Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File:                     xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier:          T9r1hfDk+s5YMXlXkOILH2HHexzBEStS9lkkhLSQbNM=
Subject key identifier:   22:62:57:DB:81:E1:34:32:BE:E6:BF:92:C6:52:6E:55:00:45:E1:38
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer:       /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial:       019EC3A5B3F6C324049BBBB23FAA8538E3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number:          1898
Signing time:             Sun 14 Jun 2026 01:01:16 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:16 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:16 +0000
Files and hashes:         1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
                          2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: cTYbd89Z1D3AzwK2z7lmWKvBeh43eRuUJAIm1AKHs4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:b3:f6:c3:24:04:9b:bb:b2:3f:aa:85:38:e3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
        Validity
            Not Before: Jun 14 01:01:16 2026 GMT
            Not After : Jun 15 01:01:16 2026 GMT
        Subject: CN=226257db81e13432bee6bf92c6526e550045e138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:b1:9d:fe:75:f5:12:99:d3:4c:01:b5:5a:
                    96:2c:ae:e1:16:1c:6e:07:d2:76:33:d5:27:50:77:
                    e1:4d:d3:ea:51:0e:1c:8a:7f:3b:f4:73:7d:92:f2:
                    f7:22:99:30:7c:4f:a2:67:c7:3a:06:b3:6f:ca:03:
                    b4:ca:50:c4:a2:3b:d7:e0:85:92:c3:23:a4:52:fd:
                    66:3d:9b:51:d4:7c:96:10:50:db:97:82:4f:87:ea:
                    47:ff:24:11:47:43:db:a5:bc:1b:c1:8e:ac:ab:6d:
                    40:f6:3e:0b:ef:ec:a5:9a:ea:50:bf:84:70:a9:79:
                    f0:fb:27:46:c4:6e:15:92:ce:73:75:d9:5b:bd:2e:
                    15:da:ce:17:5c:3e:54:20:1a:b2:0a:4f:37:ce:1f:
                    22:a3:5a:7e:1d:dd:8c:fb:66:82:01:7f:27:f5:a6:
                    42:b1:a6:c8:27:f4:a6:9a:5c:a0:24:68:e4:17:f7:
                    e7:b2:0d:7a:30:9e:37:61:7b:fd:00:7d:f0:93:be:
                    58:77:7d:0d:37:3d:c3:47:84:82:d2:c8:4e:7f:fa:
                    ac:fd:46:6e:a1:c9:35:56:7d:dd:88:90:db:e0:d6:
                    ba:e6:c2:3d:d6:42:78:d2:01:f7:24:39:cc:a1:35:
                    40:b4:74:a3:08:42:13:10:3c:27:59:54:dc:05:07:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:62:57:DB:81:E1:34:32:BE:E6:BF:92:C6:52:6E:55:00:45:E1:38
            X509v3 Authority Key Identifier:
                keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2f:f0:dc:72:da:55:6b:9b:e2:51:6f:cf:ba:39:81:42:09:
         f3:36:e6:df:51:68:87:22:a7:7c:b1:30:2c:0d:b7:9b:a6:52:
         ee:74:ae:52:ab:54:ff:c5:9c:5a:b4:97:03:59:e9:a5:bf:79:
         8b:b2:07:1f:c6:69:d8:b6:18:e8:dd:37:29:0d:a3:54:63:00:
         cd:41:91:0e:d2:63:19:68:b7:9b:ad:dd:c2:da:92:98:81:14:
         01:3d:af:18:53:2e:ec:87:9b:d4:75:2a:b3:cd:e5:f7:97:d6:
         11:33:99:5a:4f:dd:7c:e5:21:bd:46:5e:21:68:3e:7f:74:58:
         28:4e:80:09:c6:35:ee:d7:4d:89:16:55:e8:e3:99:46:fe:39:
         ed:33:e5:67:da:28:01:31:82:d3:61:93:9e:55:41:79:76:e8:
         eb:48:7e:71:65:fa:c2:cc:71:06:31:bf:05:4a:f9:16:cf:46:
         ed:81:7b:86:11:29:e5:e6:94:e6:d4:dc:72:69:97:4b:25:96:
         6d:61:a0:34:e3:78:39:3d:53:5c:3c:59:6d:c1:d7:56:26:a1:
         f3:dd:05:40:a0:b6:02:76:be:0f:55:cf:35:8f:6d:a8:0d:15:
         12:26:a3:20:14:9e:0e:06:77:3a:3e:4d:a4:64:89:0f:2b:b1:
         d0:80:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:15 2026 by rpki-client