Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File:                     Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier:          V8iMtzBRwfO+TBZGBmrC/03/muVzicgkU9mPCd5fGpc=
Subject key identifier:   C9:1C:DD:64:44:FE:9C:5B:EB:79:67:19:51:FC:19:BC:71:F8:B9:CA
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer:       /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial:       01A1076E9797C76CAF4F7CFDD8510EFA660E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number:          0EB1
Signing time:             Sun 04 Oct 2026 15:00:50 +0000
Manifest this update:     Sun 04 Oct 2026 15:00:50 +0000
Manifest next update:     Mon 05 Oct 2026 15:00:50 +0000
Files and hashes:         1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
                          2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
                          3: TAOBPT5H68OOFn-aKgpIl79l-88.roa (hash: r/7rpZ5+y5pBnxkFqNUutBAb1N4xvdrVCeNUer0qRTE=)
                          4: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
                          5: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
                          6: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: CnEPMO4QcrPRcLcKliCPnoiNVJlPnrAAp05JyerzPq4=)
                          7: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
                          8: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
                          9: iTEBApGbXIQld6L8Gn4Udz3xB-U.roa (hash: HMQe1B8krTvbu6yUHhju4zyKwvmO6+uDtYtQV221HaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:6e:97:97:c7:6c:af:4f:7c:fd:d8:51:0e:fa:66:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
        Validity
            Not Before: Oct  4 15:00:50 2026 GMT
            Not After : Oct  5 15:00:50 2026 GMT
        Subject: CN=c91cdd6444fe9c5beb79671951fc19bc71f8b9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:77:6c:79:2c:47:65:84:9c:04:19:78:40:5d:
                    43:13:ff:ab:ba:61:8e:1f:4f:52:0d:bf:a4:5f:d3:
                    d9:0e:a7:39:6a:49:98:62:45:0e:08:06:26:ad:7c:
                    63:ce:33:09:a4:fc:a7:30:90:b2:d5:9d:dc:a4:6e:
                    64:d8:a6:a2:6f:16:f0:81:3d:d5:05:f0:6c:8b:1a:
                    6b:ee:28:61:80:e0:89:47:51:fb:33:66:6a:d5:a0:
                    fb:5f:61:6e:6b:8b:17:c8:57:4f:d3:f7:58:ae:c1:
                    48:71:85:be:12:c2:13:95:d2:54:9f:2f:8c:17:98:
                    76:7e:e5:fc:5b:7f:8a:1a:44:db:78:b0:b0:b9:37:
                    e0:6d:aa:28:55:86:95:e4:33:41:31:de:bc:34:a1:
                    f7:23:8d:6d:16:9b:3b:44:52:b1:a6:77:0d:f1:05:
                    a7:0c:21:ad:2b:b0:4b:61:57:8e:1a:23:12:af:9c:
                    6b:6a:35:55:f1:9e:93:79:65:88:37:40:7a:d9:9b:
                    11:66:f7:f8:33:cf:7b:6a:e6:9e:d3:15:e1:b4:f7:
                    cb:f5:ac:35:ea:b7:1d:da:1f:8e:38:d8:a2:2c:d2:
                    ec:b1:33:e6:6d:b4:d4:97:13:8b:93:d1:99:92:ae:
                    00:b3:ad:e6:b0:b3:67:e7:fb:04:24:3a:1e:47:c2:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1C:DD:64:44:FE:9C:5B:EB:79:67:19:51:FC:19:BC:71:F8:B9:CA
            X509v3 Authority Key Identifier:
                keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:de:0f:5c:03:43:07:7d:aa:5f:8f:9b:f8:2e:1c:ca:59:8c:
         76:9c:33:db:b3:f8:bc:cc:53:58:5f:61:51:4b:4d:db:4e:45:
         76:17:29:97:5a:c0:9f:41:8f:0d:ed:2d:0f:ce:bd:f0:f3:c7:
         72:4f:10:0a:f8:6e:16:a7:77:68:92:72:27:15:67:85:94:f9:
         8e:ce:74:76:15:a9:9b:e3:96:aa:78:7d:0d:25:55:28:16:6b:
         1d:26:d1:49:09:9c:7c:2b:e4:c6:6b:68:0a:8e:55:da:e9:f0:
         e2:9f:e0:12:6e:5f:00:d7:59:74:60:ae:f0:05:9b:09:80:28:
         97:e3:78:cc:d8:3e:42:09:6f:bb:f7:ff:8c:e6:48:98:53:b0:
         82:4f:08:83:af:a5:9b:92:de:ef:44:c4:65:43:47:2e:1a:47:
         41:e7:18:9a:cb:60:4d:ee:b2:79:80:5d:23:15:46:7b:c3:0c:
         c4:72:7f:79:d1:81:94:80:7e:85:53:2e:f9:5b:0d:fa:5c:79:
         c7:be:6f:aa:70:98:72:2c:07:32:1d:46:6a:aa:7f:3b:85:d0:
         6f:cb:c8:e1:e1:08:3a:d9:03:5a:8c:7d:73:42:78:ae:45:b7:
         3d:e9:98:6f:85:52:18:0f:2e:4c:ce:d1:84:d4:b4:b8:6b:a5:
         43:df:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:16 2026 by rpki-client