Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          fku/GzGjf+sOkjJdJ+PwrlrsVmC/nZDlA7dOddG7Pos=
Subject key identifier:   9A:5C:61:C8:46:CE:19:31:33:29:B6:B5:81:1D:44:5E:CB:E0:BF:11
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       01A08979BDC1D711EE79A0579D3AB8138F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          09C0
Signing time:             Thu 10 Sep 2026 04:00:52 +0000
Manifest this update:     Thu 10 Sep 2026 04:00:52 +0000
Manifest next update:     Fri 11 Sep 2026 04:00:52 +0000
Files and hashes:         1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
                          2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: +d66xtrpuqXJ6ppbalp0lXQS/VKKW7/tfGwkqlWmlRc=)
                          4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
                          5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:bd:c1:d7:11:ee:79:a0:57:9d:3a:b8:13:8f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Sep 10 04:00:52 2026 GMT
            Not After : Sep 11 04:00:52 2026 GMT
        Subject: CN=9a5c61c846ce19313329b6b5811d445ecbe0bf11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:51:12:4e:89:81:6e:19:26:2c:d4:64:64:
                    7c:92:7e:71:aa:20:eb:61:a3:00:63:a0:1b:f9:39:
                    5d:02:66:d2:22:eb:e7:e1:34:e9:6e:a0:e4:5a:17:
                    a6:a9:c7:25:76:18:84:4a:d0:e0:aa:33:ab:bf:89:
                    1b:cc:61:e6:22:4f:dd:8b:2c:67:c0:ee:a8:d9:29:
                    b6:3b:e1:f1:95:f2:e1:06:49:45:e5:1e:a0:bc:8f:
                    e3:47:85:b5:12:47:5d:4c:01:db:9b:6c:34:e8:d5:
                    1d:49:4d:1a:cb:ea:c6:c3:9f:e7:ff:12:f0:fa:84:
                    20:9a:87:5f:d5:0d:0c:dc:d5:fd:8a:95:55:7c:e9:
                    7f:eb:cf:80:44:4b:79:2e:11:9a:33:e5:a6:38:5c:
                    ab:f4:65:d5:3b:97:78:dc:99:de:0b:83:43:7c:98:
                    9a:59:15:1b:0f:79:33:ed:ba:00:53:7b:4e:09:3d:
                    0f:a6:27:ba:e3:0b:3d:d4:6f:a3:9c:b8:8f:01:cf:
                    e7:a8:9a:f9:79:ed:f0:52:c0:6a:30:4d:c0:e6:74:
                    a3:51:25:5b:7c:b6:d0:71:44:ab:4d:be:99:ae:6c:
                    e6:19:54:0a:a2:c0:ee:f6:bc:22:d4:eb:50:e1:d1:
                    be:49:a8:06:11:88:49:35:a3:0e:1e:9e:e2:39:15:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5C:61:C8:46:CE:19:31:33:29:B6:B5:81:1D:44:5E:CB:E0:BF:11
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:c4:e3:04:b6:56:fb:dc:bc:19:af:5b:25:07:50:02:b9:
         a9:59:0b:9e:ba:99:c0:4f:31:08:81:01:83:7f:a1:f3:97:e9:
         8b:d0:77:c9:88:a5:79:8b:94:04:e0:8d:4d:6c:af:5f:f9:c8:
         12:d0:07:50:ee:10:46:72:62:ff:be:5c:14:90:ae:de:eb:30:
         b7:0c:2b:65:7f:c3:2a:8e:30:a0:3e:d7:98:cd:1d:70:d1:fb:
         50:b2:e1:15:ab:9d:f6:33:f9:4a:62:e9:d9:4c:6a:29:2f:1e:
         91:52:0b:4a:1c:48:ae:d6:45:3e:71:ee:fb:64:b9:7e:fc:35:
         ea:8a:2c:3b:0c:55:13:06:2e:2c:f4:3b:fd:5b:8a:9d:a2:18:
         df:9e:1b:b1:c6:52:86:e1:dc:42:15:90:14:1f:0f:cc:d0:e5:
         5e:5e:a1:a9:0d:f9:10:3d:cb:ec:de:76:a4:f7:58:93:04:67:
         fc:80:b6:6c:79:8d:bf:93:68:94:40:90:cd:ec:b2:37:65:dd:
         1c:ab:50:32:2e:44:30:0d:dc:af:b7:73:73:dd:5d:98:55:44:
         66:c9:57:95:86:9a:90:34:90:c8:55:1b:f5:90:fe:6d:1c:df:
         59:23:bd:a5:a3:79:2b:5b:bc:06:1a:fd:04:25:93:56:0b:77:
         44:f6:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:49 2026 by rpki-client