Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File:                     xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier:          +FHnPqypX4OjKZCbNuGxCutO3XNwO1/n8e4dCTwSK1k=
Subject key identifier:   D0:3D:72:1F:51:E8:F0:12:1E:1D:E3:15:8B:38:6D:32:C7:B2:04:12
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       019EC300B3F19DAEA285EB1CDB14162DC431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number:          1964
Signing time:             Sat 13 Jun 2026 22:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:03 +0000
Files and hashes:         1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
                          2: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
                          3: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
                          4: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
                          5: jG6aepPboty3bhwMFNAy4j7PZLg.roa (hash: RpAm5WQYOjhIalUzLd+dhvF8WQ0tVlQHMoKb6uwbMJc=)
                          6: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (hash: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ=)
                          7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: jq9roAOx02Iag+3f0gx74aNlv8ih/n4XRiWEsQtbEaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:b3:f1:9d:ae:a2:85:eb:1c:db:14:16:2d:c4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Jun 13 22:01:03 2026 GMT
            Not After : Jun 14 22:01:03 2026 GMT
        Subject: CN=d03d721f51e8f0121e1de3158b386d32c7b20412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7d:cc:f7:77:e9:7d:88:0c:53:29:2b:9b:ea:
                    cb:fb:14:77:fc:6e:0c:3a:d0:f9:11:89:fb:98:bb:
                    96:1a:fb:6d:08:b8:7a:0b:51:eb:76:11:cd:45:63:
                    40:da:fe:86:a3:fc:f9:f3:2c:99:87:49:34:ce:6e:
                    5d:39:c0:4e:4a:76:14:94:ce:9e:ec:09:dc:aa:d3:
                    dd:b1:04:4a:9e:62:80:d4:57:a1:c9:f5:3d:9a:4a:
                    b1:34:a3:e9:c8:1f:c1:3c:61:89:23:ca:fc:8e:59:
                    c1:a3:f4:87:2b:70:fe:b5:50:cd:ed:57:57:12:4e:
                    07:25:fd:5f:fd:0b:0e:09:aa:c9:b2:22:39:aa:b1:
                    3c:8d:57:3c:01:a2:4b:4a:f5:40:a2:b7:19:dc:b9:
                    51:45:43:62:44:fc:2d:c1:37:74:fd:ef:de:f3:0f:
                    d3:73:a5:74:c9:a0:b9:09:c8:73:92:e4:a3:11:74:
                    bd:f5:90:2a:be:dd:1a:26:e3:7c:08:6f:52:91:36:
                    93:ac:73:38:46:f5:ca:55:f4:f0:e5:2c:c1:b6:ef:
                    04:df:e9:7f:43:55:cf:f7:53:ee:60:f1:6d:41:eb:
                    e8:cc:5d:36:ef:4b:95:e7:a3:04:3f:85:c8:b8:5c:
                    d6:2d:83:00:2c:29:40:3f:cc:4a:07:09:20:a5:4b:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3D:72:1F:51:E8:F0:12:1E:1D:E3:15:8B:38:6D:32:C7:B2:04:12
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:8f:05:46:a1:c7:b1:cb:42:97:5b:70:33:b9:bd:93:13:
         06:e4:eb:48:2e:fc:2b:8a:76:89:e0:d9:7f:21:4a:d2:56:06:
         54:57:bd:5f:b8:2c:53:bd:13:2f:c5:1f:fb:ea:8f:da:74:ba:
         3f:14:94:cd:9c:4d:0f:d4:70:81:37:48:f6:3a:41:f9:22:7e:
         f4:b6:f0:3c:cb:74:38:a9:07:69:9f:09:bc:41:17:4b:38:49:
         15:9f:7f:c7:c2:81:f3:27:c3:f6:00:4b:43:7c:8b:72:3d:9d:
         d8:df:af:29:6d:81:bc:cc:19:36:c8:2f:b0:9a:19:98:c8:b8:
         af:91:17:b3:6b:8a:53:3d:b3:95:c0:35:e4:b9:15:4d:27:25:
         2f:31:d8:a9:3a:27:aa:8d:34:dc:a0:5e:27:94:da:7d:d8:3e:
         06:8b:67:f1:a7:76:c6:31:e4:61:9b:0e:41:47:37:4f:bb:80:
         d5:5a:f9:1f:4e:de:21:41:eb:89:00:d8:7f:bc:0b:3c:5e:3d:
         e9:a4:15:ba:72:70:7b:2b:2d:2f:43:fa:35:e0:ab:cf:75:07:
         7f:1c:97:19:e1:31:bc:8a:21:2d:5b:2a:21:4d:40:30:3e:3e:
         db:d7:c8:a8:7a:54:80:bb:36:86:23:29:13:64:e3:37:8f:39:
         07:06:34:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:13:46 2026 by rpki-client