Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File:                     XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier:          PwtxcgYCzvxq8nDGF+DhV16tTPhZkv13XI7Sz0MXAU4=
Subject key identifier:   52:EF:E8:6E:C0:1C:57:A1:A7:D9:49:22:AB:E2:BE:77:F4:34:98:14
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer:       /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial:       019D9998FDC34C2C097F3237E088783F4231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number:          0B56
Signing time:             Fri 17 Apr 2026 04:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:33 +0000
Files and hashes:         1: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (hash: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=)
                          2: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: Iqln8GJ9WySlAKygD53ZAH1oPO4s0zNSQ+MoYPbBb2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:fd:c3:4c:2c:09:7f:32:37:e0:88:78:3f:42:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
        Validity
            Not Before: Apr 17 04:00:33 2026 GMT
            Not After : Apr 18 04:00:33 2026 GMT
        Subject: CN=52efe86ec01c57a1a7d94922abe2be77f4349814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:1f:0a:61:3a:a9:c6:bd:ce:34:d4:ca:3d:
                    ee:c5:02:8f:a4:2b:9a:dc:20:b5:5e:1e:1f:4d:e7:
                    63:68:7d:3a:85:a8:f7:59:53:ca:c0:f9:88:00:34:
                    24:0e:c7:8a:8e:e6:3e:8d:cd:a5:3b:8d:de:45:a6:
                    e6:2f:28:1f:0c:a9:a6:be:3f:4c:1d:31:59:58:c7:
                    70:76:c3:a3:8c:9f:dc:73:68:7b:a7:da:f5:ed:6f:
                    6e:e3:69:d2:47:3d:d0:dd:83:4f:85:0a:2e:81:ec:
                    03:01:5f:32:01:51:e9:f8:c8:22:c1:7d:73:ae:4b:
                    3f:ba:3a:6a:c9:d5:5b:73:4c:af:bc:3b:e8:ad:0d:
                    36:79:7b:f7:98:94:10:13:bd:21:04:a9:99:9e:ab:
                    a7:d7:c0:5f:52:36:e7:5c:67:9e:f7:2c:9d:d2:d4:
                    17:e7:c6:75:00:bf:bb:98:40:62:b4:73:c1:cb:85:
                    19:3e:f2:fa:e9:84:a5:9c:55:72:61:88:19:84:b5:
                    42:f1:84:01:da:e7:bc:fc:bf:4e:f4:43:d6:f4:86:
                    27:37:14:e1:2b:f9:a2:f7:15:72:d5:9b:2e:0b:2f:
                    2c:e6:39:a4:5c:02:80:14:81:1f:6f:f9:8f:90:0d:
                    7a:01:7c:7d:6f:e4:ac:d2:aa:c8:39:5d:5f:a6:5a:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:E8:6E:C0:1C:57:A1:A7:D9:49:22:AB:E2:BE:77:F4:34:98:14
            X509v3 Authority Key Identifier:
                keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:f1:ae:fb:a0:07:f3:f1:1b:74:ae:cd:46:e1:45:23:d2:
         2a:d4:4b:ca:0e:22:ea:01:e9:d5:0b:70:2a:62:35:74:f7:42:
         7b:13:2d:24:ba:9d:51:f7:ef:35:9d:2a:d6:69:93:a2:c8:cb:
         e7:b8:b6:7e:51:25:23:c4:33:d1:c1:ea:16:df:db:70:d4:67:
         36:96:51:58:c2:1e:f1:fa:c4:ba:9c:16:2d:d1:63:ac:de:24:
         9b:38:24:d1:9d:08:24:55:e1:33:de:50:4b:08:ad:72:25:e9:
         09:6f:74:60:bc:5f:c6:c6:d1:1a:82:fc:56:e4:7b:92:02:ba:
         e5:1a:b5:10:2f:e6:43:7a:06:32:8d:d1:78:af:ff:c5:02:5a:
         ac:1c:0d:8e:4b:32:5d:f2:1e:bd:ad:d2:85:7d:9e:af:2d:11:
         93:80:3f:d7:8d:73:3d:d8:83:05:77:d6:27:15:6e:51:88:cd:
         b6:24:ea:62:a3:55:2e:f3:79:a4:c5:cb:7c:0e:16:a1:d5:fc:
         25:f4:bd:e7:57:d7:3c:13:fa:15:d6:d0:eb:f3:e3:d3:4f:f5:
         d8:ad:20:fa:a5:9c:7e:e2:7c:97:ee:44:ed:2d:2e:85:ec:0a:
         05:16:af:8e:fb:c5:2b:47:07:68:1d:c1:a2:77:bf:00:93:f1:
         c0:cd:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:50 2026 by rpki-client