Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          eds0P3QD3TupyHUWu47zTt7ppzRdc6MuRA/H1UB0SAM=
Subject key identifier:   0B:3B:8D:32:75:74:B4:2C:19:F5:B1:6D:BA:B9:68:2D:05:88:C4:B4
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019CAC0FB2631A5C29FBA63DE467A8B9ED39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          187D
Signing time:             Mon 02 Mar 2026 01:00:35 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:35 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:35 +0000
Files and hashes:         1: 1EIifzqC9fxhvzHEAG7QPCN3vdM.roa (hash: /bNgUImtZ/hoObEbk4Hpdq72dE66Rz6ysZMoo9cn3i8=)
                          2: TdF0Q3UgTm4iRlwq3nTlXHaVATI.roa (hash: OQ2zCDNUEEm/t4Dk7N3CDcwyQKDc+o2YA3IhBjZrGzM=)
                          3: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
                          4: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
                          5: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
                          6: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: oo9uBNAH2l7eGSt8OrfDzZj87U8IYBKB+3DsnBhOOf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:b2:63:1a:5c:29:fb:a6:3d:e4:67:a8:b9:ed:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Mar  2 01:00:35 2026 GMT
            Not After : Mar  3 01:00:35 2026 GMT
        Subject: CN=0b3b8d327574b42c19f5b16dbab9682d0588c4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:13:e9:41:f6:b5:63:ea:96:9d:61:cb:3a:
                    38:2c:20:0a:6c:f9:0d:ac:00:e2:9f:8b:d6:4e:40:
                    2f:d9:6f:5e:5b:eb:a4:5a:c1:60:42:da:ed:d8:33:
                    c2:64:ac:d0:a2:ce:64:fc:44:49:34:ac:56:78:96:
                    5b:fc:fa:20:64:77:42:87:a2:fa:43:53:b1:ef:39:
                    ed:74:f8:50:b0:f3:5d:35:5c:86:b7:7e:af:c2:4e:
                    96:68:7d:c7:0c:fb:41:d9:ed:89:6e:0d:4b:47:8a:
                    18:f0:e1:cd:66:93:0d:4e:3a:47:ed:f7:fc:65:21:
                    d9:39:b2:8c:85:21:f2:6d:9e:cf:18:2b:7e:17:5a:
                    71:64:30:45:1f:4a:e6:3a:3f:14:e6:51:6a:74:57:
                    10:eb:78:5f:a3:84:52:6b:64:82:75:29:7a:a1:bf:
                    39:2e:9c:06:c0:16:00:8b:30:6d:17:10:8d:32:39:
                    d2:40:b6:1d:21:8e:9e:b9:54:30:21:ef:d4:2e:8e:
                    b9:53:11:5b:88:5f:36:c8:50:da:ed:1b:75:73:f0:
                    be:4f:71:01:4d:09:06:5d:b9:d9:27:b2:92:80:b7:
                    0a:6a:a6:81:96:54:7a:56:e2:13:dd:7c:68:8e:f2:
                    03:3d:18:27:97:2b:84:a8:a7:5b:3f:a7:ad:aa:d1:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3B:8D:32:75:74:B4:2C:19:F5:B1:6D:BA:B9:68:2D:05:88:C4:B4
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:49:01:70:b0:69:d8:77:3e:a5:fc:a1:9a:53:b6:42:33:
         59:4a:30:39:55:95:98:bb:e5:79:02:49:7a:a4:18:43:3c:e7:
         e6:dc:d1:7d:77:f4:bd:ee:42:9b:c7:b6:84:7d:77:a9:0a:4f:
         94:24:75:68:22:89:52:82:59:23:2c:00:89:30:9a:a0:fd:72:
         5f:11:21:9f:97:82:ab:2f:52:bb:0d:b3:02:30:c4:24:ac:3d:
         1d:b5:52:a7:f3:23:18:ef:2b:1a:65:d5:a2:9f:c8:82:08:44:
         63:72:27:42:62:81:10:02:44:1d:7a:a5:aa:b7:7e:24:96:2f:
         be:48:b3:ec:6c:19:76:a5:2c:d7:5d:b4:c1:0b:17:61:88:9e:
         51:7c:e3:9d:ea:76:e7:66:bc:42:ee:05:98:5b:d1:c3:de:21:
         e4:08:3a:2a:2f:2c:f1:a4:ed:48:8d:6d:5a:62:bc:3b:ee:48:
         81:77:58:98:37:78:ce:17:e3:98:86:5e:6f:71:d7:9a:20:74:
         a8:0a:2f:74:98:cc:b4:aa:7b:2c:e5:c1:47:97:f2:5f:5c:eb:
         a9:20:e1:bb:38:d2:89:82:77:03:1b:72:45:c4:b2:26:cd:ed:
         9b:2d:df:53:b6:b1:25:20:b2:9d:32:99:52:f9:d5:b3:2d:d5:
         c2:57:ba:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD7JjGlwp+6Y95Geoue05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjYwMzAyMDEwMDM1WhcNMjYwMzAzMDEwMDM1WjAzMTEwLwYDVQQD
EygwYjNiOGQzMjc1NzRiNDJjMTlmNWIxNmRiYWI5NjgyZDA1ODhjNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujAT6UH2tWPqlp1hyzo4LCAKbPkN
rADin4vWTkAv2W9eW+ukWsFgQtrt2DPCZKzQos5k/ERJNKxWeJZb/PogZHdCh6L6
Q1Ox7zntdPhQsPNdNVyGt36vwk6WaH3HDPtB2e2Jbg1LR4oY8OHNZpMNTjpH7ff8
ZSHZObKMhSHybZ7PGCt+F1pxZDBFH0rmOj8U5lFqdFcQ63hfo4RSa2SCdSl6ob85
LpwGwBYAizBtFxCNMjnSQLYdIY6euVQwIe/ULo65UxFbiF82yFDa7Rt1c/C+T3EB
TQkGXbnZJ7KSgLcKaqaBllR6VuIT3XxojvIDPRgnlyuEqKdbP6etqtFm1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAs7jTJ1dLQsGfWxbbq5aC0FiMS0MB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMZJAXCw
adh3PqX8oZpTtkIzWUowOVWVmLvleQJJeqQYQzzn5tzRfXf0ve5Cm8e2hH13qQpP
lCR1aCKJUoJZIywAiTCaoP1yXxEhn5eCqy9Suw2zAjDEJKw9HbVSp/MjGO8rGmXV
op/IgghEY3InQmKBEAJEHXqlqrd+JJYvvkiz7GwZdqUs1120wQsXYYieUXzjnep2
52a8Qu4FmFvRw94h5Ag6Ki8s8aTtSI1tWmK8O+5IgXdYmDd4zhfjmIZeb3HXmiB0
qAovdJjMtKp7LOXBR5fyX1zrqSDhuzjSiYJ3AxtyRcSyJs3tmy3fU7axJSCynTKZ
UvnVsy3Vwle6tA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:30 2026 by rpki-client