Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          cg05shm8J7ngk+fH7qQkXTIo5jw9ihcjOUSuQGwR+R0=
Subject key identifier:   90:98:C2:3C:B9:BE:90:09:7A:21:2C:0D:58:5F:3D:AE:73:0A:4A:1E
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       01A06EDE142065271ABDC258DB55727EC623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          19D8
Signing time:             Sat 05 Sep 2026 00:00:42 +0000
Manifest this update:     Sat 05 Sep 2026 00:00:42 +0000
Manifest next update:     Sun 06 Sep 2026 00:00:42 +0000
Files and hashes:         1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
                          2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: WvRi4/JvwiXzjhO/+9ywmT/BQQuthdrOtfMbInxOWpw=)
                          3: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
                          4: xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa (hash: 7eLkL929YGBrLf10p7Xu8H5BWgjYEKgp3pDvwQ/th+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:de:14:20:65:27:1a:bd:c2:58:db:55:72:7e:c6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: Sep  5 00:00:42 2026 GMT
            Not After : Sep  6 00:00:42 2026 GMT
        Subject: CN=9098c23cb9be90097a212c0d585f3dae730a4a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:40:80:9b:36:47:23:94:6c:69:33:56:1d:
                    5f:6f:92:b1:14:20:ff:d0:f1:b7:e6:6a:5f:37:b5:
                    ed:a1:5a:03:7a:6a:c7:3e:e7:20:58:e3:01:96:91:
                    ae:f9:a4:20:4e:53:e8:78:16:9b:5c:6d:af:ee:9a:
                    3e:bf:9b:cd:fd:ca:5f:1f:df:3c:1a:b1:55:51:33:
                    01:f4:55:46:74:d3:13:42:a4:86:1e:80:e5:a7:c2:
                    a2:58:06:9a:04:fe:39:5e:d6:82:69:63:fa:1c:c3:
                    1b:ac:cb:19:05:2a:a6:a7:70:91:52:cf:ac:4c:5f:
                    2c:f2:8e:9d:3c:bf:79:c6:28:53:62:fa:63:1d:43:
                    75:ca:30:be:e7:bf:3a:31:a0:36:13:aa:e4:81:76:
                    4c:a9:91:54:d3:29:ea:50:62:b9:12:88:96:02:6e:
                    2b:6c:4b:cc:bd:97:e2:29:22:8a:2e:f2:b6:b3:7e:
                    13:7a:16:5e:e5:08:59:0d:38:e8:61:fb:a8:32:1a:
                    70:0c:f1:36:42:15:64:81:d8:54:d0:41:b1:6b:b0:
                    da:47:38:e5:7e:5c:6e:90:af:11:ae:c3:4b:63:e2:
                    80:e7:36:6d:68:f2:ad:61:5c:f6:ad:a7:18:e3:2e:
                    f2:43:01:83:74:13:c2:14:bb:86:f7:b9:57:65:12:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:98:C2:3C:B9:BE:90:09:7A:21:2C:0D:58:5F:3D:AE:73:0A:4A:1E
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0c:ef:3e:db:4a:17:0a:48:d2:ff:f8:46:7b:4d:5c:e5:ca:
         f5:3b:dd:b5:44:c4:5c:60:0b:49:05:2b:24:db:2e:1e:ea:ee:
         8c:03:ce:44:bc:f9:75:d4:2b:08:da:37:c5:4a:44:49:d3:d0:
         03:47:e6:65:27:92:52:74:84:67:15:33:bd:ee:bc:ad:f5:83:
         ed:6e:bb:7a:b4:bf:b8:02:85:46:6f:30:ae:05:51:a8:ab:3b:
         a9:51:3e:56:38:21:9c:81:fb:65:53:9f:2a:a9:0f:23:d8:34:
         18:a6:02:ac:04:47:e7:b0:46:5c:3a:3b:8c:65:96:29:4a:8e:
         e9:63:4b:32:e1:64:77:93:ca:d1:03:c6:87:be:f1:a5:99:66:
         d1:13:3f:8a:4b:94:d3:50:0f:c0:33:04:e7:ab:26:5a:33:2d:
         bb:52:57:e0:f7:96:9b:af:67:2b:84:10:e7:5f:ed:42:e3:63:
         6d:14:31:08:94:b8:23:37:b4:ad:74:3a:c7:8f:0e:36:04:72:
         7a:cb:92:a2:a6:34:97:c7:3a:87:ec:0d:cc:be:e1:7b:30:b9:
         38:8a:4a:3a:96:86:84:f4:d5:c3:87:0b:ca:4c:89:f2:91:2f:
         a5:9b:ff:e3:db:30:4b:3f:04:3b:59:d7:fb:33:98:92:eb:0d:
         a6:9e:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:14:37 2026 by rpki-client