Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File:                     xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier:          xS+TBvGr1UBpGjaQuNqub9ClIR4jN2UfLF4fYKwg6lU=
Subject key identifier:   0A:4B:17:7D:F4:10:27:2C:20:72:15:90:E4:29:1D:9E:A1:27:38:BF
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer:       /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial:       019EBF5AF9AE2B71845752087EFCB10B48D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number:          1500
Signing time:             Sat 13 Jun 2026 05:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:10 +0000
Files and hashes:         1: Cw_CJ5OIoHGbk_LBH69lh1CZovM.roa (hash: yuy/Yr+PAF0sScRAiUSYVsMjWEF5R7acxEyN+jKmOa4=)
                          2: GUYAfSyAe_7KoSF2zNniTR86G3o.asa (hash: QJFS4MThTD8AoeTU4o5zhEg8FJRAThUcCKNx9GenoTY=)
                          3: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
                          4: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: qyPJuNKdsvJ5dozOYEtQv871muFYlqkmHznUVdvThDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:f9:ae:2b:71:84:57:52:08:7e:fc:b1:0b:48:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
        Validity
            Not Before: Jun 13 05:01:10 2026 GMT
            Not After : Jun 14 05:01:10 2026 GMT
        Subject: CN=0a4b177df410272c20721590e4291d9ea12738bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:64:ec:ef:47:ce:63:4d:30:97:2f:90:92:
                    7e:ce:27:02:87:32:52:d5:da:ea:69:97:47:53:8d:
                    1b:a1:66:8f:67:9e:b4:eb:51:24:51:73:e2:61:c0:
                    25:87:4b:df:8a:d9:1f:10:fc:2f:91:a6:a5:cc:74:
                    7d:fc:97:86:c2:27:de:b2:74:97:69:37:8c:f6:ce:
                    1b:31:44:fd:78:3d:c8:96:74:c9:14:c2:90:f9:77:
                    6b:0e:2b:e2:dd:84:b6:07:7d:a3:a9:fa:a6:fe:7f:
                    68:b9:9c:e2:03:26:a3:68:ec:9d:59:b3:bd:60:f2:
                    e6:80:44:c2:9d:f3:e4:58:62:b4:77:a3:be:f0:a1:
                    1e:1b:e0:c7:a1:a0:ee:51:44:94:b8:c6:aa:6b:8a:
                    4b:9e:6c:df:0f:a1:d8:fa:fe:eb:64:97:39:67:bc:
                    51:e6:46:a2:96:ec:3b:7a:8e:2e:7a:d0:c8:1a:57:
                    10:14:af:b5:76:37:03:a3:e4:db:f7:73:cd:a9:f4:
                    0b:04:9d:c9:4e:5e:15:a0:d4:9d:e6:a0:7f:38:20:
                    e4:1c:ae:44:4d:c7:48:89:b9:81:68:86:0c:14:53:
                    b1:ca:2c:6c:1d:7d:c8:8c:91:db:29:f1:34:fe:cc:
                    a2:63:6d:41:9d:fe:9b:0a:df:4c:9a:39:8c:26:12:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4B:17:7D:F4:10:27:2C:20:72:15:90:E4:29:1D:9E:A1:27:38:BF
            X509v3 Authority Key Identifier:
                keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:cb:d3:c0:30:d7:da:3f:e4:87:34:b1:e8:44:42:81:05:
         c7:1d:4a:48:28:38:98:f6:31:8a:77:a8:c4:22:47:0c:38:21:
         75:9c:11:2e:09:46:30:9c:bd:2b:c0:f2:a4:58:5a:05:9f:84:
         30:94:5c:ca:bc:0d:45:1a:ee:17:9a:c6:04:26:60:5c:65:64:
         24:88:4e:1f:5f:59:11:a0:6a:c9:5b:4b:1f:61:d5:31:21:cf:
         f8:a5:24:c6:7b:f9:c1:58:77:8a:6c:49:e8:37:98:ec:0a:7c:
         b6:76:ca:b6:0f:5e:67:84:0c:da:72:30:ae:98:de:ec:cd:01:
         95:58:91:be:6b:82:6a:22:b7:20:d3:e7:76:62:df:ce:84:b9:
         69:96:88:d2:eb:a3:52:5c:40:4b:8e:6f:91:ec:c4:1c:0c:d8:
         7c:26:94:bf:26:b6:32:67:24:85:c5:53:66:e2:bf:e0:d0:f9:
         ef:e6:4a:46:a9:45:bc:c6:97:d2:2e:b3:4a:8b:8e:76:66:ea:
         10:27:fd:99:c1:37:67:f0:22:8b:3d:7c:6e:d3:6b:e0:5f:78:
         ad:0f:d8:e5:60:74:0e:0c:3c:45:d6:cd:88:c2:ee:15:ed:8e:
         a6:cb:33:55:90:57:d3:85:34:e5:ba:0a:30:c8:eb:c8:ac:2b:
         66:b8:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:17 2026 by rpki-client