Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File:                     xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier:          NZ1yUAZqVXA7f2Qo8MkF+8dTqswepVx76XtbFt05pDQ=
Subject key identifier:   DC:F7:B0:76:0D:10:FC:35:72:C4:C9:EE:0C:ED:63:CC:CA:2F:40:0B
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer:       /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial:       019EC224CB6DC3DAA9D21980D242D825D57C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 18:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:51 +0000
Files and hashes:         1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
                          2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
                          3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: K/tYMgQyvQ3XRiS3NTZjn49DrxGnn5zR2HEg6jQcwYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:cb:6d:c3:da:a9:d2:19:80:d2:42:d8:25:d5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
        Validity
            Not Before: Jun 13 18:00:51 2026 GMT
            Not After : Jun 14 18:00:51 2026 GMT
        Subject: CN=dcf7b0760d10fc3572c4c9ee0ced63ccca2f400b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:c5:2a:5b:be:c3:7e:ab:0e:6b:7f:c2:fa:
                    9b:34:49:2d:c8:76:da:c3:4f:87:b9:52:18:21:6a:
                    43:90:b4:40:bc:64:ed:62:4d:d2:50:5f:65:b8:e8:
                    34:fb:71:59:b2:d6:d2:67:9b:c8:7a:b2:dc:91:a6:
                    a2:b9:e3:34:22:52:0a:bf:ac:f5:46:e6:22:32:7e:
                    83:f5:82:c5:7c:75:83:06:db:c9:11:8c:d5:26:48:
                    69:4b:4c:78:f5:78:d1:69:9c:0c:6c:61:5d:f7:3c:
                    84:ab:38:b8:ad:51:fa:1c:d8:d8:56:31:dd:6f:de:
                    70:ee:be:0f:2d:f4:10:f4:5e:86:d0:48:9b:e6:ad:
                    11:2a:4c:8b:10:18:0a:95:8a:a0:ea:e1:e4:bd:ab:
                    99:2f:6c:7a:3b:90:7a:a7:1e:c5:26:65:51:ae:7a:
                    f0:80:c8:a3:dd:ec:8a:ba:fd:e7:a9:37:21:46:87:
                    6a:cc:af:48:8e:48:9b:31:f6:9a:ee:8a:71:51:83:
                    d2:ff:24:fd:a1:ca:af:7c:a3:a4:72:e6:91:2b:49:
                    f9:7e:e5:45:20:35:b5:1f:01:d0:a4:1d:b1:ea:37:
                    83:8f:af:14:37:0b:6b:a6:7c:81:40:9b:ee:08:14:
                    45:44:96:f2:8d:c6:72:98:2f:f1:b8:a4:07:d9:f0:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F7:B0:76:0D:10:FC:35:72:C4:C9:EE:0C:ED:63:CC:CA:2F:40:0B
            X509v3 Authority Key Identifier:
                keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:65:d3:79:7a:5d:12:03:e0:14:3b:1b:5a:c0:09:34:46:7e:
         61:77:86:73:be:2a:4b:fa:9a:c0:07:dd:a4:9c:55:80:18:fd:
         b8:2b:a8:21:fa:03:b0:f7:93:21:49:ae:6c:5c:31:10:7a:df:
         4e:bf:fc:1e:07:85:68:66:f2:35:0a:d4:07:13:6d:04:f1:95:
         4f:fc:79:27:ee:c2:67:b7:20:3b:e8:49:9e:91:a2:66:f7:b1:
         c2:13:e8:e7:b9:77:31:80:97:91:9a:70:33:f4:5d:6e:a1:d9:
         49:47:61:a7:01:11:c2:82:04:df:26:cc:f7:1e:a1:82:1b:21:
         fe:79:54:f3:16:ef:dc:86:0a:62:35:fe:72:a0:20:d8:8a:f5:
         b7:ce:7c:a5:60:ce:29:23:be:6e:65:c0:0a:c1:e7:e0:68:17:
         ae:b8:d2:51:e0:67:75:45:14:de:09:c8:a2:a0:55:e8:ba:34:
         ae:f8:12:86:0f:dc:3b:30:92:5c:a9:a0:d2:f5:bb:b1:9d:bb:
         e0:27:70:2f:d3:f6:0f:e5:1c:83:a2:50:52:3d:f5:51:ce:37:
         87:f0:13:4a:ee:e6:0d:0c:c6:d2:e5:a3:d4:d5:4a:bd:07:6c:
         54:d0:f5:99:5f:f1:d3:cb:c9:26:ad:1e:f7:32:3e:b8:40:0f:
         29:89:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:52 2026 by rpki-client