Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          yLDUt8l6WbyhTz28Gqm5ZR5/0t8iPdHmEb9HKQLH9Bg=
Subject key identifier:   64:23:DD:F1:C2:2F:1D:70:C2:9D:4A:8F:79:F1:DD:70:59:FE:40:3A
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       01A1A4EDDB4AC7A151FBC7F505895A00F13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          1424
Signing time:             Wed 04 Nov 2026 05:00:13 +0000
Manifest this update:     Wed 04 Nov 2026 05:00:13 +0000
Manifest next update:     Thu 05 Nov 2026 05:00:13 +0000
Files and hashes:         1: AGGhluGFEICw55ju4TycffudhH8.roa (hash: tJcRE21n7ilMJT0RZ9e1adylptP6kCgkq842wuhhP6M=)
                          2: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
                          3: HRIhwEGo9k5MDZh2v0iMwSG0qac.roa (hash: cbBWsRzGijvkkbsuZLFU/wPbUMhwo+cAOpoz/z5OCD8=)
                          4: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
                          5: _lfdoiLagSclQFLhRG9TZSert0s.roa (hash: BzO/SBnCrjXko5DW8YSZkFc4F4C9Udpc0JMuFJcr16U=)
                          6: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
                          7: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: 8OgNiGs4tvVPbj1ArNPoJ8VyTCGwa2C73tA78hfxcrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 01:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a4:ed:db:4a:c7:a1:51:fb:c7:f5:05:89:5a:00:f1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Nov  4 05:00:13 2026 GMT
            Not After : Nov  5 05:00:13 2026 GMT
        Subject: CN=6423ddf1c22f1d70c29d4a8f79f1dd7059fe403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:bd:31:77:ff:a6:ea:8a:58:17:95:af:3d:
                    0a:11:26:c8:c2:d6:80:e3:16:3e:0e:73:fd:b3:41:
                    e0:0a:1d:17:f2:c1:e4:48:10:9c:42:55:aa:7a:56:
                    63:98:e5:16:fd:4e:13:43:03:78:88:f3:08:25:c2:
                    49:3f:4f:45:10:a4:bd:14:8c:32:50:df:db:bf:46:
                    d2:db:6c:0a:7c:72:f1:4e:19:a1:f1:87:56:92:f3:
                    4f:f3:eb:27:b2:c5:29:4d:d8:03:6f:07:bf:4d:45:
                    a1:12:30:f4:d1:f5:ff:04:3d:79:ab:73:4e:b9:e7:
                    df:94:30:48:b9:16:ff:ef:7e:f9:82:f8:5a:81:b0:
                    d5:42:b5:96:a7:4a:69:9d:d8:1c:e5:ae:dc:6c:67:
                    a0:96:b1:b8:26:a7:ce:da:c3:ca:f9:a4:29:1b:c6:
                    8c:66:cd:6c:ee:c7:29:d6:f6:eb:44:e8:23:3b:54:
                    ba:12:02:60:55:ca:22:bf:f7:39:45:21:a5:e3:83:
                    cd:1c:c8:2f:71:f9:32:01:da:53:d2:53:ad:e2:a0:
                    e5:47:85:50:75:4d:6e:53:94:89:ec:bb:eb:af:63:
                    49:db:1f:55:e1:7b:d2:ba:75:e5:ce:dd:51:e4:ce:
                    38:f8:37:2a:bf:48:bd:16:9a:a9:cb:00:52:40:20:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:23:DD:F1:C2:2F:1D:70:C2:9D:4A:8F:79:F1:DD:70:59:FE:40:3A
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:07:94:ba:02:61:16:cc:2e:40:38:82:48:b4:f3:00:3b:
         0a:7b:5d:6e:11:81:75:6a:88:4b:17:fe:89:4d:99:97:56:3f:
         c5:3e:86:92:cd:a9:44:1f:49:95:78:0f:50:cc:8e:6c:3f:15:
         4c:3a:17:f4:57:c0:73:17:2b:19:ac:58:84:f0:23:59:a0:ff:
         0a:5b:9f:e6:44:cf:c7:62:bf:8f:5f:ac:7e:20:91:f3:bc:45:
         7c:7b:b3:e0:9c:b8:6a:d5:f5:87:69:30:35:49:33:39:10:80:
         17:2b:cc:75:fb:43:a4:3e:7c:c0:a0:3c:ed:d5:5f:5b:a4:c8:
         90:f2:37:af:51:a5:76:93:4e:00:1a:27:50:0a:b0:9d:0d:32:
         57:42:af:ed:b2:be:e2:06:81:38:62:ef:6c:52:0c:73:0b:b4:
         a2:f7:c0:b4:95:59:0c:97:59:aa:2c:50:7f:00:24:71:89:33:
         79:ec:1b:0d:77:54:87:9f:20:69:3f:44:3c:56:f2:05:64:8f:
         26:52:6c:04:bc:a8:a1:90:7a:0a:ee:a5:43:f9:f2:da:1b:f5:
         89:fd:3f:75:67:da:19:61:13:5b:4a:52:5d:73:36:ee:ed:77:
         2c:5a:4c:e5:2b:7a:fc:37:ca:3e:fa:d7:57:20:10:93:bd:06:
         98:c7:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 09:38:54 2026 by rpki-client