Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File:                     RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier:          VHTgvp3hSy5ldGTwUzrxqI6TQo/aAyVCMxI+dUmLsw0=
Subject key identifier:   15:02:0E:C4:36:4F:61:60:DC:DA:FA:C8:16:3D:B6:81:43:CC:FA:28
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer:       /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial:       019EC1B754A0F0402B08C5D72FAFF1B697B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number:          0C2A
Signing time:             Sat 13 Jun 2026 16:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:17 +0000
Files and hashes:         1: 42mOJ3kHdwuFCzoSOI3N3ulVxfY.roa (hash: eqCYV3DSa0ilBw3MnAd/50LEsSGMdE5H8gvqRFLf8cs=)
                          2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: uFMtz3mND7balwiYmNMxTzatDgzIHl9CYe2lSUzYpt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:54:a0:f0:40:2b:08:c5:d7:2f:af:f1:b6:97:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
        Validity
            Not Before: Jun 13 16:01:17 2026 GMT
            Not After : Jun 14 16:01:17 2026 GMT
        Subject: CN=15020ec4364f6160dcdafac8163db68143ccfa28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:17:7c:21:4e:97:0a:e0:88:a5:37:b2:80:
                    3e:a7:f7:b0:19:04:1e:76:6f:61:ff:f7:54:45:0a:
                    93:e7:5b:77:36:11:24:0c:f7:53:ae:7b:51:94:79:
                    e0:d3:4b:06:7a:4b:38:5f:49:ec:5c:d1:8d:43:c0:
                    d6:61:53:a1:95:06:04:1d:12:18:fd:79:5e:66:89:
                    44:38:60:20:ca:93:96:11:1e:59:f2:11:6b:9b:db:
                    a3:73:ed:b1:5e:93:bf:75:f7:df:c5:97:71:9c:1e:
                    2a:1e:ba:53:45:9f:63:7f:5b:e4:d2:77:80:8b:f1:
                    56:91:d4:47:eb:fe:6f:0f:33:42:6e:c2:8b:7b:72:
                    6b:ab:5b:9b:6f:99:54:ae:83:53:53:17:15:ab:a9:
                    55:69:ee:18:a2:f8:ed:44:28:e0:c1:9f:1f:65:76:
                    a5:50:ec:3b:94:01:ed:28:d6:e8:bf:71:cc:d6:3d:
                    c4:c2:88:53:c7:7f:53:e3:b6:01:1c:cf:e6:28:61:
                    96:de:35:0e:3e:05:47:e9:e2:92:25:dd:e8:51:e7:
                    0a:d3:8e:8a:73:78:08:09:d2:f8:36:bf:f8:d6:5a:
                    54:d2:15:34:8e:a2:dc:5e:9e:16:de:3d:75:1a:a3:
                    a2:90:e0:43:68:c6:09:9f:5a:34:9d:f6:b3:64:ef:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:02:0E:C4:36:4F:61:60:DC:DA:FA:C8:16:3D:B6:81:43:CC:FA:28
            X509v3 Authority Key Identifier:
                keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:76:3f:f2:f1:22:ee:93:93:04:d2:30:22:a3:d2:4d:6d:
         79:08:12:4b:37:09:ba:c9:32:c9:5e:1a:e9:47:fe:b8:18:e1:
         09:09:68:ca:40:82:47:84:af:ae:35:e2:12:19:70:3e:41:fd:
         32:f0:c1:8d:c0:dc:0b:21:1c:20:c3:7d:0d:3e:87:4e:24:4a:
         58:43:7a:5b:80:e5:36:81:fa:04:c2:55:06:4e:be:3c:d3:e4:
         3f:9d:7f:a1:9d:db:82:f3:ff:de:b6:bf:e1:c4:2d:3d:3e:50:
         8f:78:67:67:56:6c:10:58:d4:f9:03:05:80:56:68:95:8d:81:
         10:4a:d3:c6:86:38:2d:62:db:c5:aa:62:14:87:70:75:f3:3b:
         26:8f:1a:fd:1b:14:4c:87:ad:35:70:bc:d3:27:98:e4:e9:4e:
         4d:93:c9:44:d5:0c:c2:93:7e:3f:3a:f7:8a:c9:c3:21:c1:8d:
         e1:cc:c4:38:82:f6:26:f7:e0:80:d7:8b:11:8a:fa:d0:76:b9:
         80:08:2b:f3:b7:61:fa:80:af:d1:62:51:93:cd:2d:d9:d7:9e:
         be:56:c7:69:06:25:a0:00:b0:d2:61:bc:d1:aa:eb:92:14:42:
         15:e5:86:c1:52:52:ef:a8:4e:35:8b:c9:00:51:88:52:c4:19:
         b2:4d:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:00 2026 by rpki-client