Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File:                     xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier:          TNc28dxdbZkdsZW42uRg1Mt2LbasSSWMl+BmVZk0ZU4=
Subject key identifier:   7E:2F:7E:59:6D:22:31:07:88:0D:87:AC:62:34:43:76:D7:40:33:39
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer:       /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial:       019EC1492AA70C833954DD3A06ECB3A98D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number:          0A53
Signing time:             Sat 13 Jun 2026 14:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:58 +0000
Files and hashes:         1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
                          2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
                          3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: WSmU+PhtvzUaBuIKt2ZzL5JyqYqiXd+JJlXaefaFTQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:2a:a7:0c:83:39:54:dd:3a:06:ec:b3:a9:8d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
        Validity
            Not Before: Jun 13 14:00:58 2026 GMT
            Not After : Jun 14 14:00:58 2026 GMT
        Subject: CN=7e2f7e596d223107880d87ac62344376d7403339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:53:2c:2e:69:57:b6:02:c5:c1:e1:49:e8:e7:
                    e8:6d:aa:bd:0a:5f:8e:2a:00:f4:57:43:79:30:fe:
                    1c:a3:8a:33:be:d8:c8:6b:4c:04:e5:5c:28:59:38:
                    e4:b6:dd:15:62:a4:fc:fb:fa:9b:95:00:4e:7b:7e:
                    6b:bc:76:ab:00:3f:4a:d8:9c:1a:f0:fa:cc:ed:b8:
                    73:57:b5:c5:7a:5b:f1:59:73:26:d7:cf:a5:2b:37:
                    d9:7e:1b:cb:20:ec:2b:5a:c8:b4:89:13:30:6b:bf:
                    13:f4:7a:6c:02:2d:2f:a1:61:b7:fa:bb:11:61:fa:
                    27:73:de:4b:ff:fe:a8:63:3c:1d:8a:d2:f0:cf:14:
                    0d:22:83:6e:3b:82:ff:00:a3:b6:49:93:3c:ef:1c:
                    15:19:62:cc:6c:63:b4:c8:83:0a:7d:7b:8c:fd:39:
                    a2:d2:2a:cb:a4:ae:49:19:e2:d0:39:64:ae:e1:cb:
                    f9:9a:c0:3a:88:eb:78:36:99:63:c6:02:42:ab:0a:
                    cd:70:0a:22:ac:35:87:d2:75:bb:6a:98:19:e0:28:
                    54:42:7e:bf:7a:e8:32:02:bb:de:3c:91:cb:20:54:
                    78:c2:18:b2:76:84:50:71:56:ac:e3:00:8c:18:dc:
                    62:50:5d:dc:f8:e6:ec:04:84:0f:07:d4:7d:38:c0:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2F:7E:59:6D:22:31:07:88:0D:87:AC:62:34:43:76:D7:40:33:39
            X509v3 Authority Key Identifier:
                keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:00:c9:40:15:d3:87:5c:b2:47:02:49:21:ab:fc:65:2a:cd:
         76:ad:89:98:d1:01:fe:74:4d:79:d3:a4:57:b2:6f:01:0b:02:
         1c:9a:f1:e3:47:a2:67:a7:91:63:7a:3e:12:e2:32:e4:b3:e4:
         b1:90:7b:91:99:6f:6b:66:23:af:0c:44:d6:97:01:40:83:c1:
         e1:7a:ec:34:e8:8a:e3:ff:d7:b7:06:f9:c3:63:08:6c:14:a4:
         d2:92:3c:20:f6:c2:ad:0b:f0:20:d8:16:86:c6:54:26:7a:4a:
         00:28:c0:e6:19:63:a3:56:4e:13:a1:a1:64:7b:55:2d:b0:ca:
         55:d6:d3:a7:c9:ce:9c:d5:e3:40:ac:30:a6:7d:cd:f9:33:c0:
         fc:48:77:4c:90:92:07:0c:0f:d0:9c:b5:5c:a8:e8:7e:7c:86:
         fd:0f:93:cf:9b:1d:b6:72:0d:cf:30:88:35:4c:f9:9b:ac:43:
         85:6c:bc:a3:49:31:26:70:7a:76:05:5f:ac:40:cd:36:83:f2:
         41:54:36:fd:df:05:89:dd:06:21:23:e1:5a:a3:06:d2:fe:8f:
         55:9f:e7:2e:cb:f8:61:8e:b6:cc:44:ae:81:88:5d:cb:49:b1:
         8d:95:f1:c8:d4:86:29:d6:7a:5b:b8:de:7b:b6:7b:53:ac:a8:
         09:a2:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:48 2026 by rpki-client