Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File:                     Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier:          9yvWkQQHiLwwh/YIuTTV4z49WlxgazJDD5Mz0cHCImA=
Subject key identifier:   FF:38:5B:00:51:F2:A3:58:8D:1E:E8:41:78:86:F8:F1:5C:01:43:98
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer:       /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial:       019EC2C93FC5E3A3B7F8BD4C4762B3CF73F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number:          196B
Signing time:             Sat 13 Jun 2026 21:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:29 +0000
Files and hashes:         1: 0K2pCDlU0pkDvqWKO7SJxoZ3lsI.roa (hash: Y26TNiFt+U9/ZCJnbcaya/o2zut2SxPMMS0KeeLWubY=)
                          2: 5bVrHFZm_9x7DsR30S7rosICdW0.roa (hash: TNCtAJMUf4J6FJnN+i2bTj70aWZ+c3ls9gu8xyrRaB4=)
                          3: 8TPtZKGHLyqyReIreFs57yVFsKA.roa (hash: D+eSUJ+aRsRRqv7Odn+lQ33QLJZuk7A07Qba8y0stiE=)
                          4: 8hvOqdm8XRO6sXWDZkcaHc49vsM.roa (hash: rWJpUZIpb36Ggr6bjwKyRkuAjSB5QQdFYyzRQ+KUdsA=)
                          5: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: rnv0kA1BO4iFgchRfJyXQ+EVyMJmbRHabQ+IFnqaMSE=)
                          6: _ylley7uO-q2SakQqri2IL9Vh_8.roa (hash: 1WOpzM1HXCxDoeeqL/oavgXUUoldzw84YoaeeKakTR4=)
                          7: fFzk5cKxt8SVRD4CpuEpqRTkCus.roa (hash: TsRhx9ef8e8wT+fG2UvsQ8gwg6pDgyIQobLuuWXWPak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:3f:c5:e3:a3:b7:f8:bd:4c:47:62:b3:cf:73:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
        Validity
            Not Before: Jun 13 21:00:29 2026 GMT
            Not After : Jun 14 21:00:29 2026 GMT
        Subject: CN=ff385b0051f2a3588d1ee8417886f8f15c014398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2e:a3:1b:21:e5:1f:6b:12:e5:ca:37:f9:1a:
                    5f:26:de:c9:dc:47:c5:da:28:41:f7:f0:7c:ec:fc:
                    b4:28:fb:cd:81:5f:19:03:5e:59:fd:70:93:24:1a:
                    b9:1c:ec:71:31:c9:a6:70:f3:74:b1:6c:03:f2:32:
                    f3:9b:f8:d9:10:8b:2c:c3:0a:ef:1c:e4:b4:52:e0:
                    6c:5a:eb:9f:9c:da:7f:32:10:08:dd:ed:ac:04:48:
                    47:dc:3d:76:ce:97:4c:a7:6a:65:19:f0:e8:fa:ff:
                    f3:81:b0:e1:a8:9f:ff:a6:fb:ef:2b:f5:ff:61:43:
                    06:8c:02:e2:f7:50:94:7c:6f:61:d3:35:15:24:a6:
                    46:52:88:8c:6b:54:a4:92:ad:f0:0a:30:59:9e:41:
                    31:89:39:80:2b:61:f9:88:fd:cc:68:1e:34:60:f8:
                    27:00:e3:c6:e7:ca:51:a2:96:dc:91:da:85:ce:8b:
                    66:c3:7a:81:d8:b9:33:26:f6:c9:b1:25:e1:33:35:
                    1e:92:a7:1e:d1:28:95:b6:a0:10:a8:5e:00:a8:c6:
                    4c:55:6a:20:a7:12:09:98:6c:6e:e3:ee:30:4c:6f:
                    46:a2:4b:9b:58:43:21:13:4f:e1:f5:1d:ad:b5:bd:
                    33:64:fb:7f:0d:77:bf:cf:85:06:72:d4:05:38:19:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:38:5B:00:51:F2:A3:58:8D:1E:E8:41:78:86:F8:F1:5C:01:43:98
            X509v3 Authority Key Identifier:
                keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ae:44:dd:15:14:90:cf:c0:97:e2:a9:e9:f7:d4:18:d5:c7:
         63:75:c6:92:6a:92:3d:16:d0:6a:5c:4f:cc:a9:f5:34:ae:3d:
         0d:1f:ee:ea:c8:a2:ca:dd:27:07:ed:d2:92:ef:59:f7:92:ff:
         6f:46:c9:cf:f9:49:dc:61:4d:4a:eb:13:01:70:ae:f6:0a:65:
         5f:9c:d7:ac:d3:26:ab:e4:ba:96:4c:c7:a0:8a:d3:8e:7d:0d:
         59:a0:80:1b:8c:66:37:b8:5f:74:cc:e1:cb:41:dd:6c:2e:89:
         47:1f:0a:76:23:f3:35:7b:fd:25:7c:45:02:6f:ef:d5:b2:14:
         22:97:b2:3b:0f:05:01:a2:55:37:07:12:0a:c3:6d:58:3a:77:
         23:a9:c2:c5:d6:34:75:b0:74:b1:15:e8:87:af:f3:10:d2:8e:
         94:8d:bf:9d:78:da:15:60:d8:49:87:37:11:48:7a:24:b9:0e:
         6f:54:79:4a:9d:18:db:fb:b6:0f:57:1d:a3:1b:44:fe:93:fa:
         5b:81:77:73:65:c2:88:03:3b:ff:bf:5b:df:61:a4:c3:61:e5:
         fc:ad:17:34:4c:3e:6c:d7:b8:09:6c:ed:67:05:5a:55:64:e9:
         b5:10:1a:90:79:07:19:68:67:ff:9f:6b:d5:99:bf:b8:77:ec:
         e7:25:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:51 2026 by rpki-client