Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          hk2OX4E/HdVNiQjN9fGxfBtwImTZ7ky/Kr0hsjoyog0=
Subject key identifier:   E6:3C:B0:85:97:FA:E9:94:7D:A6:8E:FF:12:C9:DE:27:84:64:C4:F8
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       019D984FFD434F6AC0FA6BB76AA0AAE684B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          083A
Signing time:             Thu 16 Apr 2026 22:01:12 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:12 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:12 +0000
Files and hashes:         1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
                          2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: Mp4VYApglSp7N5RWmaqDEtkdbQZxyfOqy3C55er82Ws=)
                          4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
                          5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:fd:43:4f:6a:c0:fa:6b:b7:6a:a0:aa:e6:84:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Apr 16 22:01:12 2026 GMT
            Not After : Apr 17 22:01:12 2026 GMT
        Subject: CN=e63cb08597fae9947da68eff12c9de278464c4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:1e:03:99:f0:4f:12:b8:3f:1d:2b:fc:b0:
                    1c:b4:44:ad:33:a9:37:5f:73:47:3c:dd:56:24:58:
                    f4:30:07:d3:a4:1c:67:8d:a6:35:f9:b6:81:c7:02:
                    40:8c:59:29:74:d6:f3:8e:42:b7:13:37:27:db:5d:
                    8b:6b:bd:b1:4a:8a:dd:72:fa:9e:5e:97:78:1e:0e:
                    0b:85:ca:a1:1c:ff:36:9b:a0:03:b8:09:ec:19:7f:
                    af:03:de:aa:cd:b0:fa:d9:ae:22:eb:1d:48:3e:32:
                    b5:3d:1f:81:a1:6c:30:e6:99:7c:ba:5c:7e:9a:2b:
                    2b:f5:e6:14:78:13:ff:4f:3f:4c:67:73:f0:7e:8f:
                    de:ed:42:d1:61:87:00:df:60:bf:68:bd:db:ae:6d:
                    b4:fd:c5:7d:72:8b:8d:2a:4b:1e:4d:82:aa:fd:4d:
                    7a:6d:2b:85:20:58:21:7f:25:01:fa:40:35:05:f4:
                    f2:7e:18:8d:51:7a:55:88:9a:db:a1:89:09:17:c3:
                    d6:66:91:98:4b:68:7e:80:0a:dd:f6:75:4c:54:86:
                    10:e8:90:48:01:8f:94:55:e3:d1:7e:c0:53:93:d3:
                    34:05:c3:c7:5e:1d:b2:2b:70:66:cf:e2:02:7c:7d:
                    08:e7:8d:da:c2:f6:34:f6:ba:b4:7c:74:00:3a:3c:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:B0:85:97:FA:E9:94:7D:A6:8E:FF:12:C9:DE:27:84:64:C4:F8
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:46:5f:e9:60:fd:42:32:95:b6:d6:78:34:0a:8f:d8:06:25:
         38:6e:63:db:dc:29:eb:04:11:4b:97:4a:31:a0:44:40:b3:b0:
         57:3d:1c:fa:e2:8e:dd:f3:8f:98:a2:3b:c6:e3:46:5e:57:3e:
         70:b2:4e:6d:00:04:77:9d:9a:90:7f:2d:54:fe:57:ce:ba:a7:
         e2:07:e2:83:30:47:48:fa:4b:e3:68:b9:b0:26:b5:b2:72:13:
         df:ce:15:e6:ec:01:a3:31:65:8d:f7:55:bb:68:77:aa:99:42:
         d5:1c:06:f5:77:a5:74:2f:f5:cc:a3:fb:51:e0:9e:d5:9c:bf:
         78:0b:00:a8:b9:18:99:3a:85:a2:12:34:cb:f0:35:15:4f:51:
         35:90:32:08:b1:cb:df:68:30:dd:d7:ba:8e:b7:29:e8:ee:71:
         25:42:fd:0f:d7:a9:4e:07:5f:f9:4c:ae:c9:f0:7d:e3:3e:a2:
         5a:88:78:ea:88:92:3d:91:54:0d:a4:10:c7:dd:ea:8f:71:25:
         04:6e:2d:08:03:16:87:cd:1e:e2:5f:d5:93:df:0a:c3:70:b9:
         47:38:c5:4b:06:b4:0f:38:a5:50:22:44:3e:35:76:a7:a2:4a:
         a3:9f:81:37:b0:94:3b:68:e4:c8:6b:f4:b2:03:ca:c5:75:13:
         40:68:f7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:06 2026 by rpki-client