         16:f9:9a:45:a8:31:e9:63:a6:73:2b:c0:31:cd:96:66:c2:bd:
         23:0f:ac:98:bd:41:dc:51:94:38:73:2a:67:b1:9d:70:5d:8c:
         a2:c9:79:5d:d2:9d:cf:7c:1f:40:50:bb:f8:79:bc:75:e0:4c:
         1b:ea:72:3b:59:44:28:28:3d:51:18:12:32:bd:7e:86:46:93:
         4d:25:5f:ce:f0:bc:cd:9a:13:1f:78:7f:b2:7d:57:17:47:95:
         69:95:9f:e3:7e:33:34:f2:f6:c1:24:fb:64:66:b5:06:c4:b7:
         cd:b5:fc:c5:1a:73:17:03:bd:c2:26:a4:3b:65:da:20:c6:0f:
         de:a2:33:19:8f:81:2b:b0:71:c8:f0:73:5e:65:32:6d:bd:79:
         fb:80:2b:93:3b:2c:12:68:bf:7c:e0:f5:a7:c9:5b:89:c0:ee:
         71:66:18:7f:c4:78:74:b8:4b:0c:1a:0c:4e:8b:92:f9:71:8d:
         c3:a3:90:3a:f7:0e:0b:97:9e:18:21:8e:d7:39:a8:00:f6:ae:
         f8:a4:64:23:d2:4f:b4:30:03:29:01:b8:0a:86:a9:46:4f:d0:
         99:7c:e7:28:ed:eb:fb:eb:4d:c2:01:86:3a:72:7a:53:8c:2d:
         2f:e9:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:57 2026 by rpki-client