Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File:                     xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier:          8tGMDgqhHfxnTAWENMOJZmx+Bti4tGVZ1mrq8bltUfc=
Subject key identifier:   3C:DD:96:73:CD:34:A9:15:F2:C4:B0:8A:87:80:DB:70:1E:F2:9E:BC
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer:       /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial:       019CAC471E4667487FF275BDC674F79FEA5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number:          176A
Signing time:             Mon 02 Mar 2026 02:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:07 +0000
Files and hashes:         1: emO2nonrGTBV6dWmgfFKxf2S-4Q.roa (hash: J/NmygUcPvRFH9fgrU6o+RxXyKYU/ZMkRyNKy/UmGBA=)
                          2: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: xDuias0GK3LsqgiYeq4lS0D6TKF/VG59QSiQxbtYKjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:1e:46:67:48:7f:f2:75:bd:c6:74:f7:9f:ea:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
        Validity
            Not Before: Mar  2 02:01:07 2026 GMT
            Not After : Mar  3 02:01:07 2026 GMT
        Subject: CN=3cdd9673cd34a915f2c4b08a8780db701ef29ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:b9:69:4f:e5:bf:26:d9:9e:8f:15:ef:ad:
                    61:d6:2b:15:b9:14:a8:7f:89:f6:3c:61:89:5d:48:
                    06:7a:61:7d:76:ca:a1:bb:66:14:a9:c1:ed:30:a0:
                    5a:b4:ac:c2:37:c2:f1:f8:a5:36:f2:72:a3:01:de:
                    aa:74:d4:11:0c:d6:ef:66:9d:38:e3:9a:d5:c7:00:
                    b6:21:ae:e5:b4:56:0e:ff:48:a0:0a:fc:cc:82:d9:
                    46:5a:75:b7:09:30:60:24:92:82:2e:b8:74:9b:aa:
                    9a:89:31:a2:07:ca:06:ae:64:ec:eb:fc:eb:3d:f0:
                    aa:d4:67:2d:e6:a1:59:7a:5a:0c:de:09:23:b0:be:
                    0a:f6:be:fa:75:7e:f1:57:ea:9e:cb:28:44:5c:96:
                    e5:04:5d:fd:a6:d1:39:4a:d4:cf:39:ff:a0:da:a5:
                    cc:dc:c2:1e:25:83:d2:ee:2a:63:1f:d6:71:ab:d8:
                    ec:a9:de:a7:3b:4a:5e:6e:77:6e:be:c3:e6:c4:fe:
                    91:61:37:cb:d4:e0:4d:14:10:54:41:dd:90:78:b5:
                    e6:85:e5:b2:54:06:7d:b5:09:5e:19:8c:9b:cc:95:
                    6e:d7:bb:45:ef:dd:b9:71:6b:7a:aa:d7:e1:ad:99:
                    2a:e6:a6:1e:5c:92:63:71:2f:5f:03:58:35:ce:13:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DD:96:73:CD:34:A9:15:F2:C4:B0:8A:87:80:DB:70:1E:F2:9E:BC
            X509v3 Authority Key Identifier:
                keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:be:87:e9:38:31:af:30:17:da:1a:b8:27:54:dd:f3:e4:c2:
         22:37:0d:79:6a:2e:8f:83:81:7b:77:2c:e5:d5:0c:88:3b:72:
         8d:30:ec:47:19:33:9e:42:0b:52:f3:34:60:5b:75:ad:3e:f5:
         45:44:31:ca:db:84:cd:28:0d:2b:c1:38:aa:17:b6:3a:c8:d4:
         3c:37:87:4b:57:11:cb:47:f9:ec:28:89:3f:fe:9f:77:a6:8d:
         38:68:6c:ae:a4:c8:63:43:56:e8:3e:bd:11:41:29:8d:c9:0a:
         d7:30:9f:22:df:2e:7d:8c:70:81:88:31:b7:2c:da:56:51:f5:
         e7:b4:ec:76:ba:17:fa:5c:71:21:a9:93:56:aa:fe:96:b5:c7:
         9a:e4:89:bc:73:17:0a:70:0f:45:78:dd:6a:ec:5b:79:6f:e2:
         1d:98:f7:36:b1:3c:f5:ba:84:83:ca:de:f2:1e:11:27:fb:a3:
         a7:98:b1:b3:fa:be:ce:5d:0d:e6:5c:3d:fd:0b:c6:00:58:af:
         1a:3a:98:05:0b:26:d5:ec:9f:38:20:da:09:22:c2:80:7a:93:
         d7:f8:2f:ec:3a:1e:40:77:20:20:9d:8b:de:d1:e7:f6:a9:7b:
         30:e9:2f:19:65:74:8d:02:68:d3:9e:01:aa:cf:c9:1f:20:e2:
         d3:ca:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:28 2026 by rpki-client