Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File:                     XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier:          5icnOXCgvA6L+nCLDCz8CmB15gos5u64jW7VO6oVV44=
Subject key identifier:   EF:27:AB:0B:E6:C4:41:69:60:F6:5D:3A:12:36:1E:5D:C1:CA:18:3B
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer:       /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial:       019EBF5A523B7F0F282881CF507F23699189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 05:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:28 +0000
Files and hashes:         1: OS8EDWL74n3CtFxmTxNOolYhsvA.roa (hash: yF17P4v/AdaI5VNNKOl9FtUJuOAbQSvTKgj5Ha/kk7s=)
                          2: RrlPj_5PMLmauOZbV-XxFE0jClU.roa (hash: +JGjuqCo+HgEGZGs0mkuqnIL4NPJWqKMaUK/A5KXgqw=)
                          3: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: M5FPsV/g5Nj6YxK9gGygwDC89zL+TxKyutHcCpuw+4E=)
                          4: dL_9twvmgLzMs895oA64iiDmIEY.roa (hash: LgJcVms5Pq7JFZ8+OO+s5X+XVI8uKF8XIm98bwsR7Lk=)
                          5: dqfLmPoWYDgnN63zfumMSmq4Qs4.asa (hash: VP2elBPNAsWST4m//JgRDzv1id8AdOzpooWBKdSTZ3M=)
                          6: m_016GliLd1us5Dyp3gWd_9XmZU.roa (hash: NGfX/rkS6vQZZNfEtGY8uwL12Vk9X/AaXVk/NGit2hQ=)
                          7: wEd_ihwz_Sc9Z7253Egu-wb4rYs.roa (hash: JaUYZqefug6H01TWJts1HEcFIA5lKpx4F7+av5F+33Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:52:3b:7f:0f:28:28:81:cf:50:7f:23:69:91:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
        Validity
            Not Before: Jun 13 05:00:28 2026 GMT
            Not After : Jun 14 05:00:28 2026 GMT
        Subject: CN=ef27ab0be6c4416960f65d3a12361e5dc1ca183b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:24:26:62:72:e5:23:83:dd:fe:dd:31:89:2a:
                    e0:49:71:59:2e:c3:55:fc:3e:26:02:9f:ca:c9:1f:
                    9d:ee:5d:0f:e8:84:e2:79:df:3d:a8:a8:a4:37:76:
                    79:55:ec:12:44:0e:1c:9e:e2:bc:8b:ee:81:c5:f2:
                    1e:07:3d:f9:e1:70:13:97:2e:48:82:f1:3b:27:76:
                    fd:1b:b0:eb:8a:8b:32:3c:6a:0a:4d:54:05:76:a9:
                    d3:1f:52:ae:90:76:7e:57:bf:b5:3a:8a:8f:f0:29:
                    13:94:a9:9c:aa:a6:3e:bf:4e:c2:07:06:29:eb:fb:
                    0f:29:55:fc:84:fc:bb:77:9a:64:7e:be:6e:92:e3:
                    16:5d:0d:a1:60:67:ac:ce:8c:ef:50:34:c7:9c:bb:
                    2e:c7:b9:ec:25:e3:28:96:53:84:ae:ea:0b:dd:2a:
                    8d:c0:98:23:80:83:9d:bb:fe:32:77:67:81:2a:c7:
                    42:b8:7a:63:24:75:27:83:85:96:8b:23:d3:64:27:
                    7a:40:ab:d4:1a:5e:eb:1e:ad:e2:1f:e3:4b:9f:21:
                    77:e8:10:fb:d1:fd:16:bc:d8:9b:84:59:57:52:bc:
                    21:df:b8:ae:92:10:f5:55:e7:58:e6:66:68:91:1c:
                    ae:f2:83:f8:5d:42:8e:03:df:d6:e5:90:f7:c0:d9:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:AB:0B:E6:C4:41:69:60:F6:5D:3A:12:36:1E:5D:C1:CA:18:3B
            X509v3 Authority Key Identifier:
                keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a5:91:c3:78:5f:8a:05:94:29:7a:ce:07:b5:f9:fa:a0:dd:
         6f:47:0f:7c:23:12:1c:93:b4:e2:0c:51:bd:a4:64:29:87:69:
         93:60:4b:93:ad:52:15:2e:da:68:d4:6f:2d:8c:4d:e6:98:17:
         96:1f:fd:52:36:88:13:1c:54:4f:e9:ad:fc:a9:b8:0e:5a:10:
         f5:ac:e3:9b:e4:9a:1d:c7:d9:20:8f:ae:af:90:3c:94:ae:83:
         de:4a:31:8d:b9:2c:17:fa:bb:19:fa:26:2b:18:b4:29:4e:90:
         d7:72:eb:86:91:49:8e:de:3c:23:91:a2:b8:e6:0e:5c:94:df:
         15:0c:ff:67:8c:fe:b0:f6:c8:be:14:af:6e:73:71:fb:63:29:
         57:e5:85:ab:ac:c0:36:6e:5b:0d:17:0f:04:d5:91:2a:78:33:
         c7:11:28:35:84:02:6a:01:bb:eb:cb:bc:ee:b7:73:59:4e:d4:
         a0:52:56:b5:4a:6b:a6:ff:b9:15:6f:56:e1:12:fe:0c:df:ff:
         f2:f3:a0:04:22:e5:4a:5d:a0:40:9f:ae:32:35:63:e2:a0:af:
         f9:e4:fb:62:f6:f2:95:e9:7c:7e:df:04:31:4d:c5:77:dd:cb:
         70:25:83:f9:ca:dc:05:9c:29:9e:fd:a3:db:3a:7c:b8:3e:74:
         c7:c7:33:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:16 2026 by rpki-client