Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File:                     XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier:          SHTxyuM0bZ9Z5UK5MidWZmaqvRKuNtH5k9CQK4SeVoc=
Subject key identifier:   DE:EC:7C:4A:E9:38:FB:08:08:C0:B2:47:09:EA:4E:32:6E:C8:0D:1E
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer:       /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial:       01A08C43D165AE25D32BCF41EEC75A09067A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number:          0260
Signing time:             Thu 10 Sep 2026 17:00:49 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:49 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:49 +0000
Files and hashes:         1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: caESTKn1hMfiWcsw/XB4TCoosHF5nF6rwiu2HEhSN+0=)
                          2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:d1:65:ae:25:d3:2b:cf:41:ee:c7:5a:09:06:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
        Validity
            Not Before: Sep 10 17:00:49 2026 GMT
            Not After : Sep 11 17:00:49 2026 GMT
        Subject: CN=deec7c4ae938fb0808c0b24709ea4e326ec80d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:cb:1a:5d:e0:d4:44:d5:65:a2:13:4e:b1:
                    df:37:a7:37:fb:b4:b2:95:46:f1:a6:1c:90:17:0f:
                    5c:68:e0:6e:76:8e:74:18:df:0b:56:3e:85:63:86:
                    0f:52:e9:ff:03:9c:e1:07:5f:1d:25:cc:3c:a3:c7:
                    c3:93:63:19:b5:cd:c2:d9:ab:7b:b4:67:86:14:19:
                    6b:ac:53:fe:81:88:4a:b1:2b:8c:50:29:0a:3a:de:
                    e6:aa:ec:81:3d:f8:03:90:59:69:85:0c:7b:08:07:
                    cf:0f:2b:79:72:51:39:62:48:c2:57:a0:e8:79:43:
                    a6:1d:9f:66:82:5f:98:cf:93:5a:20:5a:38:64:15:
                    99:5d:c8:1c:b1:d7:2e:96:f8:a6:c0:1f:4e:0f:63:
                    de:06:aa:83:81:1f:e5:d1:2e:f4:8e:3a:94:7a:0b:
                    df:c4:9b:7b:73:c6:32:bf:f0:f5:14:f2:ee:98:d8:
                    1b:dc:e0:29:cd:50:4e:18:90:80:f2:f7:05:a4:91:
                    c9:65:e8:46:2b:65:ce:db:60:a5:ed:f1:4f:65:ce:
                    26:04:15:8d:8f:27:fe:6d:53:46:08:90:29:13:c5:
                    43:54:e6:02:76:58:87:cc:93:b9:02:88:3f:83:c2:
                    a7:ef:32:3e:e4:e9:7b:03:66:b9:7d:d9:a9:da:0d:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EC:7C:4A:E9:38:FB:08:08:C0:B2:47:09:EA:4E:32:6E:C8:0D:1E
            X509v3 Authority Key Identifier:
                keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a4:ed:51:d3:e0:4e:e4:37:b3:b3:bf:05:38:92:c7:46:e9:
         c3:f6:e2:fc:34:15:62:67:86:46:d7:8e:24:a8:0a:46:91:b6:
         b9:70:51:96:ea:16:f6:f0:25:8d:95:f0:7e:09:78:de:60:00:
         7a:10:1b:86:9c:44:d6:fe:1a:b7:c7:40:20:e5:f3:44:0a:06:
         27:91:45:e1:08:6f:5f:22:a4:78:03:7b:f6:9a:eb:29:f7:5a:
         69:2d:d4:33:10:98:22:1f:21:95:c2:e6:b6:8b:03:73:b3:62:
         13:9b:d5:01:85:7d:03:b4:cc:c5:eb:ab:e9:f4:92:1b:f3:e5:
         0e:29:57:8a:7e:c4:a6:d7:89:0a:b5:38:58:3e:58:c1:24:52:
         88:cf:4b:5d:2d:14:c1:ec:61:f4:55:2e:42:82:8e:e9:e0:24:
         b4:12:f1:5c:dd:25:55:69:b9:bf:81:3e:77:e7:d4:38:15:7c:
         10:c9:69:9e:1e:4b:af:d2:c9:b9:5c:83:23:03:58:dc:5c:6a:
         48:c9:2c:d9:66:e0:c4:f8:59:e2:24:44:f9:7b:9b:a0:69:52:
         d6:48:53:63:b6:70:4d:1b:5d:36:88:52:7a:99:f9:7b:8c:75:
         67:40:17:9c:f3:70:84:f0:a5:74:4c:70:5d:4d:ea:92:e8:ee:
         46:7d:c9:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ9FlriXTK89B7sdaCQZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzNkN2ZiOTY3YTViNWMyMDNmNDM0YzAwZmZmMTI1MzRl
NjE3NjkwHhcNMjYwOTEwMTcwMDQ5WhcNMjYwOTExMTcwMDQ5WjAzMTEwLwYDVQQD
EyhkZWVjN2M0YWU5MzhmYjA4MDhjMGIyNDcwOWVhNGUzMjZlYzgwZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRHLGl3g1ETVZaITTrHfN6c3+7Sy
lUbxphyQFw9caOBudo50GN8LVj6FY4YPUun/A5zhB18dJcw8o8fDk2MZtc3C2at7
tGeGFBlrrFP+gYhKsSuMUCkKOt7mquyBPfgDkFlphQx7CAfPDyt5clE5YkjCV6Do
eUOmHZ9mgl+Yz5NaIFo4ZBWZXcgcsdculvimwB9OD2PeBqqDgR/l0S70jjqUegvf
xJt7c8Yyv/D1FPLumNgb3OApzVBOGJCA8vcFpJHJZehGK2XO22Cl7fFPZc4mBBWN
jyf+bVNGCJApE8VDVOYCdliHzJO5Aog/g8Kn7zI+5Ol7A2a5fdmp2g2uHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7sfErpOPsICMCyRwnqTjJuyA0eMB8GA1UdIwQY
MBaAFF0z1/uWeltcID9DTAD/8SU05hdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80MDQzMzgtMmFjYi00MjhmLTk4ZDEt
MThiZGE1M2M1ODQyLzEvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi80MDQzMzgtMmFjYi00MjhmLTk4ZDEtMThiZGE1M2M1ODQy
LzEvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKTtUdPg
TuQ3s7O/BTiSx0bpw/bi/DQVYmeGRteOJKgKRpG2uXBRluoW9vAljZXwfgl43mAA
ehAbhpxE1v4at8dAIOXzRAoGJ5FF4QhvXyKkeAN79prrKfdaaS3UMxCYIh8hlcLm
tosDc7NiE5vVAYV9A7TMxeur6fSSG/PlDilXin7EpteJCrU4WD5YwSRSiM9LXS0U
wexh9FUuQoKO6eAktBLxXN0lVWm5v4E+d+fUOBV8EMlpnh5Lr9LJuVyDIwNY3Fxq
SMks2WbgxPhZ4iRE+XuboGlS1khTY7ZwTRtdNohSepn5e4x1Z0AXnPNwhPCldExw
XU3qkujuRn3J+A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:12 2026 by rpki-client