Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File:                     XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier:          txZ091oaka9isXqvRwIUl+Pzep81HJdNvi3JfXBZIgI=
Subject key identifier:   9B:BF:9C:48:9A:2F:E6:C2:A6:FC:D2:71:87:FB:36:F3:08:5E:64:8B
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer:       /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial:       01A13C00C71B105A70BD9F7B51F0085FDD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number:          1AB4
Signing time:             Wed 14 Oct 2026 20:00:46 +0000
Manifest this update:     Wed 14 Oct 2026 20:00:46 +0000
Manifest next update:     Thu 15 Oct 2026 20:00:46 +0000
Files and hashes:         1: 3LD6WIAhD_aIwcAd82VY9zFCI7I.roa (hash: 8HYsxXGY/mwoE0plHWwgkDJBrIUo/WJsQuXAN4HGlQY=)
                          2: Vcrxz5upkyAccEnWWkm1jKbiHCU.roa (hash: DF9acpeNSt3QcU3RLTkyAoSPyBTgnqf4yVUPlH/IEUw=)
                          3: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: 9SHds9W4nKSCTq/vq2kwvctP3vR+s8U5iDxjQMbxXK0=)
                          4: d61QkjArffvt5fKMvIXWF8nIPcE.roa (hash: n77B2cSkql2uFL2mgGTUwbPJJQCN8pumVVKiMumdlmQ=)
                          5: vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa (hash: rxEx9pdbLlzRrifCSn69fPPljhSEaN1XwXY/F5cFM9M=)
                          6: x9IxkDkzEkDokkzWh7NpXLA6pSU.roa (hash: HHdD49yqs88lPuXMSPj56CT2/FilbQVuZopBY9/6oH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:00:c7:1b:10:5a:70:bd:9f:7b:51:f0:08:5f:dd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
        Validity
            Not Before: Oct 14 20:00:46 2026 GMT
            Not After : Oct 15 20:00:46 2026 GMT
        Subject: CN=9bbf9c489a2fe6c2a6fcd27187fb36f3085e648b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:e1:a9:c5:3d:d0:b3:5c:6e:ea:19:39:fa:
                    26:1d:e9:11:63:fe:95:b9:76:f9:f7:aa:d5:6d:b7:
                    16:59:0f:a5:14:ae:57:0f:46:96:6e:e8:26:80:b3:
                    ba:9d:2b:ad:00:10:c4:b3:0f:80:33:53:09:44:27:
                    ba:01:1a:ba:f6:03:64:1a:12:e6:5d:a8:ed:d2:10:
                    93:0b:7f:7d:c1:c1:ae:fb:1b:dd:53:5f:f7:13:36:
                    f0:7f:69:b4:ef:3f:da:02:33:6c:a0:70:7c:6f:10:
                    17:02:d4:3f:a9:ce:bf:10:1f:8b:a2:84:b5:91:fd:
                    1b:9e:7e:20:fc:4a:92:ff:b9:f3:e8:62:cc:1e:ba:
                    dd:c9:ce:3b:08:94:54:45:eb:77:af:6c:7a:73:2b:
                    bb:e2:81:b7:6d:d8:b3:84:75:35:85:e9:3d:ad:15:
                    1d:7f:d0:fa:8b:2d:19:51:18:ec:b4:f2:69:db:64:
                    83:63:2b:5a:6f:1e:9b:e2:38:70:04:01:f7:f7:a6:
                    16:0d:13:8c:93:c9:d7:dd:59:05:59:bf:c3:35:43:
                    90:21:31:31:c1:ad:b9:e5:3f:e4:90:51:6f:98:d1:
                    70:f4:dc:68:a2:8d:3d:8c:52:d8:75:38:45:c2:cf:
                    a8:e9:8e:48:97:18:97:bd:41:12:a4:bf:1d:44:cf:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BF:9C:48:9A:2F:E6:C2:A6:FC:D2:71:87:FB:36:F3:08:5E:64:8B
            X509v3 Authority Key Identifier:
                keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2a:76:9e:6e:8d:04:82:4d:57:62:42:f0:e3:a6:f2:51:c8:
         08:1f:da:27:b7:4e:76:d4:1d:c6:2a:d7:d2:66:5f:fc:ab:72:
         2a:c4:a1:a3:60:92:dd:36:68:9d:96:01:0c:2d:aa:19:80:86:
         bc:37:b8:8c:04:ae:9c:6e:02:d1:06:60:34:11:a4:ba:b2:4f:
         3d:55:94:05:d3:9f:7f:9a:90:16:15:34:65:d1:cd:9d:25:63:
         e6:6b:44:07:67:f8:45:06:22:24:6d:b3:59:14:40:cd:fb:a8:
         8f:cc:72:b0:fc:7a:34:5c:09:fd:91:9b:cc:68:2f:a2:00:d8:
         35:34:33:b3:c3:cc:00:5a:a8:0b:f9:2b:44:d0:a0:03:f8:31:
         94:c5:6e:ec:77:d4:20:2b:7d:fb:36:83:a2:99:e9:91:04:1f:
         8f:3b:bc:62:d5:25:a4:4c:2a:e8:7d:75:5c:ff:10:b3:42:41:
         c8:27:7c:4e:e8:16:f6:4a:df:e4:07:66:ea:df:a0:fd:e1:de:
         02:dd:10:52:b7:46:da:09:64:a5:82:46:0c:7b:ba:de:0e:eb:
         49:2f:2b:f6:f9:3e:1b:91:ae:99:15:8d:91:39:5d:ba:e4:70:
         7c:c1:1d:89:f1:2d:61:0b:41:32:0b:b9:ad:7f:6c:fd:04:21:
         6b:aa:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:26:59 2026 by rpki-client