Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File:                     xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier:          Ej3nVDDSCzby28OLSCA3n2krOcrrwPPLKjwDA1UeX00=
Subject key identifier:   28:F9:72:4B:7F:46:94:C4:A2:4A:99:67:29:D7:32:2A:7C:AD:07:11
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer:       /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial:       01A001DD724CBB9E8BCD3A8C7599E441559A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number:          093F
Signing time:             Fri 14 Aug 2026 20:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:24 +0000
Files and hashes:         1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: bxNqxA4/vNGd2ZZZozB8wXu4AOIECAWfRA5UX5i6M6k=)
                          2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:72:4c:bb:9e:8b:cd:3a:8c:75:99:e4:41:55:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5947a414a8830515656d738a78382890160377d
        Validity
            Not Before: Aug 14 20:01:24 2026 GMT
            Not After : Aug 15 20:01:24 2026 GMT
        Subject: CN=28f9724b7f4694c4a24a996729d7322a7cad0711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:67:88:d9:de:da:ba:72:1d:50:b9:6b:b2:
                    56:17:05:f9:1b:91:84:c3:25:ef:d7:35:e6:8f:9a:
                    28:ba:ee:ed:ac:9b:31:51:cf:dd:62:50:d5:ce:84:
                    d6:2a:d8:f8:e4:c0:cb:4d:59:cb:dc:70:cb:c5:8d:
                    a0:e3:dd:86:7b:ab:06:83:cb:b8:05:14:1e:92:42:
                    c7:21:ec:95:9c:75:f9:32:a8:40:09:0b:4e:60:ff:
                    90:ad:06:b3:3d:9c:52:87:90:df:7e:7c:ea:ec:ed:
                    b2:29:0c:59:5f:b9:82:e7:5c:bd:64:aa:b8:5e:7f:
                    98:9e:03:86:7e:82:91:7e:5d:84:8b:2d:70:54:13:
                    15:5c:d4:30:37:ad:fe:2d:f9:bb:05:a5:3d:63:ac:
                    bf:8f:a8:71:60:da:38:c0:87:b8:31:93:fd:b4:5a:
                    a0:c4:9d:ba:98:42:e0:71:79:5c:65:f1:84:1e:26:
                    23:3f:ce:f3:e7:de:1c:3c:dd:59:b2:dd:da:c5:88:
                    a4:95:b6:92:19:e7:9f:88:10:20:1d:89:6a:78:37:
                    43:1f:9d:d6:b0:fc:49:0f:bd:16:01:55:75:f6:1a:
                    e2:81:5a:f9:02:85:06:44:20:89:03:ca:0d:87:64:
                    37:ce:db:fb:17:60:bc:31:08:0a:24:40:1c:ae:4b:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F9:72:4B:7F:46:94:C4:A2:4A:99:67:29:D7:32:2A:7C:AD:07:11
            X509v3 Authority Key Identifier:
                keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f9:84:1f:48:35:35:7d:9b:3a:da:1e:8d:aa:65:98:e5:c1:
         0f:76:d3:59:b8:96:a1:d0:a1:6b:a5:91:d8:4a:8e:65:06:87:
         26:ac:88:77:d1:2d:fe:1a:eb:ef:01:96:33:de:72:8c:67:e6:
         6f:0f:74:b7:87:a4:78:6a:4f:ce:dd:8f:16:df:76:27:fe:c7:
         ef:d0:27:98:d3:a3:81:af:e8:75:dd:e7:1c:69:7d:b1:67:de:
         e0:ce:65:86:62:ce:82:2b:9f:bb:36:fc:de:bd:e3:64:b9:3a:
         09:99:95:6f:2e:02:63:37:ac:13:8d:f8:06:f8:de:e9:af:e8:
         ab:23:46:c5:93:b5:7c:83:c3:28:fe:7d:f5:32:5e:e9:74:05:
         3b:02:d3:1c:30:8b:67:6f:15:31:1a:89:29:18:7e:5e:00:4a:
         cd:2b:fb:c1:5c:10:a5:1e:9f:d7:ec:1c:bc:0c:a3:12:ef:77:
         36:8a:54:5c:e3:84:90:c1:e1:c5:e8:db:0a:2b:90:0b:69:66:
         b1:d7:60:cb:e8:85:39:a3:38:5f:b2:d8:27:c4:4c:66:9d:e1:
         e8:0b:bf:62:1f:ec:de:86:e9:5e:5b:c6:85:be:94:8e:5a:f3:
         7f:16:73:a7:cd:01:bc:ad:4e:fc:67:ce:c8:ce:ed:51:73:c1:
         85:89:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:10 2026 by rpki-client