Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File:                     X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier:          3In5T2rc6ECPJGct3qJumjgSqhbABEMA/UHd4hqkyps=
Subject key identifier:   A9:EF:61:AB:68:03:72:3F:65:1F:99:2F:53:03:B7:41:AA:E2:BF:17
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer:       /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial:       019EBF914B9309C34A9E2A09C2F33B8A1603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 06:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:30 +0000
Files and hashes:         1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
                          2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: TyNXRrVvBZlFkV+qZhFkmAtxnDz/mr/H5GsVgkokXJI=)
                          3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
                          4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
                          5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
                          6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:4b:93:09:c3:4a:9e:2a:09:c2:f3:3b:8a:16:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
        Validity
            Not Before: Jun 13 06:00:30 2026 GMT
            Not After : Jun 14 06:00:30 2026 GMT
        Subject: CN=a9ef61ab6803723f651f992f5303b741aae2bf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:b1:74:70:74:9c:b7:65:9b:f7:6c:0c:fe:
                    b0:fc:23:07:73:94:d0:c6:b4:9f:57:7f:98:62:8e:
                    d2:b5:51:0b:f7:51:ab:94:77:33:d2:bf:5d:f7:f5:
                    89:02:7b:d2:8d:08:35:2b:eb:9f:3b:22:83:a7:4d:
                    42:7a:ef:6b:8f:49:9f:21:af:07:71:df:83:86:66:
                    90:e3:ff:82:31:1d:75:30:fe:0c:d4:da:c5:30:d4:
                    f6:3a:b7:73:74:af:34:db:d2:79:d0:60:49:4a:df:
                    00:5b:2d:c7:70:91:9c:f6:61:ee:4f:7d:2d:49:43:
                    8c:74:84:7b:2b:a6:c3:0a:f5:0f:89:35:33:a2:6d:
                    b2:b3:b0:a3:65:10:eb:b4:db:0f:5e:52:ad:75:1a:
                    ab:41:a4:e6:55:22:f9:ab:f8:55:6c:60:8b:79:32:
                    23:89:f3:b9:ce:2f:1a:9e:d2:c3:a4:7f:be:5e:01:
                    35:7a:e4:6e:a5:d0:ac:c7:93:ac:fd:fd:94:ab:c4:
                    21:58:5d:f0:ba:f6:64:2a:bb:c4:14:68:f6:7b:2e:
                    8f:e7:c3:96:d3:04:62:fc:3a:25:c5:08:c7:f9:b9:
                    b2:b5:91:12:3d:6a:35:4a:be:99:25:57:9b:ae:61:
                    7f:88:23:66:00:eb:21:54:63:b1:84:12:de:ef:39:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EF:61:AB:68:03:72:3F:65:1F:99:2F:53:03:B7:41:AA:E2:BF:17
            X509v3 Authority Key Identifier:
                keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:bc:fe:25:b7:8a:00:b4:f8:f1:05:8c:fc:77:40:d0:f2:
         81:4c:a7:18:d2:cd:48:58:b1:eb:0e:c1:df:7e:de:b0:18:82:
         86:09:ee:2e:e8:f6:15:f8:01:0b:44:73:22:33:c5:78:96:43:
         5b:2a:63:c0:9e:9b:ea:b0:1f:2f:0d:6e:ab:18:df:98:7e:d6:
         e7:c8:11:d2:6a:c6:93:f9:d5:2e:2f:6f:a7:c8:52:08:8c:b7:
         13:27:41:bc:65:ad:70:86:87:de:43:da:f0:e2:c4:0c:f0:d8:
         78:34:a5:c7:1a:a7:e1:f1:4b:a9:7d:ac:f0:8f:e7:07:7f:e3:
         58:64:a9:62:50:73:9a:66:71:b5:dc:50:25:da:84:8d:e0:7f:
         af:40:0f:49:5f:94:4f:e8:90:e3:c8:98:fd:87:78:c6:1c:8a:
         31:4a:61:2b:81:6c:40:85:23:92:64:db:5a:cd:3f:31:bd:2e:
         7f:62:a8:59:75:3c:4a:01:dd:15:7c:fe:27:19:46:29:fb:ee:
         7c:5a:d3:a0:7e:a2:84:bf:8f:00:5e:94:6c:e2:f9:a4:42:69:
         c4:13:4d:9d:d8:e4:2a:ec:ed:44:18:1e:9f:9e:2e:b2:8c:85:
         49:67:92:e1:3c:bc:f7:71:4a:dd:28:05:0d:1a:10:f6:12:94:
         49:4f:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:20 2026 by rpki-client