Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File:                     xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier:          a3bBXm8rlRz3CmOX/FjoU6aw4DCaAUOnnem/khY/twE=
Subject key identifier:   22:D8:4D:56:62:90:91:B8:63:6A:00:19:C8:06:16:EA:2D:D1:52:17
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer:       /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial:       019EC148C1B947B3EE60098F543FBFA1489C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number:          0899
Signing time:             Sat 13 Jun 2026 14:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:31 +0000
Files and hashes:         1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: 1sLKpAWvsIU1jGVqpvqZbSbLt2tAu8z8ga43kda/G0c=)
                          2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:c1:b9:47:b3:ee:60:09:8f:54:3f:bf:a1:48:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5947a414a8830515656d738a78382890160377d
        Validity
            Not Before: Jun 13 14:00:31 2026 GMT
            Not After : Jun 14 14:00:31 2026 GMT
        Subject: CN=22d84d56629091b8636a0019c80616ea2dd15217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:c6:38:6e:c3:12:66:f4:36:77:a1:da:80:
                    cb:92:06:c9:87:25:9f:03:37:57:7b:e9:3b:6b:dc:
                    d2:74:ca:dc:a6:be:75:88:db:07:19:c7:f4:bc:66:
                    91:62:24:c5:cc:a0:6f:1f:36:6d:69:92:4d:2c:8a:
                    19:4c:6c:ba:55:f1:3a:e4:cd:97:55:ef:fe:db:67:
                    d2:51:74:c3:9b:22:7b:83:33:6c:29:a5:80:5d:d4:
                    20:0d:72:df:9f:9c:50:45:75:34:96:7b:72:a4:1f:
                    e4:5c:4e:8b:39:18:e6:51:e1:5b:08:78:0e:5c:3c:
                    84:86:96:ea:d4:c3:13:bb:dd:c3:43:83:e1:51:a4:
                    b9:e1:9a:f9:b7:6e:a3:30:14:c1:02:83:d4:2b:ab:
                    fb:24:38:31:6b:10:3a:d8:9f:de:7b:48:0a:5d:25:
                    d1:0a:67:ad:8d:1c:13:7d:82:2b:ea:cc:24:af:3a:
                    5b:4c:1e:70:71:c3:12:9c:f2:96:74:59:e2:93:d1:
                    32:5b:8c:6a:32:32:de:4e:8e:13:21:ed:44:e9:5c:
                    e4:17:30:d4:4a:1d:69:ae:b2:43:e7:50:3d:b9:02:
                    51:af:4a:f1:a2:c4:99:84:78:a0:8b:42:f1:1a:1f:
                    da:dd:56:55:20:54:92:d2:66:77:09:e4:65:05:ff:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D8:4D:56:62:90:91:B8:63:6A:00:19:C8:06:16:EA:2D:D1:52:17
            X509v3 Authority Key Identifier:
                keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:cf:ce:16:38:f8:bd:35:39:03:71:8b:b0:9e:24:3d:6f:
         de:30:9a:e2:75:a7:c9:db:3b:9e:17:99:3f:94:bc:72:4e:10:
         4b:04:83:dc:ff:43:4e:ac:22:0d:9f:6c:92:36:4e:84:b8:1c:
         04:ed:1f:18:d2:9d:b9:78:67:63:a0:9d:ec:53:7f:93:c5:06:
         56:5c:b1:94:e4:50:02:f2:9f:17:16:66:30:91:a5:9c:0b:82:
         ca:b6:4a:9d:cb:b9:fb:22:11:19:9e:a2:c0:c8:b9:17:f5:55:
         b5:26:6d:7e:41:69:51:04:c2:80:3f:9e:fc:ca:ea:30:63:14:
         77:24:0d:bf:8a:62:b7:c6:a7:83:91:b6:7e:4b:08:8f:62:9c:
         12:cc:d9:5b:8c:be:8d:d4:f7:f6:f4:a2:b7:49:24:ec:21:22:
         82:e8:a7:bd:0a:de:54:91:4d:94:34:21:3e:6a:0f:57:d3:13:
         7e:0f:8a:9e:12:92:0a:f8:b2:58:1f:92:3e:12:8f:7b:43:ca:
         00:c1:2d:c5:f2:88:01:7f:9e:ee:d6:5a:85:a0:e1:0e:d2:12:
         b1:8f:a3:fd:14:a1:6c:78:9c:76:9c:d7:f5:f6:5b:eb:15:8f:
         75:5f:15:ca:0c:c7:7e:9b:e3:6c:20:f9:4c:2a:95:57:fc:cd:
         ca:29:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:09 2026 by rpki-client