Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File:                     XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier:          dBHWswp34Ll8zMimxqxFl7yWo+/Gfpe9O2EnF9Eyg8U=
Subject key identifier:   24:35:B6:67:65:ED:B4:8F:20:A0:A7:AD:09:DB:AF:09:B7:0C:B5:0C
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer:       /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial:       019CA86AC9DD83C0F3533EED414166597A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number:          0305
Signing time:             Sun 01 Mar 2026 08:01:36 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:36 +0000
Manifest next update:     Mon 02 Mar 2026 08:01:36 +0000
Files and hashes:         1: GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa (hash: afD0B4wX8ENk5NOyojNKqywcV5cJB2IJVzbUoTBJNnw=)
                          2: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: gqjIBKpj/dmm/dPpsVM0293K7hgeWNvJHWBtoZT0pKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:6a:c9:dd:83:c0:f3:53:3e:ed:41:41:66:59:7a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
        Validity
            Not Before: Mar  1 08:01:36 2026 GMT
            Not After : Mar  2 08:01:36 2026 GMT
        Subject: CN=2435b66765edb48f20a0a7ad09dbaf09b70cb50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:85:ef:78:c0:0c:ce:6e:11:53:28:1c:cd:
                    03:9c:9a:c2:ab:0c:19:f8:c6:9e:22:5e:f2:0d:9f:
                    65:8a:78:f2:d9:00:a2:0c:1f:d9:f1:1a:f9:de:b2:
                    5b:12:29:81:2a:3d:54:92:61:47:fe:8e:45:32:9b:
                    84:4e:56:50:6b:18:c5:df:7d:fb:9c:0a:81:e7:b3:
                    53:90:83:7a:ad:de:16:d6:70:08:00:e1:8f:19:18:
                    a6:3b:aa:50:9a:fb:81:ef:a4:df:3b:c7:ef:7d:d1:
                    6e:0a:df:fb:c3:15:e4:1d:b2:fd:e2:4b:e3:c7:12:
                    90:a5:72:18:b2:a8:6e:11:71:ec:88:58:17:dd:eb:
                    c2:11:75:f1:bd:5e:b9:f0:72:a3:6b:4f:c8:65:5c:
                    82:6a:21:71:9f:63:fb:a6:1c:80:4b:a5:ab:7d:63:
                    97:fa:4b:f7:76:b8:9a:69:f7:84:34:3e:2e:c5:dd:
                    04:de:c7:55:18:5f:c5:8a:91:cc:bb:fa:82:2d:12:
                    e6:ee:07:4e:48:fa:81:a2:75:88:69:4e:57:57:4a:
                    02:cd:dd:3a:87:c4:22:7b:88:c2:94:bd:bd:75:29:
                    e8:44:56:ba:be:50:25:fe:ac:27:c9:a6:57:9e:75:
                    aa:6d:c0:84:03:e3:a6:a3:d6:4c:c4:e5:39:f0:2a:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:35:B6:67:65:ED:B4:8F:20:A0:A7:AD:09:DB:AF:09:B7:0C:B5:0C
            X509v3 Authority Key Identifier:
                keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c1:81:98:10:72:db:6f:39:ea:f9:6e:58:51:a0:47:20:1a:
         14:45:36:f7:d7:f1:fa:2d:df:c1:e0:52:40:4d:85:ef:49:c3:
         85:17:2a:6b:d3:80:73:4b:d0:02:15:73:d2:9b:7d:96:ec:84:
         db:0c:dd:3b:35:eb:fe:54:25:a8:b5:b0:fa:bd:23:f5:7d:4e:
         68:8c:0c:06:42:19:62:ce:82:90:ba:d8:b5:1d:07:48:f9:be:
         12:46:8d:d6:c8:be:d9:22:69:2a:27:d8:b6:53:22:79:ca:09:
         23:bf:37:10:bb:cc:7e:a8:90:13:84:6e:17:66:3c:94:21:05:
         e9:07:d5:a3:11:66:ef:83:26:d3:2a:99:21:c6:3e:be:2b:96:
         ed:2b:49:c1:f2:70:8e:1f:06:70:9b:99:19:6c:fe:fa:19:18:
         42:b3:82:05:a5:f3:b5:ea:56:4f:5f:65:30:f9:b1:7f:a5:b5:
         9d:cd:91:5b:d9:de:51:67:5b:73:b4:38:00:de:62:92:12:bd:
         de:24:23:79:96:a8:3d:f0:67:7c:e4:48:42:20:29:70:d5:c6:
         54:72:48:7b:2f:86:d1:1e:33:af:f1:1e:5c:f0:63:fa:b8:91:
         a3:56:68:7f:8a:b6:39:1b:97:75:76:41:b3:bb:fa:3c:9e:2a:
         cd:a5:6e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:32:16 2026 by rpki-client