Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File:                     xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier:          SpvKFqn5ihNBrVNX7SCRPYE1rOkx3G7wNiB1G+XI/gs=
Subject key identifier:   E8:31:79:84:86:5A:B5:D8:B6:10:F9:AE:1D:0F:0F:6F:74:04:EF:60
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer:       /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial:       019CAB349CBD75428B7649F4F5BBCAB9BD04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number:          13EB
Signing time:             Sun 01 Mar 2026 21:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:17 +0000
Files and hashes:         1: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
                          2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: 6xUKbyfQZQIT5tbbojKuVIuasKn49YmU4hy/B9m4xB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:9c:bd:75:42:8b:76:49:f4:f5:bb:ca:b9:bd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
        Validity
            Not Before: Mar  1 21:01:17 2026 GMT
            Not After : Mar  2 21:01:17 2026 GMT
        Subject: CN=e8317984865ab5d8b610f9ae1d0f0f6f7404ef60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:d1:ce:53:5e:67:fb:d2:31:18:d2:ed:63:
                    98:42:69:6d:98:2c:33:f4:11:ed:e0:44:bf:d8:64:
                    e4:dc:ad:79:ed:33:f8:0b:82:91:85:de:31:49:f1:
                    40:e2:98:f3:ac:06:e1:92:ee:20:f3:ce:50:32:a6:
                    66:69:c9:c8:32:a1:d5:fb:b9:76:61:a7:bf:96:e9:
                    90:b1:5d:7b:5b:97:74:44:ca:11:b3:b6:4b:27:f4:
                    d2:e2:e3:14:b8:5e:98:cb:fc:44:0a:62:e1:c6:b8:
                    eb:39:34:a4:d0:68:93:f1:b6:47:af:6a:62:9c:10:
                    c7:04:2e:94:27:3d:ce:d8:28:53:ff:8d:fb:37:dc:
                    e9:47:6e:e7:ca:cf:68:42:b6:63:e8:5f:cc:6e:4b:
                    b2:3d:32:e1:1a:bf:f9:73:9d:a9:66:2b:75:46:47:
                    99:34:05:73:77:25:7a:72:2b:75:e0:68:ac:9a:2c:
                    ca:15:65:c3:25:00:8a:6f:ed:0d:e2:07:b8:aa:d3:
                    be:55:bc:7d:a1:43:b2:c5:f8:79:26:70:00:92:68:
                    c4:6b:2c:38:3f:c3:02:a1:27:dd:83:86:46:ee:6a:
                    67:fe:59:fa:f1:65:b0:b9:e0:b0:5f:6c:2d:c0:bd:
                    d2:e0:f7:d9:53:0a:d4:75:02:9f:e6:f2:27:1a:4b:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:79:84:86:5A:B5:D8:B6:10:F9:AE:1D:0F:0F:6F:74:04:EF:60
            X509v3 Authority Key Identifier:
                keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b2:b5:a2:55:5b:20:c9:1d:96:a8:9c:34:e9:2b:11:05:e0:
         d7:73:97:83:30:c2:e1:7d:88:a6:40:d6:66:ae:1a:71:b7:e1:
         aa:e0:12:7d:9d:50:66:8d:f9:76:33:34:0e:8c:6a:9c:ab:9a:
         d6:8d:66:17:06:a4:c0:64:99:b8:a6:b6:87:dd:3d:97:6d:83:
         92:af:6b:67:4d:26:1c:a8:df:b3:eb:9c:70:55:cb:4e:03:77:
         f2:59:eb:20:32:8c:ca:93:e4:a4:95:7f:25:e1:07:11:17:21:
         50:5d:c1:68:58:13:94:c1:c5:86:32:77:84:cd:03:6b:ab:1f:
         70:0b:4e:e3:18:a1:bb:5c:04:e5:71:39:50:05:c1:74:7d:bf:
         cf:3d:db:b2:fb:ea:ef:77:28:b5:05:1b:0b:0c:78:3b:74:a8:
         f5:bf:a0:59:51:83:a3:2f:36:4e:32:83:c8:5f:8d:6f:f9:30:
         07:3f:71:1d:bf:ad:9f:da:62:c1:c4:0c:d5:41:ab:d7:8f:86:
         6c:5a:51:4c:f2:f0:39:b5:5e:37:bc:c5:e7:43:aa:aa:03:78:
         ad:26:60:e8:b5:03:d8:69:f5:17:2f:be:f4:b4:8b:9f:9a:1a:
         98:92:88:2b:a7:fc:ff:64:90:1e:77:d2:ff:59:62:97:03:42:
         95:58:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:55 2026 by rpki-client