Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File:                     XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier:          47AX4m2NvBhDyy/D4rPFa/0Jw15yMLePpFsfvIi1mJM=
Subject key identifier:   26:65:3F:91:8F:DF:1C:CE:36:35:4C:5A:9A:B5:82:FE:AB:AD:27:12
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer:       /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial:       019EC22465FB07DAEAEDFED0B33DF4EFF4B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number:          1735
Signing time:             Sat 13 Jun 2026 18:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:25 +0000
Files and hashes:         1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
                          2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: 03VCtamM1tkjJnU74HTigs2uF3f3SkHn6MQXPlPeGZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:65:fb:07:da:ea:ed:fe:d0:b3:3d:f4:ef:f4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
        Validity
            Not Before: Jun 13 18:00:25 2026 GMT
            Not After : Jun 14 18:00:25 2026 GMT
        Subject: CN=26653f918fdf1cce36354c5a9ab582feabad2712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:99:40:f6:c1:85:b6:3a:de:89:7c:26:4c:
                    ca:7c:40:d0:08:b0:55:e9:3a:40:8f:8f:06:2c:cc:
                    38:b3:42:87:83:a4:be:ae:d5:2b:82:52:1b:cb:92:
                    6a:3e:45:8d:d7:cb:52:51:9a:0e:2a:01:42:8d:d9:
                    63:5d:1b:af:fc:73:6a:49:80:d5:1b:2f:b2:d9:8a:
                    32:39:de:67:48:35:8d:c8:17:7d:e3:1c:de:e8:75:
                    ba:2b:1c:9f:c6:4e:cf:2c:b9:64:e4:26:1a:3f:80:
                    f8:4b:b8:0f:b5:a1:6d:e8:d6:0f:62:32:f8:b0:ca:
                    14:91:00:d8:8f:52:62:7e:10:6f:a6:e8:d1:f9:20:
                    ee:e4:90:01:d4:39:83:30:72:ee:24:39:2d:c0:d1:
                    5b:59:d1:9e:3a:e6:fe:8a:a5:c3:9c:1c:fa:ca:ab:
                    dd:5a:7c:0d:c3:e3:0a:79:21:d2:be:f4:7e:26:d7:
                    ea:c9:90:6e:ee:f3:21:c5:03:a5:7c:e4:69:c1:85:
                    62:9d:c3:6a:53:03:7b:c5:7a:76:4b:ab:52:1e:1f:
                    7d:3d:c5:3a:7d:34:7a:72:21:8d:54:59:11:de:73:
                    7c:ec:6e:bf:dd:32:51:75:a5:d2:0f:bf:76:e5:94:
                    81:89:55:1e:1c:ca:55:44:5a:c6:7d:8e:07:0c:41:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:65:3F:91:8F:DF:1C:CE:36:35:4C:5A:9A:B5:82:FE:AB:AD:27:12
            X509v3 Authority Key Identifier:
                keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b6:62:25:80:47:6b:d2:a2:ba:6e:a4:c8:d2:07:b5:c2:71:
         cf:77:6d:f8:b3:4c:cb:b0:d7:08:41:9f:71:c0:37:b9:47:36:
         ec:2f:66:13:9a:8b:7b:bf:9b:bd:f9:d7:43:ee:05:e3:80:9d:
         e2:21:31:82:a0:4c:6b:c9:61:b0:80:6b:07:da:40:7d:60:c8:
         7d:9a:21:43:b2:f4:67:14:30:5a:81:52:1d:37:f1:1e:2b:e0:
         1f:0c:bf:61:b0:71:b2:09:62:97:98:3f:5e:c3:03:d6:c9:8a:
         38:22:44:7d:58:4d:a3:70:71:d8:12:e7:5f:4a:26:6b:ca:95:
         ee:27:d6:f0:0f:d3:47:e9:3e:29:b3:dc:08:13:36:4a:87:80:
         98:d0:a6:59:b4:3d:e6:2a:7c:48:9d:d6:e2:23:3f:dd:59:75:
         fb:6a:93:f8:01:a9:ef:41:81:79:2f:56:a4:b5:cb:05:a5:42:
         5b:54:c0:e3:f1:c0:e8:05:7b:a8:f5:5a:01:66:e4:21:93:e1:
         28:96:0f:a2:b3:e8:b0:8e:df:15:21:05:90:eb:e5:af:24:03:
         bd:37:ff:4f:6a:e7:00:38:a5:1b:41:2c:97:3d:9e:a3:06:8e:
         4e:e9:4d:d7:04:23:b9:0a:84:db:a4:a6:f2:36:26:c0:5f:df:
         0a:14:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:17 2026 by rpki-client