Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          9PCdgbW2oD3R0Bsai9TfjBjMK3zpoNc+ITD543GblQk=
Subject key identifier:   2B:1B:E7:95:A6:C1:6B:EB:64:20:5B:21:4A:51:D3:78:8E:68:0F:45
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       019D9C9A8DF2B10F4D989CBCF8B8B6FDEC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          09F5
Signing time:             Fri 17 Apr 2026 18:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 18:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 18:01:07 +0000
Files and hashes:         1: DBxRlw6IhMH5NUq70pzr0bbq4w8.roa (hash: QenFQF90vxZckg2RZFWlAslYI5ZZf31kvjU2F0kLhfs=)
                          2: WArGNGelr1r7NS84iUickHFqYnk.roa (hash: F549c5qhlHTdQg1HJuYk5UKg7MGhA9lxMR7V6QvPJBo=)
                          3: sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa (hash: ZVA4MvGdgvPLSJ8Vi9YqZCQSkNRcAKBUxh0NO1bCuj0=)
                          4: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          5: ua-SYQJ09JP0CrjN-4qrwgoyzC0.roa (hash: o6Eyyurglw8wGzE15d5TZBGXiOCrJZh1nJgMRDhcRpA=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: kNUFxBNpHoHlkg+427JwuU6SwdnRXIdIhRJAYqgAjJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:8d:f2:b1:0f:4d:98:9c:bc:f8:b8:b6:fd:ec:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Apr 17 18:01:07 2026 GMT
            Not After : Apr 18 18:01:07 2026 GMT
        Subject: CN=2b1be795a6c16beb64205b214a51d3788e680f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:21:be:af:31:eb:e6:a7:13:79:d6:17:c9:
                    1e:ef:63:24:84:cc:c2:ff:93:96:f7:c3:39:ab:dd:
                    0c:f8:79:63:f7:10:36:18:85:a1:62:a5:23:ff:af:
                    45:79:5c:e4:1d:4c:52:89:16:5e:1e:2f:37:57:d7:
                    eb:fe:67:3d:94:24:63:52:cc:bd:60:24:ae:b1:6f:
                    58:2b:ed:26:b5:a7:e1:a0:65:2d:ac:35:04:45:01:
                    ec:99:3b:a8:73:ea:b8:9e:6b:57:86:15:fb:d4:b0:
                    a4:73:d8:93:0f:30:3f:f3:fe:23:c3:77:db:8e:fe:
                    36:49:df:93:2e:43:d0:f3:4f:0b:f4:0d:60:e3:a1:
                    21:a0:df:46:bc:25:a9:73:73:8c:d4:29:87:05:d5:
                    22:8b:11:16:f2:f2:89:91:04:22:de:7e:f3:6f:a0:
                    15:51:ea:5a:b7:fa:ce:32:da:32:84:a5:14:eb:be:
                    ce:6b:2a:5b:97:ce:12:e2:e8:5c:d6:9d:2b:5a:e8:
                    8a:1f:28:fd:c4:73:7a:60:30:75:88:a3:72:07:fe:
                    b5:c6:7c:db:ae:56:64:3b:f5:e1:29:4f:96:5b:f9:
                    de:10:a2:a5:4c:c9:31:c8:ff:a2:60:54:f5:44:8f:
                    fd:21:ef:3c:ec:6c:12:51:e3:8d:a2:03:8e:61:5c:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1B:E7:95:A6:C1:6B:EB:64:20:5B:21:4A:51:D3:78:8E:68:0F:45
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1f:3d:8b:8e:e6:50:1f:d2:84:07:e2:29:66:c7:de:c6:4d:
         6f:cd:01:dc:1f:2c:9b:03:6f:b6:a9:b4:fb:2e:bd:d2:79:7b:
         18:a9:e3:5e:42:0d:f8:12:e1:ac:04:9e:ab:ad:74:33:a2:05:
         e9:e6:e9:fe:e3:36:ba:67:9d:aa:b9:39:b6:31:7e:4f:31:c4:
         a0:e1:12:60:21:c5:da:35:35:a3:d9:5e:5d:45:b6:20:4f:06:
         82:e4:fc:19:f7:07:ca:87:0c:0f:6f:a9:e9:fd:9a:d5:32:a9:
         32:1a:b4:ff:25:78:8a:f7:a7:9e:af:83:1e:26:96:13:d5:6f:
         7f:ff:b8:f6:00:09:49:94:1f:8e:e5:ce:d1:88:ed:62:f3:e5:
         e0:ef:a3:28:7e:73:65:4a:da:a0:59:5f:15:d2:2b:1e:9c:f5:
         01:4c:fa:1b:f8:47:b8:b2:a5:bf:3e:81:88:33:f2:9b:09:0e:
         5f:0d:2a:57:3d:53:38:52:3c:24:98:c2:9b:3a:e1:77:db:cf:
         8e:5a:26:7b:9a:c2:8e:bd:01:73:c4:51:cd:86:7e:82:90:15:
         4a:dd:0f:8a:53:42:bb:6e:95:24:69:a6:d2:76:b9:a4:f3:b4:
         9a:e3:77:38:62:86:20:55:c9:82:23:d2:8a:55:a1:68:07:0a:
         f8:0e:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:47:19 2026 by rpki-client