Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          /tnd8ucALXR7g5OE8qPqawbUdbTYQpckSRc7S+XLknw=
Subject key identifier:   27:EB:0D:44:93:C1:1C:28:68:D1:16:91:7F:E3:93:DD:63:F8:F2:5B
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019D9C634C996111D94E3D91354F416873AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          0532
Signing time:             Fri 17 Apr 2026 17:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:46 +0000
Files and hashes:         1: 13lETM7dYwgkukJoWApUFl8dJuI.roa (hash: cZO0/GICe69R1nGUBraIiKZbW7afS/3775vhW3rYR+4=)
                          2: EMqpNBcCNtehXNjtWHmz4Qx27pk.roa (hash: 8njOTJ/2VGv+q8vvCxeqjLAb7iHXNWrxTs90DA1iMqI=)
                          3: KVEesZy60JcmrCD9X0Zw8ckitl8.roa (hash: LDsra63f6peITAW/vE5Lx25+kAf2+irA29kJov0WXy0=)
                          4: Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa (hash: wkeGlAvS62MwRHYU8Z+cHP5CIoQV+KvyovxR/4O84h0=)
                          5: dYPKia158SIrrNF4l9j5f3SItUA.roa (hash: /mvbSwmPXlWJfBXD/fmkRZb24RyV5+E4SIG3bbAtRas=)
                          6: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: 9TRBZRX3fEXgZOHozdHOq9mehGeF3JvEBNIT0GXOCD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:4c:99:61:11:d9:4e:3d:91:35:4f:41:68:73:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Apr 17 17:00:46 2026 GMT
            Not After : Apr 18 17:00:46 2026 GMT
        Subject: CN=27eb0d4493c11c2868d116917fe393dd63f8f25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:ed:f3:8e:45:ac:f1:b0:cb:f1:6f:6a:0d:
                    ea:7f:a2:d7:01:07:c9:e3:9a:ad:23:dd:4a:0f:33:
                    72:c4:a2:0d:75:54:e1:e8:af:a3:e4:ff:ce:5f:69:
                    54:e0:39:8a:94:3e:c0:64:a0:b3:3c:46:35:1f:85:
                    be:53:03:90:28:06:56:19:7c:56:c9:61:b2:76:91:
                    86:cc:6f:5f:c9:ea:af:e0:36:49:4c:b4:02:fd:7e:
                    d7:77:3e:25:fb:15:17:9b:4c:01:12:fe:82:32:77:
                    7b:a7:0c:1e:c0:c1:7c:6d:1c:d7:0f:bc:8c:d0:37:
                    86:12:9b:f1:30:c9:c7:65:a9:73:7d:6d:da:1e:1c:
                    77:63:df:bb:49:d5:fa:1f:ca:29:f9:bd:e7:97:7a:
                    02:3f:6a:64:50:db:f6:43:20:0e:bc:66:7f:a0:5e:
                    d3:1e:28:03:72:58:10:87:b8:90:ae:64:b5:73:b8:
                    e4:9b:cf:61:b3:87:80:d2:38:52:35:b0:23:d3:c3:
                    a0:5b:76:7e:15:1d:24:c3:7a:66:48:3b:94:51:d5:
                    29:e1:85:c9:f6:ec:46:d5:35:db:be:6b:39:27:72:
                    a1:11:b3:24:dd:75:ad:d0:a9:49:b4:22:a0:5b:37:
                    71:fb:67:cd:4f:4b:b8:73:d3:e0:96:b7:bb:ba:e1:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:0D:44:93:C1:1C:28:68:D1:16:91:7F:E3:93:DD:63:F8:F2:5B
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:08:f4:18:28:13:f0:f2:36:dc:ec:6a:2d:dc:a8:47:f1:02:
         25:ad:aa:4d:ff:62:5d:18:2f:41:20:e8:31:b6:ee:96:e3:b9:
         98:39:12:f8:03:8b:9e:b5:28:63:a7:43:d7:3f:6a:0d:58:55:
         cf:78:69:23:fc:63:73:7b:49:15:5c:7e:2f:37:06:f8:fd:66:
         94:45:53:ff:98:32:2f:7e:fe:16:9a:ca:cc:5f:33:54:d3:3f:
         42:fb:19:27:d1:d4:cf:d3:b4:72:41:90:60:ae:5b:28:da:33:
         72:89:f8:06:6a:dc:69:cd:c8:10:9a:df:69:94:77:f6:d7:ba:
         ce:85:53:91:82:a1:ea:bf:c0:0a:32:bb:b3:74:90:6d:76:e5:
         df:12:8e:f9:69:b3:6d:12:27:4c:b4:61:c5:9c:61:56:b3:a3:
         42:13:6b:ac:74:df:fa:fb:f9:75:10:ae:29:e7:4d:ee:ea:20:
         82:44:92:ff:7a:5d:65:83:aa:81:22:aa:30:11:7e:a4:12:89:
         38:d3:31:df:61:53:df:15:6e:a1:af:f6:a4:10:1b:d7:e8:3f:
         ab:e6:9b:8f:cf:76:ee:96:3e:7c:9b:30:a8:c4:bc:96:ed:bc:
         3e:76:bd:c3:9c:7f:ca:75:35:8f:81:c7:be:de:81:ef:52:d8:
         f4:54:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:47 2026 by rpki-client