Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File:                     xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier:          V1fP8yfS9j1VlBv3b6887ihb0e0X38yUu0MHUQlIoVU=
Subject key identifier:   25:04:66:2B:DA:EE:42:6E:99:FD:31:1D:31:57:59:05:11:34:06:30
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer:       /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial:       019D99CFB97D9D7D082DC9DB4FE896761F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number:          1468
Signing time:             Fri 17 Apr 2026 05:00:20 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:20 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:20 +0000
Files and hashes:         1: Cw_CJ5OIoHGbk_LBH69lh1CZovM.roa (hash: yuy/Yr+PAF0sScRAiUSYVsMjWEF5R7acxEyN+jKmOa4=)
                          2: GUYAfSyAe_7KoSF2zNniTR86G3o.asa (hash: QJFS4MThTD8AoeTU4o5zhEg8FJRAThUcCKNx9GenoTY=)
                          3: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
                          4: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: p+Qo4gC0+w2u2SBBEVI3DbErZ5cr5M/59V6+b6p//jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:b9:7d:9d:7d:08:2d:c9:db:4f:e8:96:76:1f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
        Validity
            Not Before: Apr 17 05:00:20 2026 GMT
            Not After : Apr 18 05:00:20 2026 GMT
        Subject: CN=2504662bdaee426e99fd311d3157590511340630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:e5:dc:2e:6b:e1:b2:93:30:bf:b8:23:96:
                    17:ad:d1:f1:41:92:d5:9b:54:59:0b:0a:fb:41:fa:
                    1d:95:4e:62:85:40:d7:a9:1c:c1:6d:3e:36:bf:88:
                    b0:49:96:55:5c:5b:68:76:16:7f:c5:76:1c:24:1a:
                    0e:1a:d9:c1:a7:dc:89:40:f3:91:92:e7:76:de:de:
                    81:83:cd:63:05:b0:0c:dd:66:b7:d6:ed:c8:50:c6:
                    6f:91:49:59:f6:18:fe:08:d3:82:f3:88:b8:51:26:
                    f6:d2:ea:09:26:6f:93:4a:de:26:31:56:e1:ad:84:
                    bc:c4:a3:90:a3:df:1d:86:e6:c3:be:c9:69:cc:df:
                    52:00:19:cd:0f:73:52:f5:b5:55:25:ca:53:87:cb:
                    f1:0d:17:cf:82:a7:12:51:07:ad:fa:0c:03:9d:fc:
                    da:cb:61:82:f7:0d:3b:47:c6:14:d0:07:98:2c:1f:
                    26:89:86:20:64:2d:a1:0a:4a:9e:d2:05:fa:4f:8b:
                    9e:48:db:86:d6:98:51:2a:f1:48:38:b1:5a:8c:b6:
                    c0:cb:fd:b0:2b:2e:a3:21:d8:8e:23:64:6b:e3:17:
                    92:1d:af:db:6f:49:c4:27:40:95:6d:aa:2d:73:13:
                    f7:00:64:b3:48:20:d3:09:0d:5e:4b:e7:eb:c3:00:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:04:66:2B:DA:EE:42:6E:99:FD:31:1D:31:57:59:05:11:34:06:30
            X509v3 Authority Key Identifier:
                keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:7b:88:f1:0a:8b:e0:2e:2d:31:7f:63:1b:d7:42:d2:d2:
         4b:db:3b:eb:95:7d:a2:1f:5d:bc:c3:f8:d6:13:09:d2:67:78:
         57:b2:d3:28:61:32:6b:4a:c9:f2:ce:c5:d5:23:f5:79:51:56:
         c7:9a:bd:5a:91:4d:5e:54:00:a4:0d:aa:e8:80:8c:4e:83:0e:
         ca:d0:c1:e1:86:22:bd:ae:24:6e:d5:83:67:80:ab:22:6f:7a:
         b6:7a:b0:f1:fd:c8:ca:38:65:45:ed:51:22:ba:be:1e:b9:22:
         8b:8c:72:d7:2d:6c:fe:30:5a:f3:68:76:20:ea:99:ef:14:24:
         6d:24:e5:49:d5:3a:49:e5:50:4a:c6:4e:f1:db:b7:1a:ae:f5:
         83:07:93:48:b1:c9:23:ad:17:5e:27:42:e3:00:4a:bc:18:62:
         19:cf:2f:15:0e:8d:fa:34:dc:43:97:54:f6:4a:e9:37:43:18:
         90:41:54:a4:d5:19:db:15:05:bd:61:9f:6b:79:4a:b5:5d:c5:
         f5:32:20:63:86:64:3d:cc:76:fd:a1:ea:f6:d4:c5:bf:d6:60:
         69:7a:32:b9:0b:2a:6e:21:1e:ba:a5:af:60:f3:fc:90:b0:75:
         36:2f:92:74:91:cb:15:2b:a7:55:1a:95:81:a5:2a:3c:c8:23:
         1c:33:94:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:12 2026 by rpki-client