Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File:                     xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier:          Fu3PlEFpufDA4NicBjVW5OX6ygG6CwdofhxgFbI9uSE=
Subject key identifier:   C0:FB:F7:FF:EB:B1:CE:25:38:C1:9E:2D:1B:92:A4:70:54:BF:4E:ED
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       01A08DC40DF0EFA4EB7A1605D6CF1352DD87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number:          1A58
Signing time:             Fri 11 Sep 2026 00:00:30 +0000
Manifest this update:     Fri 11 Sep 2026 00:00:30 +0000
Manifest next update:     Sat 12 Sep 2026 00:00:30 +0000
Files and hashes:         1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
                          2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
                          3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
                          4: hH5lYIIstKbYV8H358tnW54wm9U.roa (hash: RAsZHB1Yh42IjrJI10Ub1gqtfRjbrjmrW4OdMAOzHUY=)
                          5: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
                          6: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: AQ8uHX6nco8b19zjLKy/llKLtc7TD2X8y34FihvTqD4=)
                          7: yvMzPdRbVYmbJvMWc2zXq74usuI.roa (hash: etf/eWqAazEnJN6yxm72oD5OZcNfw7xVjQijbiFJx4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:c4:0d:f0:ef:a4:eb:7a:16:05:d6:cf:13:52:dd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: Sep 11 00:00:30 2026 GMT
            Not After : Sep 12 00:00:30 2026 GMT
        Subject: CN=c0fbf7ffebb1ce2538c19e2d1b92a47054bf4eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:35:f6:bb:6a:f9:4b:c3:91:e0:0c:c3:2d:
                    e2:d3:7d:40:59:2f:74:02:af:cb:69:73:75:c5:69:
                    80:fa:14:29:45:d2:13:9f:58:48:d6:66:0e:b9:21:
                    ad:c4:4d:77:b1:67:9e:03:50:3a:3d:4f:55:7b:09:
                    d2:ab:69:1f:e9:9f:cd:7d:c8:62:72:d3:3a:b2:b7:
                    e8:fd:ae:07:0f:13:43:8f:e1:8c:05:62:0f:1c:18:
                    d8:ae:f5:0a:52:0d:be:36:70:9f:a9:7e:b0:da:77:
                    b6:90:dc:8b:75:e6:9d:41:02:5f:cb:c0:6e:5c:2b:
                    9d:29:2f:b6:fa:c1:af:02:36:04:f0:c3:71:d8:12:
                    6e:57:a0:d1:49:dd:4c:fb:8b:71:70:4d:d1:25:a7:
                    59:34:63:28:c7:76:3d:63:52:e3:6b:41:6b:17:27:
                    9a:2d:8a:e1:7f:1e:5e:58:0f:26:17:14:82:0d:4f:
                    a5:65:8b:ad:f0:1a:47:35:91:33:c1:d8:5c:b3:9b:
                    6a:05:16:e4:0a:91:7a:52:ae:a7:82:1b:26:e0:68:
                    33:3e:0a:01:8d:79:2a:3e:c8:f3:5f:79:d5:d4:34:
                    98:4e:f0:2d:e8:7b:8a:e1:d9:b3:b4:6f:1b:f3:e5:
                    70:28:2f:2e:76:8e:8e:18:8d:79:4a:9b:36:8a:50:
                    f8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FB:F7:FF:EB:B1:CE:25:38:C1:9E:2D:1B:92:A4:70:54:BF:4E:ED
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:08:35:dc:13:b1:e5:50:e3:1a:61:64:4b:d0:60:ac:75:b9:
         b9:32:4b:8a:49:30:83:57:7f:36:fc:f1:ba:75:94:80:4c:10:
         fc:4c:04:14:48:17:f9:f2:5e:cf:1d:f7:29:7f:70:dd:a5:b6:
         c2:e2:97:b2:8f:e6:d0:89:6b:f9:a1:cd:c5:f2:73:c4:66:71:
         bf:b5:67:4b:f4:07:1d:4d:33:5e:63:b7:5d:02:50:80:71:73:
         37:0d:c2:a7:b9:a0:fb:02:84:f2:73:62:b5:e5:11:f2:c4:1a:
         be:29:c2:d8:c0:72:b8:ea:73:e9:f2:cc:f7:be:b8:1a:d9:7d:
         ca:a2:14:0d:c9:ce:15:00:36:72:29:90:4b:21:7e:34:e3:17:
         30:06:55:b9:5b:1b:4b:01:7c:4f:96:16:0e:c9:b7:e9:53:29:
         51:1b:73:07:e9:8b:4c:2c:9f:b5:54:a3:ed:79:9c:74:5e:a6:
         ae:a8:77:eb:e9:7f:20:1a:e0:49:a0:ec:ff:0a:77:e6:9b:c0:
         38:85:3a:d4:95:c3:f5:fb:fe:f5:97:c4:00:39:8f:bc:e4:79:
         ee:cc:6a:1d:c5:14:65:ed:ef:f5:2e:f9:62:69:fa:16:dd:48:
         ef:d6:cc:66:4e:aa:eb:b3:be:e2:b1:5f:c0:cb:a7:62:b4:d8:
         6f:15:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:14:05 2026 by rpki-client