Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          PPUMo47RbM/R8pZg+t2KR0TBJfHdZSNUQMBwIv3gdVo=
Subject key identifier:   A9:D4:4E:02:5C:DF:32:54:87:28:D2:9E:A7:29:CE:00:E5:FD:89:45
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       019EC337F172642E0A6467519FFF792D3EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0A92
Signing time:             Sat 13 Jun 2026 23:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:23 +0000
Files and hashes:         1: BgM7Z-hf4ZmFOJu6X5CdP5efJ28.roa (hash: 0PK12/6KwOapd3jaEkPiUknqIb57oljJN1nirZLOhCY=)
                          2: kYRR38ICq9ItDhQJiQSFEmuaZCk.roa (hash: 2GZZrZK8I9JcWijw4HIji3r5v/uDz5lVmOVbPE0wJAU=)
                          3: ospxyuscZUt12OJ3jV2ziDWVxr4.roa (hash: HK4EzYmG6c9gmfKK671rBfu/m90Pfh30a4zU8YJa+So=)
                          4: sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa (hash: ZVA4MvGdgvPLSJ8Vi9YqZCQSkNRcAKBUxh0NO1bCuj0=)
                          5: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: yyxX68ci+5FETcn71O5wv/nvRit1+vUTjpzXogIBpJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:f1:72:64:2e:0a:64:67:51:9f:ff:79:2d:3e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Jun 13 23:01:23 2026 GMT
            Not After : Jun 14 23:01:23 2026 GMT
        Subject: CN=a9d44e025cdf32548728d29ea729ce00e5fd8945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:72:11:be:75:b1:36:be:2c:dd:15:d6:d8:
                    c7:42:11:e5:8f:53:c4:6b:0f:4d:c8:9a:9b:fb:2e:
                    68:11:f4:2c:23:ee:ba:b3:6c:3a:01:f2:f6:25:d7:
                    7f:95:6c:63:08:98:2b:1e:cc:65:76:3f:b9:52:63:
                    79:94:73:e4:be:65:c8:ae:45:12:1d:e3:49:e3:74:
                    ce:d3:6b:35:d4:86:4c:d6:60:b5:be:f6:9b:2a:82:
                    06:12:3c:a4:bc:87:30:7a:71:92:37:31:85:1e:98:
                    d1:83:ab:6a:85:91:55:59:98:ec:c0:f5:e9:8c:c4:
                    eb:b5:0b:2c:94:cc:17:f0:a0:fc:41:18:0b:53:a9:
                    ca:51:d9:c5:42:25:8c:b1:68:03:73:2c:a2:29:14:
                    37:96:bf:e2:bf:ec:e4:cc:4d:70:59:43:16:74:5b:
                    b5:df:2d:6a:da:de:6e:29:1e:38:1a:83:a0:9e:8f:
                    b2:96:5d:50:ba:3d:71:1e:31:48:14:88:cf:6c:4b:
                    fd:0d:c1:b0:59:6c:4e:90:ed:14:16:dd:a9:0c:70:
                    e3:42:4f:8d:0d:ee:4f:78:d8:7e:3c:84:6e:53:f2:
                    1d:07:cf:aa:01:75:91:df:e4:41:b6:54:ec:64:6c:
                    b1:42:14:8f:d0:33:3a:32:e7:94:b6:45:db:71:bc:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:4E:02:5C:DF:32:54:87:28:D2:9E:A7:29:CE:00:E5:FD:89:45
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:31:6a:95:c6:43:41:9e:93:b1:d9:f7:1b:35:12:af:19:cf:
         4e:cb:f2:ff:41:9c:a5:3b:01:0b:cc:8a:a6:69:6e:9a:95:c9:
         8e:ed:e4:2b:95:64:93:aa:ac:00:f2:a8:9e:88:02:94:6e:88:
         2b:0c:39:20:eb:de:65:94:1a:51:d2:0a:77:a1:e7:87:9a:a0:
         85:70:71:54:85:a8:dd:61:b4:39:c8:5b:36:02:48:81:82:5d:
         e7:8d:2f:d2:f5:54:e6:2e:ac:eb:d7:f0:81:4a:a5:f3:b9:ce:
         09:f0:7f:a1:be:0b:f1:4b:42:96:26:37:92:31:34:a0:b1:9d:
         7f:9e:4a:66:48:a3:9e:2c:6e:c4:b5:0c:34:5f:09:78:f3:41:
         93:0d:6a:ef:8d:62:d3:af:25:2d:f3:25:67:3e:d5:c8:05:ff:
         cc:40:d7:e2:6d:9a:e4:a3:e9:2c:51:a9:05:54:c2:45:87:30:
         70:ac:f2:ab:c5:40:a7:c5:b6:a3:54:78:1a:b6:fe:0d:04:b8:
         59:c4:26:6f:c7:92:28:ee:22:7b:f6:3c:28:3d:bf:83:63:7e:
         19:e2:cb:91:49:61:3a:16:de:1e:76:7c:30:fd:12:09:a4:70:
         c3:f7:f9:60:74:28:6d:49:93:d9:c7:ae:5e:d2:b6:80:2b:c4:
         d9:94:d6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:37:30 2026 by rpki-client