Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          biZ7CUXj4uF2UYa0Nse8C1ip9YgALmzPBlj/vAp4D0Y=
Subject key identifier:   6E:B0:8A:B4:5E:B3:FC:D2:0C:0A:C4:C4:3D:EA:8B:1B:0A:88:7F:4C
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       019D9818ADE64E95B6754EF9F1A706F39672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          17D6
Signing time:             Thu 16 Apr 2026 21:00:47 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:47 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:47 +0000
Files and hashes:         1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
                          2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
                          3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
                          4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: VPrcvpYMGXg9Y5LIHKT8V4ZqPw4Hp6Fd7dIMYRi34H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:ad:e6:4e:95:b6:75:4e:f9:f1:a7:06:f3:96:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Apr 16 21:00:47 2026 GMT
            Not After : Apr 17 21:00:47 2026 GMT
        Subject: CN=6eb08ab45eb3fcd20c0ac4c43dea8b1b0a887f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:3f:89:a8:0c:fd:3c:4f:4a:9b:44:a6:5c:
                    1c:db:10:38:59:19:12:05:84:95:4a:ce:d5:6d:a1:
                    27:b2:d7:b1:a2:a8:64:79:2e:95:e4:48:f4:4c:b0:
                    c1:61:ba:48:ec:2b:0c:6a:8c:ab:ae:f4:2e:cf:bf:
                    80:17:23:3c:75:8f:e9:87:97:85:4a:09:6d:1d:6b:
                    c3:53:11:9d:f1:11:03:87:f0:79:74:14:4e:63:b1:
                    20:59:04:aa:8d:57:4b:f8:38:54:e2:44:76:5e:67:
                    25:f5:4f:f4:56:c4:e9:65:d7:f6:0f:c5:c7:df:07:
                    9a:c5:84:31:fa:40:77:94:b8:30:15:77:13:8d:47:
                    8d:5e:e6:94:62:8d:89:ed:9d:55:67:23:08:99:f0:
                    01:5d:b5:ea:97:5f:62:13:bd:c1:de:25:ac:ca:94:
                    71:3e:d0:f1:8f:3c:1f:f4:8b:a1:95:1e:63:e3:0d:
                    c0:cf:61:88:c9:b5:ec:04:5b:b4:77:15:4f:07:49:
                    8f:bf:3f:31:d1:9a:30:63:be:7f:f9:92:93:2e:f0:
                    76:c3:05:41:52:3f:0b:cd:99:d1:95:89:99:ed:33:
                    7d:97:e0:a8:3b:47:09:b1:06:34:a4:c5:80:ba:ad:
                    7d:69:9d:69:fb:98:34:91:93:78:4a:3b:3b:15:ae:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B0:8A:B4:5E:B3:FC:D2:0C:0A:C4:C4:3D:EA:8B:1B:0A:88:7F:4C
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:98:5b:68:92:36:1f:02:88:d2:bf:4c:9c:6e:d1:a9:42:ba:
         3a:30:8e:78:c0:9f:6a:9a:74:f5:eb:0b:c7:7e:34:7f:ee:fb:
         09:fc:8d:d6:fb:73:03:3a:41:71:fc:55:6a:76:7a:bb:f7:d8:
         38:cd:f5:4e:65:be:5b:c8:2c:45:5e:de:b8:22:d5:23:9c:c2:
         d3:3f:c1:f6:bd:de:88:34:9e:b7:f6:3e:e4:ea:3d:fa:0c:ec:
         c0:ae:44:84:d7:06:e0:c8:8c:f9:fd:c5:dc:27:44:f9:95:5a:
         c6:11:b8:92:1c:39:4e:b0:a2:f0:fa:a8:f8:1d:09:c1:97:3d:
         cb:e2:ff:b9:af:1f:39:92:57:01:a4:0a:30:d2:17:c6:8a:73:
         a0:ce:13:d3:2d:ce:64:73:5c:dc:3f:b9:a9:89:84:2b:40:e6:
         fc:97:af:7c:39:1b:90:2e:d4:03:3a:59:2b:44:d2:79:b0:7b:
         73:f8:fb:88:24:6a:8a:59:26:76:59:bb:d1:31:20:75:2c:f8:
         ff:0f:0f:28:5b:4e:c4:bd:3f:b9:28:2b:bc:2f:8c:10:16:69:
         ca:48:21:07:d5:83:85:b1:1f:a0:c6:57:3c:47:e2:49:97:dc:
         e0:31:2f:09:1a:9e:62:6c:90:47:5d:e1:ac:ce:88:22:95:da:
         d7:12:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:26 2026 by rpki-client