Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File:                     X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier:          VWs7zQr7oweaIjlqBs6ud5zFe9A+ePMyP9wQcouUNMg=
Subject key identifier:   C8:00:E6:F3:75:F7:F8:5A:92:8B:5B:53:7A:DF:54:03:B1:CA:F5:0C
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer:       /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial:       019EC2CA072E3FAC76988ADFC876DFC43169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number:          0D27
Signing time:             Sat 13 Jun 2026 21:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:20 +0000
Files and hashes:         1: EhpMBlG4nDKvcGQKRYPAEZtRdEU.roa (hash: 00M7VIQ9njSy4l1huIv3bbpiOTYXp7U9IOJHNMG4ZKk=)
                          2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: 1nU/qk6GnxTP9Uh2bjT9JO8ryDqGzv1NMflBp4DyZmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:07:2e:3f:ac:76:98:8a:df:c8:76:df:c4:31:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
        Validity
            Not Before: Jun 13 21:01:20 2026 GMT
            Not After : Jun 14 21:01:20 2026 GMT
        Subject: CN=c800e6f375f7f85a928b5b537adf5403b1caf50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:9f:58:f2:7a:87:5d:a6:37:2e:2c:a5:48:
                    4b:f0:ee:93:e6:fa:28:63:aa:32:10:70:25:d9:6b:
                    c9:c2:98:8a:68:e1:f2:0f:ab:2f:a4:f5:ef:2e:e0:
                    92:33:1d:ed:4b:2b:96:ec:97:e5:fb:71:f4:4d:74:
                    96:b0:05:0f:b8:58:15:b4:9e:2e:26:e5:fe:12:22:
                    59:72:aa:0a:a0:1a:ea:c2:a4:1c:58:79:68:05:e9:
                    30:7c:5a:21:a2:86:a9:8e:2c:b8:49:7b:d7:17:da:
                    01:2c:33:67:08:a1:ee:76:df:ad:f2:13:ce:ac:ae:
                    13:ad:eb:cb:d1:59:18:62:97:4e:58:86:2c:54:8e:
                    64:fa:a6:3e:d6:f3:25:e4:63:fc:36:65:ba:87:7a:
                    da:24:16:df:7a:05:ec:6a:1e:1d:e0:52:66:ec:64:
                    97:97:ab:d9:47:4f:a0:dc:ae:ec:3f:7b:6b:8b:b1:
                    90:a3:f2:67:96:74:f6:e8:6f:2e:25:b5:0f:1d:80:
                    f3:26:6f:0a:f4:a9:26:ba:a0:63:00:1f:5a:69:2d:
                    41:0d:f5:34:29:d7:0a:38:10:94:55:87:a2:6c:05:
                    1d:7a:0c:3b:8b:3d:23:0a:4f:8c:4d:f9:6c:8e:a6:
                    30:bf:3d:a2:79:df:d5:08:1a:4d:f2:12:c6:1c:e5:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:00:E6:F3:75:F7:F8:5A:92:8B:5B:53:7A:DF:54:03:B1:CA:F5:0C
            X509v3 Authority Key Identifier:
                keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:f2:69:33:68:3d:f8:65:90:14:87:ac:10:ab:6d:10:a5:
         96:fd:03:c2:9c:b1:ed:02:b9:f7:9e:4a:ad:ec:80:80:22:02:
         ae:c7:c1:38:dd:5a:f4:5e:0d:86:92:89:e7:95:41:eb:f5:01:
         c7:d0:6f:ad:5e:03:df:cc:9c:51:63:b7:a2:75:9f:99:69:91:
         d7:7a:b4:77:43:68:df:cf:75:e3:35:13:38:e8:59:4a:a5:9e:
         23:9d:b9:45:eb:e7:05:49:59:0c:17:f4:7e:34:75:fd:71:a2:
         23:5a:e6:15:c7:f5:60:b8:1f:37:9b:7c:30:19:52:88:71:25:
         f6:18:4c:ac:1c:c9:56:c6:8e:ac:06:84:96:57:f0:78:c4:a0:
         e9:51:b9:c6:e7:b6:c2:a4:48:6f:08:34:51:52:89:fe:40:85:
         f5:f0:52:22:c5:55:19:2e:c3:42:88:52:ce:e4:1d:5e:6e:a8:
         85:bb:c3:0b:82:b8:09:26:17:b6:bb:92:79:06:46:37:5e:8e:
         6a:07:d5:1a:a6:d4:b5:cd:d6:f5:82:5c:b9:d8:2b:5b:30:5a:
         9b:8d:52:2f:8c:ab:da:08:6d:f1:2f:76:cd:30:71:ae:5a:ca:
         2b:25:0f:07:25:9c:22:e5:79:91:86:86:da:a9:ff:c9:13:48:
         16:e7:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:21 2026 by rpki-client