Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File:                     XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier:          gU9aTxAjY1HlT19Jg54gzoZRgo1iIJlwEUS0fC1/9O0=
Subject key identifier:   51:A6:D3:32:CF:7A:CA:ED:75:48:1C:10:C7:66:52:17:F4:F9:EA:55
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer:       /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial:       019EC292B9A4169396B4883A8619703C2016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number:          185A
Signing time:             Sat 13 Jun 2026 20:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:56 +0000
Files and hashes:         1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: SGLTIUvev05b1sxGeQ4xKMHEpBHyFpz4+jxqg8xhE2o=)
                          2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:b9:a4:16:93:96:b4:88:3a:86:19:70:3c:20:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
        Validity
            Not Before: Jun 13 20:00:56 2026 GMT
            Not After : Jun 14 20:00:56 2026 GMT
        Subject: CN=51a6d332cf7acaed75481c10c7665217f4f9ea55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:23:e5:c0:f9:31:29:57:63:79:ed:4f:1a:a5:
                    ff:e0:d8:c1:21:84:75:ec:5f:e9:09:c3:ce:bd:65:
                    8b:d4:c9:9d:a2:64:03:21:a8:5b:9c:ea:d7:f8:01:
                    80:91:e7:ac:7c:d9:25:0e:ce:6c:39:c5:c9:6a:55:
                    97:21:fc:f6:1f:b7:7a:3b:a2:56:53:10:17:c6:3f:
                    fe:9f:8d:1f:93:4d:88:e1:d4:ef:63:2b:52:0d:68:
                    9c:7f:f8:48:81:a8:b7:82:17:76:03:5c:1d:6f:f2:
                    81:1c:30:62:95:28:5c:34:48:d8:4e:32:3e:c5:b1:
                    f7:0e:e1:f6:08:93:0d:63:9a:2e:69:58:2d:82:25:
                    51:fe:de:4f:b8:0a:c8:cf:f8:de:51:52:bc:ed:d7:
                    db:c0:56:b1:99:f9:66:cf:d8:2b:e3:ce:1e:cd:01:
                    63:42:aa:b8:a2:a9:b1:25:6f:73:2e:30:b4:f8:fc:
                    ee:11:f0:11:81:d5:60:ee:96:3f:1a:a4:48:ae:8f:
                    5b:6a:99:2e:01:24:96:8d:14:b7:74:4b:c7:88:49:
                    a6:20:6e:1d:b0:6d:e8:53:b8:6a:fd:78:7d:b8:6d:
                    25:00:5c:5f:57:cd:e0:95:ac:bb:4c:e2:cd:90:e5:
                    7a:ae:44:b4:c4:41:47:06:fd:d3:cb:84:c4:8e:c8:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:D3:32:CF:7A:CA:ED:75:48:1C:10:C7:66:52:17:F4:F9:EA:55
            X509v3 Authority Key Identifier:
                keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:6e:45:07:9c:0d:19:75:53:98:68:87:d9:9c:15:9a:01:
         66:ee:59:62:15:59:aa:96:fa:31:47:e5:e8:c8:92:d7:2c:ee:
         b7:32:48:c5:11:f5:65:72:74:5e:b9:3e:78:00:87:9a:c3:1d:
         9c:6a:bb:61:b7:17:72:3a:ec:5f:72:67:0e:0a:6e:99:9a:0b:
         de:30:b0:92:cf:36:75:43:a9:0b:8c:1b:28:f7:93:57:56:1f:
         1b:e2:f1:d5:49:76:b1:87:bb:e0:7f:da:69:0e:d7:7d:04:a6:
         09:ba:2c:20:a2:01:80:a3:00:64:10:c9:2d:f6:10:8a:6b:07:
         e2:26:6d:7f:c7:2e:d2:f5:86:c8:9b:cb:0a:38:e5:5b:09:0e:
         bd:1f:0c:86:b9:e9:a5:cc:7e:d2:b6:04:6b:fd:fb:ec:b7:fb:
         2c:b0:65:97:e4:05:68:13:27:94:af:1a:ff:93:81:9b:64:b7:
         c6:dc:de:6d:12:df:a8:26:46:52:f5:41:0c:19:77:82:3f:65:
         ef:dd:49:68:65:41:b3:d1:93:4b:10:be:53:79:ac:86:44:83:
         df:68:94:c2:aa:41:96:95:3b:6e:86:86:44:08:6e:92:12:2c:
         af:7d:d5:19:ea:49:df:6e:4b:96:1c:db:8f:20:2e:62:9a:50:
         22:ec:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:16 2026 by rpki-client