Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          iQEIgK1OGLrJzPM19QSQX7xnnw7325ovf40RUmHEtWg=
Subject key identifier:   91:99:8A:1F:A6:5F:86:45:C9:05:94:B1:5B:54:07:0F:D3:E8:C2:DA
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       019EBFFF25F0C37AD7B75DCE985636E352F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1CE4
Signing time:             Sat 13 Jun 2026 08:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:29 +0000
Files and hashes:         1: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (hash: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY=)
                          2: 4-99qRbLiKVcJ42sODnmwNWdw78.roa (hash: RGXvUgoD8dT5QWF7nXRZCanA+yl1ty2cJ0McnL+rGJg=)
                          3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: n4jU0I7MAYShZeaRGi3h79vmmDvU6dkeZP8nTcEW7kQ=)
                          4: XlsLvbVU193m2Z6UVxU87ZTboqY.roa (hash: UZGfcrrCQJHsGlbF2mwHoSkh+ONgNYGr3BnRwDE44rU=)
                          5: onUcHcMkvFv3eRd2HH3aPRf6vhg.roa (hash: FMvdGW8G/i8Ujn/8ecIl88xpPzK27z5df59EqMBKxi8=)
                          6: s-3t_6DvgD0DjN9-6QqDO5rY_cU.roa (hash: +rBllZREmh7bs+Fp4h5QgznDa0gR5pWw64VxYiOWYb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:25:f0:c3:7a:d7:b7:5d:ce:98:56:36:e3:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Jun 13 08:00:29 2026 GMT
            Not After : Jun 14 08:00:29 2026 GMT
        Subject: CN=91998a1fa65f8645c90594b15b54070fd3e8c2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:3f:77:88:97:9b:54:c2:d5:59:e0:ae:3d:
                    61:b1:2d:3a:6c:a9:5b:4c:34:55:c3:01:76:f4:be:
                    39:06:bb:36:a1:c1:58:66:6f:02:71:3e:c9:06:15:
                    b8:2b:45:b2:d0:18:da:54:a2:35:14:d4:4d:4c:38:
                    b1:72:fd:fc:73:a6:e8:37:c0:3b:f0:9f:2b:82:4a:
                    3f:74:e4:73:dd:d2:fe:da:b0:0a:b0:cd:77:7c:c9:
                    a2:08:13:fc:fb:2a:5c:7e:2a:76:20:5f:07:5c:32:
                    d5:dd:68:9d:1b:5e:07:a8:a6:3d:9f:b2:7f:ee:9b:
                    31:49:bd:4b:65:c8:8f:6d:97:21:02:e1:98:bf:54:
                    64:e2:03:6a:95:cb:26:36:c3:8e:74:b1:a1:aa:98:
                    f5:11:cb:05:be:96:5b:11:3b:c1:89:2c:12:68:3b:
                    05:0c:5c:94:5c:e4:65:9b:1d:30:d0:99:fe:bb:d0:
                    47:b7:67:a0:66:7b:14:c8:6d:2c:3f:a5:6d:f2:6c:
                    5a:1f:08:ad:38:04:be:16:75:1a:16:d2:51:90:61:
                    e9:d7:c3:a9:79:32:e5:32:9f:aa:86:33:09:f2:a8:
                    d1:4e:2f:51:6d:91:d9:21:36:32:68:a0:8d:17:f1:
                    e4:df:be:09:c1:86:59:3b:b4:ee:58:48:dc:2b:4c:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:8A:1F:A6:5F:86:45:C9:05:94:B1:5B:54:07:0F:D3:E8:C2:DA
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:cb:15:c3:a3:89:ea:5d:e8:a5:94:31:4e:39:c5:03:94:7a:
         82:34:57:c1:8a:45:df:e7:29:e7:01:8a:a9:3e:38:10:80:d9:
         83:a0:87:51:b2:cb:54:ad:d8:03:03:f0:d1:ca:59:29:c3:2f:
         2a:aa:33:72:89:6d:cc:c5:d9:8e:c7:8f:4f:9a:93:aa:44:ce:
         30:68:45:5e:64:f9:5c:75:62:76:d9:9c:2b:20:08:7b:ff:f1:
         0c:ad:16:f6:14:c3:9d:c0:ad:3d:48:02:da:4f:2b:18:a8:51:
         85:9d:42:d8:42:d8:b3:45:48:45:fb:b0:4d:2d:c0:50:0c:8d:
         31:f1:fe:69:ab:9b:8c:39:13:78:65:34:84:79:a6:2b:ce:d0:
         2d:08:67:18:bd:d2:9e:11:76:3e:ab:de:c2:7a:54:59:ff:cf:
         c4:3a:6b:22:d4:b6:a9:d9:c5:c0:7b:96:85:f4:12:5e:9d:71:
         2c:7e:40:20:1d:b6:d5:6d:46:fe:54:c9:91:fc:af:71:65:ab:
         1f:3e:6a:8d:35:1b:06:56:a5:49:4e:42:2c:93:b0:c7:b0:52:
         31:46:ee:38:dd:4a:0f:df:98:3e:de:05:0c:b0:ce:3c:91:f9:
         33:84:ba:4a:63:a6:eb:55:9a:a6:52:19:e7:21:c5:3c:0a:d6:
         09:b1:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:10:29 2026 by rpki-client