Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File:                     XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier:          vOpCp4U949YTep2q3qmyoQHXCjkC8SQmQ1B1cRXq5RY=
Subject key identifier:   2C:FB:34:39:1A:5A:2B:A1:FB:98:3D:25:99:65:43:A0:5B:D6:7A:A9
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer:       /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial:       019EC2C9911F827CC1FA785132D623963063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number:          1593
Signing time:             Sat 13 Jun 2026 21:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:50 +0000
Files and hashes:         1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
                          2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
                          3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: z0MBWZ84P0ELYl5AusjUuK7+5LGAniBYMiNaAxu8k04=)
                          4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:91:1f:82:7c:c1:fa:78:51:32:d6:23:96:30:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
        Validity
            Not Before: Jun 13 21:00:50 2026 GMT
            Not After : Jun 14 21:00:50 2026 GMT
        Subject: CN=2cfb34391a5a2ba1fb983d25996543a05bd67aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:28:7b:13:d8:00:c1:60:5d:45:15:fb:6d:
                    22:1a:5b:4e:90:0b:5b:f1:aa:7d:04:a5:5b:e4:a6:
                    0c:9a:fb:21:66:4e:40:18:22:25:1b:80:48:31:a4:
                    f1:66:b4:69:e0:0e:4a:39:fd:4f:aa:19:3d:cf:6a:
                    cc:85:da:0a:fd:82:f2:3a:0e:d0:f3:56:6d:09:e7:
                    da:77:c9:42:ba:09:bf:92:72:88:52:60:c1:27:40:
                    1f:a9:5f:e8:6e:d4:b3:16:1c:ca:ee:1b:2f:74:78:
                    78:7f:a2:8f:86:fd:85:2e:db:39:9c:18:4e:01:43:
                    09:53:76:04:b6:86:72:47:14:4d:e6:33:13:b8:14:
                    cf:2d:07:3d:69:22:99:9f:d4:88:fc:c6:62:3e:d9:
                    a7:c9:94:47:d4:a9:6b:7e:13:7f:a5:d5:15:62:f5:
                    a9:16:dd:52:f8:cc:11:5a:98:6e:f1:f1:32:1e:ba:
                    bb:b1:3f:8b:14:fd:cc:08:00:2c:72:06:88:c6:f7:
                    c9:9c:49:d2:4f:9c:78:ce:52:54:5f:a6:d9:eb:0d:
                    18:70:4c:0c:78:77:03:bc:99:b9:cc:2a:88:58:3f:
                    c6:d1:f1:8b:4d:15:9b:91:b0:cb:d3:e5:b9:5a:77:
                    66:37:f6:41:f8:21:94:40:c6:66:c6:44:98:90:27:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FB:34:39:1A:5A:2B:A1:FB:98:3D:25:99:65:43:A0:5B:D6:7A:A9
            X509v3 Authority Key Identifier:
                keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:77:6f:33:bc:93:87:68:38:63:58:4a:8f:4e:97:cd:b1:c5:
         cf:87:83:6d:5e:19:30:22:b1:a7:ee:ef:3c:53:48:b4:a5:ed:
         dc:bb:28:20:12:74:a4:f9:f6:c4:d3:77:a0:e4:ca:58:79:d1:
         d1:18:af:3d:44:a5:d6:90:89:ee:87:7a:b7:bf:ab:56:97:4d:
         c8:31:a8:e9:10:a9:bf:1c:cf:48:ea:8b:6e:75:7c:6e:37:3c:
         37:1d:18:7d:dd:7b:17:d6:77:93:8b:a4:b3:8d:cf:ec:94:de:
         7f:73:7e:ca:23:8b:6f:be:83:fe:26:af:60:6a:19:b7:9e:7e:
         01:50:ff:23:6a:79:ed:f2:26:99:d9:e2:5e:34:34:e0:05:bd:
         f3:ce:02:4c:af:ab:aa:75:56:90:6b:e6:03:c3:fc:14:e2:a9:
         95:e4:3f:71:06:03:43:1f:cf:9c:83:0c:f3:a8:ad:ae:6c:d3:
         cd:a1:9e:ea:4c:08:2a:c9:8e:64:75:e5:c7:6c:3d:c5:bf:9b:
         76:b2:71:07:8d:72:29:3f:a8:84:85:4a:82:c0:b2:fb:7f:b4:
         e9:1e:19:e1:26:6c:f8:fa:79:06:3c:c0:db:ee:8d:7d:90:32:
         e1:61:0c:4b:76:6f:e4:04:1f:08:13:ee:c9:ad:37:32:3c:37:
         c8:fc:52:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:55:34 2026 by rpki-client