Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File:                     Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier:          ooWxPqvWmvZenv5/RHtYOSJQLrVKsZYqK8UeyUbbeQY=
Subject key identifier:   AA:DA:E3:5D:99:FE:DF:AD:CE:27:83:68:B3:B9:AF:D7:6F:72:8F:CF
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer:       /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial:       019CACEB7F14FDA6BF7F9DF6FC8B79CE1DA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number:          050C
Signing time:             Mon 02 Mar 2026 05:00:40 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:40 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:40 +0000
Files and hashes:         1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: /4HTTPqKcUEqEcrnS8m4bMvLBDU9E8lkpv7SCqYShHQ=)
                          2: zrY1kiCbt_RCBDyoPeb6Gt-rfXI.roa (hash: 99km0sbg09Xs5uX9uuCKMjDG2dbDXHFkyqnyOKsmuE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:7f:14:fd:a6:bf:7f:9d:f6:fc:8b:79:ce:1d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
        Validity
            Not Before: Mar  2 05:00:40 2026 GMT
            Not After : Mar  3 05:00:40 2026 GMT
        Subject: CN=aadae35d99fedfadce278368b3b9afd76f728fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1f:42:e6:69:36:e9:ae:d9:11:20:ed:a4:32:
                    a6:fa:07:2c:85:9f:89:0b:54:51:de:9c:a0:65:6f:
                    5a:6d:39:c0:e0:df:6d:4a:a1:57:1e:38:05:a6:19:
                    2b:13:fd:b2:4c:a6:35:a9:69:05:68:a3:f9:a7:1c:
                    6d:a1:d8:a2:40:ea:67:3a:02:93:d9:c6:80:89:b5:
                    7d:a3:0f:74:ea:8c:c6:7e:7b:9c:2a:5a:69:98:33:
                    eb:20:32:5c:c9:6d:2b:e0:f1:aa:a9:ee:e6:60:66:
                    b2:44:d6:93:d1:82:16:e4:24:0c:21:b4:fa:10:76:
                    27:10:d1:bf:73:d6:eb:51:78:30:2d:8d:2f:07:84:
                    aa:39:ef:1d:7c:18:e9:50:61:de:cf:4e:af:07:e3:
                    94:a9:da:c0:00:a3:6b:b1:ab:9e:b8:1f:12:21:4c:
                    f7:13:ad:8c:02:2e:4e:0c:52:64:9f:61:b0:4d:0d:
                    10:15:a0:c3:91:30:e2:29:d8:9a:4f:73:52:48:1a:
                    35:da:8d:71:83:16:78:77:8b:28:72:ac:8f:60:60:
                    16:67:4e:08:e9:aa:44:2b:a2:63:4f:33:c0:15:ec:
                    27:1c:20:80:12:98:f6:2c:0d:f2:ec:22:24:21:9c:
                    c9:a2:16:ca:74:8b:fd:87:28:c1:a7:af:fb:34:37:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DA:E3:5D:99:FE:DF:AD:CE:27:83:68:B3:B9:AF:D7:6F:72:8F:CF
            X509v3 Authority Key Identifier:
                keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:5a:34:8c:0c:9e:6d:f4:fd:e5:f6:9f:9d:3e:95:3a:8f:6d:
         5b:b1:ec:d9:6b:f9:c2:42:2d:af:2e:01:ba:5d:c1:47:79:05:
         b5:c6:2f:69:2a:cd:9f:82:bb:47:fa:2c:5e:cb:ce:2d:73:64:
         64:99:97:d9:16:82:1f:dd:ae:86:ea:f1:14:d9:bf:32:66:78:
         70:95:b2:f0:48:1c:aa:08:76:a5:2a:fd:c8:05:86:a2:1d:58:
         97:22:ba:c9:0b:86:51:61:e5:bb:46:7c:7f:9c:21:ed:ca:d6:
         fa:cf:01:b0:50:41:f5:c0:32:7d:4f:cb:91:0f:57:80:ba:c1:
         9f:6e:15:d4:9b:58:3b:6d:1b:43:77:4a:d6:1a:5e:ee:07:6d:
         5c:65:70:b6:1c:3b:95:67:32:12:0a:a7:af:66:12:32:82:84:
         b1:4b:63:5a:e1:34:6e:27:67:c8:05:ff:b2:f4:22:ed:02:8a:
         27:6c:5b:35:87:29:28:07:00:67:0e:9c:05:21:4b:92:a8:de:
         97:f0:13:ec:dc:df:bc:0c:86:56:ad:af:e6:fa:aa:9c:a6:dd:
         5d:9a:b1:e8:a7:6a:be:8f:68:a6:c7:a4:0d:7d:59:96:cd:e8:
         5b:a5:32:fd:47:c4:e1:d1:dd:8e:d3:49:74:ab:81:3b:66:10:
         3f:49:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:58 2026 by rpki-client