Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File:                     xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier:          OCT1JbWOUxPdG0taWv88gJjGnfxDVnT4ChdE0BqX0QY=
Subject key identifier:   63:71:CA:C8:B7:C6:3D:56:EB:2A:B6:44:AB:70:91:C8:09:89:11:9D
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer:       /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial:       019EC36E6CD36CEC0678E7F2A72EB9039E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number:          0D47
Signing time:             Sun 14 Jun 2026 00:00:54 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:54 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:54 +0000
Files and hashes:         1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=)
                          2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: fD+flM+8PtOykpv71JdYfF1yLxJfg30TmsRmChmdvUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:6c:d3:6c:ec:06:78:e7:f2:a7:2e:b9:03:9e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
        Validity
            Not Before: Jun 14 00:00:54 2026 GMT
            Not After : Jun 15 00:00:54 2026 GMT
        Subject: CN=6371cac8b7c63d56eb2ab644ab7091c80989119d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:8d:dd:50:20:9e:c4:88:88:48:c5:b7:32:
                    4b:09:64:49:2f:98:88:77:cc:1f:63:f0:d3:78:fd:
                    3a:46:e3:fc:96:4a:69:53:59:a5:9f:14:3d:f1:36:
                    35:4e:9a:8b:5e:18:68:23:14:14:df:8c:a6:ab:93:
                    0e:ef:49:d8:4f:75:e9:f9:6c:7d:23:7e:be:52:5d:
                    a4:6e:a9:77:c5:b8:fb:ae:d2:75:03:a2:dc:be:1a:
                    b8:4f:a4:3f:e4:79:90:07:4f:a2:eb:62:5d:9d:a3:
                    46:ab:85:7b:50:b0:ba:a8:86:93:14:05:a0:ca:a9:
                    d1:2b:4f:be:3f:64:f9:ba:bd:4e:9b:06:e2:85:62:
                    4a:97:56:89:d1:ba:c5:ae:7d:cd:ba:c4:fd:d4:39:
                    7f:c5:8f:05:70:8c:df:30:cb:f8:72:7f:9d:a3:2a:
                    d6:bb:c2:bb:7e:3e:9f:f1:9a:7b:7b:20:a7:8f:83:
                    8e:0d:38:eb:ae:6f:33:06:73:14:35:fe:7a:9b:e9:
                    10:9e:5b:1d:c1:5d:df:bb:b0:d7:cf:99:e9:1d:17:
                    14:a9:be:87:74:79:24:6a:8a:64:ea:16:a5:a9:16:
                    94:67:76:c4:da:cd:c6:25:44:ef:3f:61:82:11:36:
                    56:06:3d:80:67:0a:22:b1:5f:28:23:ea:e5:92:3d:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:71:CA:C8:B7:C6:3D:56:EB:2A:B6:44:AB:70:91:C8:09:89:11:9D
            X509v3 Authority Key Identifier:
                keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:c4:cd:16:dd:13:e5:59:88:e7:93:a0:47:29:fa:d4:83:
         53:d9:d7:23:88:70:9b:2b:73:d4:97:0a:45:36:ee:e8:70:3d:
         36:9c:80:15:3a:b2:b2:1d:c1:39:cf:4d:73:cc:8c:3f:34:49:
         5b:77:22:05:56:82:6d:12:f7:d0:c0:e4:a7:8f:b4:3c:32:3f:
         80:b6:f3:4b:3c:fa:25:ed:c8:40:92:19:cb:c2:7f:01:1e:a0:
         9c:c3:1b:9f:ae:9a:23:53:7f:5e:52:b7:17:07:f5:19:4f:f2:
         01:a0:75:53:79:59:e6:2b:ff:43:17:37:05:13:b4:9c:ed:08:
         9f:c3:fe:f4:b1:e3:69:e5:f1:8b:31:7d:49:fe:cb:ea:0a:66:
         90:d4:8c:21:d8:09:d4:67:f6:13:9c:20:f0:dd:46:af:99:7f:
         28:23:80:f5:18:7f:34:26:5a:18:69:15:97:da:88:01:97:50:
         9d:15:f1:ee:19:4b:28:e5:e8:fa:ef:0d:6b:e7:3d:71:1d:12:
         97:24:74:72:f0:28:87:25:d4:2c:19:ec:99:99:7d:6c:c0:cd:
         83:69:cb:71:a6:2d:6b:f4:e6:8d:bb:44:d6:7f:3e:42:67:4f:
         6a:78:d8:e3:d9:33:a8:a2:d9:75:08:ee:68:98:f2:73:bd:83:
         1e:f0:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:35:37 2026 by rpki-client