Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File:                     XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier:          tVtlUYP1Rn7lEzNYfZaBUSd8DYRopMEcvEPC9VSC1I0=
Subject key identifier:   9C:8C:56:05:13:FE:2F:D8:88:F5:DF:1F:8E:B9:45:B3:FD:55:CC:44
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer:       /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial:       01A1822B7706061AC7B97E04263F004CD89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number:          107A
Signing time:             Wed 28 Oct 2026 11:00:48 +0000
Manifest this update:     Wed 28 Oct 2026 11:00:48 +0000
Manifest next update:     Thu 29 Oct 2026 11:00:48 +0000
Files and hashes:         1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: hQElXqWqxHLB/syU62IXRJZ/7+Y+Q+p8DWfwt4TQMDM=)
                          2: cdVP4VMQTXg2CT86yVWAypk62nQ.roa (hash: LC40P/qPiuezV8f6FpcmDk2skf+yITxCG3dFo+ERAAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:2b:77:06:06:1a:c7:b9:7e:04:26:3f:00:4c:d8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
        Validity
            Not Before: Oct 28 11:00:48 2026 GMT
            Not After : Oct 29 11:00:48 2026 GMT
        Subject: CN=9c8c560513fe2fd888f5df1f8eb945b3fd55cc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:d2:15:99:97:cd:60:b7:89:07:b9:e4:32:
                    73:a5:e3:8b:fa:78:dc:0f:3c:5b:17:5c:79:dd:a7:
                    1b:6b:39:80:e8:dc:38:30:10:df:05:db:b6:b8:b5:
                    e1:ba:55:14:3a:68:66:38:ca:6d:02:b4:1f:f0:88:
                    a1:64:75:ad:b6:a9:c0:b0:fe:bc:18:09:fb:73:43:
                    5d:c5:96:b9:7d:ba:ab:2e:07:66:a8:10:c4:96:20:
                    7e:90:c4:75:28:1c:30:2b:9b:a2:36:1d:a3:46:d0:
                    a3:06:c8:90:e4:5d:cc:85:ec:ea:69:82:70:79:c6:
                    5c:04:38:30:ba:36:13:97:90:fd:48:0f:10:da:07:
                    99:fa:9a:1c:70:bd:11:78:f7:ba:46:95:9c:d1:95:
                    81:74:63:d2:82:43:ae:5f:2e:a0:af:09:09:eb:6c:
                    ac:44:14:7b:19:49:f8:19:e9:85:c0:e9:dc:65:71:
                    a7:b4:5d:cd:da:f1:5b:e4:ee:bc:07:fa:15:3e:09:
                    7d:d1:cb:51:6e:dc:77:be:64:d8:bb:34:f2:d2:8a:
                    ce:3b:00:26:e0:61:80:c0:b1:98:7a:d6:7f:28:e1:
                    18:c1:e2:56:00:f4:4f:e7:05:1a:30:d7:76:93:33:
                    94:ac:c5:de:29:f2:a5:21:02:90:65:30:04:9b:f2:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8C:56:05:13:FE:2F:D8:88:F5:DF:1F:8E:B9:45:B3:FD:55:CC:44
            X509v3 Authority Key Identifier:
                keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:6e:3b:96:5e:bb:ab:e1:61:e7:e0:28:a5:c1:d1:b3:0f:
         b3:9e:97:35:74:f9:85:73:57:7f:99:8d:47:55:3c:18:1d:9d:
         d8:97:e8:e4:30:3a:c0:cb:20:eb:14:48:ee:b6:f9:b9:7f:d7:
         c6:be:f7:29:9d:a8:13:0e:91:55:ea:f0:54:78:b5:4f:85:52:
         2c:b6:e3:33:20:3c:de:93:74:cf:00:ff:76:c8:8d:e2:05:5f:
         93:54:49:6c:f6:5e:56:5f:c6:79:67:66:47:91:46:b8:8c:f5:
         57:a3:9e:ee:19:76:1f:ec:60:f4:71:6a:74:b4:e4:55:7c:33:
         67:53:20:32:0e:69:f6:a7:b9:a8:c5:38:d6:0d:b4:ef:57:1d:
         f1:76:c5:9a:21:53:b8:4d:ed:f7:88:b5:60:b9:d5:d6:9f:f6:
         f1:7b:c2:1a:eb:50:6a:8c:68:3a:cf:00:04:23:c4:9a:55:4c:
         56:e9:f1:10:5a:c7:da:55:79:b1:f5:5d:a7:e1:42:a4:1b:38:
         6d:50:ea:f4:e2:87:03:a3:06:76:c6:ab:f9:b9:6d:92:1e:8c:
         0f:c8:38:06:31:e2:28:19:34:57:e0:4b:f7:df:45:ba:a6:bb:
         e1:6a:ba:76:08:d9:cf:26:4d:41:c9:11:ae:b8:64:8c:ac:73:
         ed:ec:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:20 2026 by rpki-client