Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          zlF/vAYVimHa0+TBJ7XT+AUHImVdAF/0CsVz/B1OMTQ=
Subject key identifier:   F5:06:20:64:F1:8A:99:2A:0F:1A:3C:33:A8:A2:24:78:C4:F5:3F:22
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       019EBFC86E2227BCFE1FE3DA1E377D5E8936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          0A23
Signing time:             Sat 13 Jun 2026 07:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:43 +0000
Files and hashes:         1: HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa (hash: a/gPxO3vEuqfCp70KpDQq2lcCKuUQZuTopPVCy8m4LA=)
                          2: PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa (hash: 7fFDeno1llfmG5xw2+UhwO2bFxAsVyxjb17vnpRCoYg=)
                          3: PfU-pIQUztpuCpjeK4PA6M387xY.roa (hash: IxKP4N/sSJx4IV1KMlr0VGqT7A6A6/R7M00aHJnoW/w=)
                          4: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: bx+2jsSZQvbYjd2yzczppdXDW2QbyY5qu9CfhkGYMJY=)
                          5: _BWqmK6mrfBuguQtqF75TBClGMs.roa (hash: uZ7P5xdR1guWm1uC7RQ3bBaQOHT/pKp/etCCjtf5eTs=)
                          6: mUrwLBSn-6OABt-a8CWyid9HQT0.roa (hash: QLR5JTAjIM5uhR1YB984cbq/Umms9s9InAJMrrGnnxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:6e:22:27:bc:fe:1f:e3:da:1e:37:7d:5e:89:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Jun 13 07:00:43 2026 GMT
            Not After : Jun 14 07:00:43 2026 GMT
        Subject: CN=f5062064f18a992a0f1a3c33a8a22478c4f53f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:65:65:e2:8f:5a:42:eb:af:9d:9e:15:7e:
                    42:99:23:f3:84:87:50:64:e9:ee:ba:ba:9b:12:0b:
                    f5:08:79:2d:21:cb:d8:e5:dc:36:98:6b:39:83:d4:
                    9b:0a:d7:b6:12:66:03:89:6a:c9:5c:84:89:d4:c9:
                    d5:b9:9f:37:48:2a:ef:90:45:1a:7e:30:8d:70:f5:
                    08:95:d1:4c:f1:a8:63:c8:bb:fd:49:9d:fb:27:d9:
                    0c:b5:a6:5e:d5:2c:63:6b:39:2a:81:b9:87:d1:10:
                    20:52:b0:58:24:ac:db:ad:48:c5:55:50:67:34:5b:
                    50:7d:32:87:3b:67:13:1c:09:b8:ca:a3:01:f7:3f:
                    11:0d:fc:73:ac:e9:d0:95:40:a5:f2:3c:84:2e:ac:
                    7a:b8:79:a1:54:f4:7f:f7:13:c9:a1:5b:78:fc:f1:
                    85:15:b8:7f:e2:58:7c:24:f0:34:89:db:e4:d2:8f:
                    b4:fd:37:5f:89:10:e1:54:6a:d4:a7:93:4b:5f:1c:
                    c5:18:19:37:98:80:d6:3f:1a:84:c2:86:5c:5d:95:
                    a4:89:ae:39:e1:eb:80:35:0d:64:cd:86:fc:0a:c8:
                    b5:05:4f:b9:34:05:87:08:5e:a3:1b:02:a6:82:69:
                    9b:22:f1:01:6b:7b:10:ce:5c:f9:1d:22:2c:e8:65:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:20:64:F1:8A:99:2A:0F:1A:3C:33:A8:A2:24:78:C4:F5:3F:22
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:73:d7:49:61:db:ae:46:e7:33:92:96:87:09:ab:1c:2d:
         bb:ad:7e:22:13:b7:62:51:c9:d7:79:c8:d2:ae:5a:86:dc:7f:
         1a:c7:6b:2e:bc:91:e1:1a:01:e4:3b:92:03:8d:25:39:d3:90:
         29:50:9f:86:7a:68:2a:11:e6:e5:53:00:94:67:12:f1:cd:47:
         12:df:f9:aa:77:9d:46:b7:c2:b3:d6:e7:04:f2:76:49:89:93:
         35:cf:63:59:52:1d:ce:5a:3a:94:eb:c0:3c:ae:33:d7:22:f2:
         b1:68:2b:92:c3:f3:a6:7f:b5:be:81:f7:1e:a2:d8:1a:4b:3b:
         56:ad:1d:b9:d6:d2:8c:7b:1a:d8:ab:05:12:e6:09:96:40:b7:
         91:24:4f:2e:be:85:7e:15:6d:70:45:8e:f6:d3:4c:a8:61:9c:
         5c:c9:ec:77:28:b6:40:2f:12:12:d5:b8:f9:20:e7:3a:ac:74:
         7e:64:37:0c:68:4b:51:a8:59:fe:b7:3f:e1:91:d9:69:93:2f:
         42:20:84:11:3d:7c:b8:47:09:c6:42:a9:65:8f:89:53:b4:87:
         00:25:0f:68:54:10:5a:f5:62:6c:aa:f5:e4:bd:6b:a5:1b:67:
         42:ff:60:b1:5f:44:89:c6:54:a8:24:30:f4:f0:d1:26:29:a6:
         3c:bb:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:51 2026 by rpki-client