Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File:                     X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier:          tIkgbTqlkKYb1KlVR/vSiOWxEUuh7BrqCDNpVCjg5M0=
Subject key identifier:   4A:32:1B:85:8A:13:85:B1:89:DE:FC:9B:49:35:49:0A:33:37:11:83
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer:       /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial:       01A17A3AF3AB5D274854E37BB68784D5B083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number:          14D8
Signing time:             Mon 26 Oct 2026 22:00:46 +0000
Manifest this update:     Mon 26 Oct 2026 22:00:46 +0000
Manifest next update:     Tue 27 Oct 2026 22:00:46 +0000
Files and hashes:         1: OgANtrj8j6WImSC_x9463NVhsNw.roa (hash: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=)
                          2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: KLh9gQwnx4dBE0fGmL0/zHrijIyfdeWsG/yGuyf+U3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:3a:f3:ab:5d:27:48:54:e3:7b:b6:87:84:d5:b0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
        Validity
            Not Before: Oct 26 22:00:46 2026 GMT
            Not After : Oct 27 22:00:46 2026 GMT
        Subject: CN=4a321b858a1385b189defc9b4935490a33371183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:fa:bc:ae:f8:24:8e:6e:e0:01:81:d6:bb:
                    46:9f:e1:5a:1e:0f:9d:5a:fb:9a:7d:26:b6:bc:eb:
                    96:c8:9a:7f:16:81:d4:96:9d:7c:6d:7b:81:32:37:
                    26:19:d1:bb:18:8a:78:fb:54:56:ef:fb:d0:44:3c:
                    73:0b:6a:1e:47:25:46:88:c8:40:b1:1d:81:c0:97:
                    d8:39:b1:13:bb:f9:5c:7a:f2:48:63:e9:b9:69:0f:
                    11:80:ca:d4:4d:5a:44:cd:af:7f:e4:52:0f:26:97:
                    8d:f7:ec:15:91:1c:47:5d:aa:f7:b6:48:2b:73:6d:
                    99:4a:4b:04:8a:23:1b:75:96:1c:e2:6c:81:c8:05:
                    50:75:57:db:35:8c:ae:06:0c:af:e7:2c:8b:14:8a:
                    11:cc:94:c4:c9:df:8d:23:78:d7:28:b0:a5:df:a8:
                    5e:27:10:f6:a7:35:e8:17:0e:c4:23:38:68:3d:a1:
                    a4:ae:ba:cb:d3:56:86:d6:09:89:fc:d6:c1:bb:6e:
                    61:c4:d8:63:85:46:aa:e6:c5:1e:37:04:ac:88:16:
                    1d:8b:6a:3c:b2:86:64:66:9f:19:7e:15:1f:67:72:
                    98:a0:7f:34:ab:af:18:dd:de:a3:2a:f5:c6:36:8b:
                    8b:5e:13:62:b7:2d:c4:12:a4:5f:36:54:f4:c5:c0:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:32:1B:85:8A:13:85:B1:89:DE:FC:9B:49:35:49:0A:33:37:11:83
            X509v3 Authority Key Identifier:
                keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a5:05:c3:90:07:24:27:aa:03:a8:d5:6d:79:34:e8:17:8e:
         2f:72:09:3c:45:65:d9:48:b9:5f:b6:88:00:6e:c8:62:7d:55:
         b6:a2:22:8b:c8:fb:67:ff:12:ed:2f:23:d3:96:af:9e:af:3c:
         7d:d0:ae:96:6c:3a:df:ac:85:65:e9:2d:ba:fe:17:1e:c3:89:
         8a:0d:22:8c:ae:c5:80:ec:26:c2:39:fe:f7:07:c8:80:e6:f3:
         df:3d:79:7e:49:fb:ce:44:ed:27:48:ca:26:82:94:f9:80:3b:
         25:c4:ec:ff:06:f0:d8:85:b8:ec:54:ce:51:fa:c9:68:f1:06:
         4c:f1:32:3c:a8:41:2a:f4:bd:88:1a:b2:cf:0b:c8:5a:55:6a:
         89:e3:ea:03:8b:9e:fe:d8:8a:a1:ad:e6:7f:9b:ba:0a:42:d6:
         3a:4b:de:a7:4d:6f:84:e3:07:17:bc:e3:92:6e:d2:c0:ba:64:
         d5:6e:55:71:d4:a4:c0:48:b1:4b:c5:9f:4c:8b:02:10:25:5a:
         0c:ad:61:f9:de:e2:0e:8d:b2:6c:c2:99:68:1d:c7:42:0f:ee:
         cb:d0:8a:b6:87:ba:b3:f1:c4:27:78:00:04:f0:8c:10:09:65:
         ed:9c:86:12:ec:28:ac:af:58:ed:8c:9d:29:55:cc:4e:43:0a:
         05:35:2b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6OvOrXSdIVON7toeE1bCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm
NzJkOTMwHhcNMjYxMDI2MjIwMDQ2WhcNMjYxMDI3MjIwMDQ2WjAzMTEwLwYDVQQD
Eyg0YTMyMWI4NThhMTM4NWIxODlkZWZjOWI0OTM1NDkwYTMzMzcxMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6b6vK74JI5u4AGB1rtGn+FaHg+d
WvuafSa2vOuWyJp/FoHUlp18bXuBMjcmGdG7GIp4+1RW7/vQRDxzC2oeRyVGiMhA
sR2BwJfYObETu/lcevJIY+m5aQ8RgMrUTVpEza9/5FIPJpeN9+wVkRxHXar3tkgr
c22ZSksEiiMbdZYc4myByAVQdVfbNYyuBgyv5yyLFIoRzJTEyd+NI3jXKLCl36he
JxD2pzXoFw7EIzhoPaGkrrrL01aG1gmJ/NbBu25hxNhjhUaq5sUeNwSsiBYdi2o8
soZkZp8ZfhUfZ3KYoH80q68Y3d6jKvXGNouLXhNity3EEqRfNlT0xcCgUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoyG4WKE4Wxid78m0k1SQozNxGDMB8GA1UdIwQY
MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt
NGZhNjI0MmI4YTNhLzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh
LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKUFw5AH
JCeqA6jVbXk06BeOL3IJPEVl2Ui5X7aIAG7IYn1VtqIii8j7Z/8S7S8j05avnq88
fdCulmw636yFZektuv4XHsOJig0ijK7FgOwmwjn+9wfIgObz3z15fkn7zkTtJ0jK
JoKU+YA7JcTs/wbw2IW47FTOUfrJaPEGTPEyPKhBKvS9iBqyzwvIWlVqiePqA4ue
/tiKoa3mf5u6CkLWOkvep01vhOMHF7zjkm7SwLpk1W5VcdSkwEixS8WfTIsCECVa
DK1h+d7iDo2ybMKZaB3HQg/uy9CKtoe6s/HEJ3gABPCMEAll7ZyGEuworK9Y7Yyd
KVXMTkMKBTUrkw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:48:59 2026 by rpki-client