Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File:                     XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier:          Ed/qDmtA33zpgjTO6juRhDMRfjnmP445CwBUBEDY2VY=
Subject key identifier:   31:B4:91:2D:2E:20:6F:FC:7B:A2:FB:09:E4:41:D8:25:51:CE:F4:71
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer:       /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial:       019EBE7FEAE47A67E621C9D7210AA851070C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number:          0458
Signing time:             Sat 13 Jun 2026 01:01:54 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:54 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:54 +0000
Files and hashes:         1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
                          2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
                          3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
                          4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
                          5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: nS/qKGRjRJqLWLJ1d2/UWvMHLMd5k80vDCh7d9NHUC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:ea:e4:7a:67:e6:21:c9:d7:21:0a:a8:51:07:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
        Validity
            Not Before: Jun 13 01:01:54 2026 GMT
            Not After : Jun 14 01:01:54 2026 GMT
        Subject: CN=31b4912d2e206ffc7ba2fb09e441d82551cef471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:03:cc:62:65:39:6c:e0:8c:fa:00:ce:f7:
                    71:55:99:e1:97:d6:3f:25:cf:a6:22:1f:b4:ba:17:
                    90:2c:dd:e0:21:40:b6:25:e9:72:58:13:0f:14:86:
                    cb:ef:0e:80:68:87:40:e2:6b:cf:a8:24:95:b0:cc:
                    f1:6c:ac:46:c0:1c:c2:2f:a5:9a:84:e1:d8:c6:5e:
                    80:cd:61:68:97:a2:05:52:d1:0f:79:83:53:b3:c8:
                    7e:0e:0e:c6:db:bf:68:93:2d:75:c3:28:c2:35:fd:
                    b3:30:4a:de:da:5f:c0:b9:d2:4a:ed:51:04:02:f5:
                    79:81:04:38:6d:26:19:34:f8:10:32:5b:33:f0:e0:
                    db:e3:de:37:bd:aa:22:fa:98:c0:60:57:71:c3:32:
                    5a:f5:cc:19:ea:e5:0f:aa:49:bf:ac:02:4d:fb:a7:
                    e8:e8:42:c2:fe:86:25:b3:40:3a:bd:be:5e:47:1a:
                    5f:1a:71:28:fb:1a:e4:fa:b3:60:73:a1:b9:af:4c:
                    e3:7f:83:49:3d:13:67:1a:c9:5f:85:00:fe:ca:af:
                    fe:68:e5:78:51:69:c0:9c:82:5e:95:3d:f9:65:f5:
                    45:cb:db:b1:d1:0e:83:fe:bd:49:96:f3:5e:c7:37:
                    cc:28:8b:2c:7c:93:93:d5:37:82:ee:68:c8:c4:91:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B4:91:2D:2E:20:6F:FC:7B:A2:FB:09:E4:41:D8:25:51:CE:F4:71
            X509v3 Authority Key Identifier:
                keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:3d:d0:a0:fc:37:db:ad:dd:79:1b:0e:4a:28:c3:d5:34:
         be:c5:e4:49:e4:97:28:5e:ae:4c:30:26:76:5d:a2:5b:5b:e7:
         f9:d6:a5:30:0c:bb:0c:ee:1d:61:a2:8a:e5:94:79:af:76:8f:
         69:51:fc:bd:87:df:84:e4:54:03:72:57:02:ec:26:4d:d3:df:
         3d:84:54:8a:12:96:18:14:c4:56:49:ea:15:0a:1a:6c:65:11:
         25:81:cf:9a:21:06:70:ae:6c:09:2e:da:a4:c7:40:b1:5b:f5:
         cd:3d:a3:85:38:e2:84:21:62:87:6c:19:cb:1b:aa:31:91:51:
         22:cc:28:42:8d:9d:d2:1b:0f:cc:35:9c:82:de:9f:80:1f:57:
         17:3f:fe:7c:c7:f4:d0:f5:c9:c8:5d:8c:aa:80:e9:90:d9:49:
         17:28:e6:8d:0e:65:1d:80:8a:02:13:96:e7:39:66:75:e9:e5:
         73:20:f0:21:6a:10:16:00:9f:a3:62:66:b6:be:bf:07:05:8d:
         45:66:1d:61:d5:76:4c:c5:e8:ed:35:22:fc:18:9c:9a:d3:3e:
         86:7d:90:fc:6f:4c:d4:f1:b0:ab:e3:c0:7c:f2:5e:18:81:0c:
         3c:5c:11:bc:9d:eb:0b:cb:47:76:aa:f1:f6:8d:e7:e0:52:0a:
         4c:76:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:26 2026 by rpki-client