Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File:                     xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier:          9lWHUpTyy7giliNQutRpqwE/rJcsUmdM4/33RXUWofg=
Subject key identifier:   C6:5F:70:AE:AE:AE:72:75:0B:55:BB:9B:4D:23:E8:75:CD:D6:98:9A
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer:       /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial:       01A08CE88DFF8E3557AA806A31C9DEFAC1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number:          0B41
Signing time:             Thu 10 Sep 2026 20:00:45 +0000
Manifest this update:     Thu 10 Sep 2026 20:00:45 +0000
Manifest next update:     Fri 11 Sep 2026 20:00:45 +0000
Files and hashes:         1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
                          2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
                          3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: aRfBXC3cgAQZXyNFCamB1wQipXw6vbf5dYHkXBGREcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:8d:ff:8e:35:57:aa:80:6a:31:c9:de:fa:c1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
        Validity
            Not Before: Sep 10 20:00:45 2026 GMT
            Not After : Sep 11 20:00:45 2026 GMT
        Subject: CN=c65f70aeaeae72750b55bb9b4d23e875cdd6989a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:79:52:f0:1c:27:2f:14:a9:08:f4:dd:92:
                    28:36:8f:8b:8a:5a:2c:58:b7:83:2e:9e:fa:0c:cd:
                    2a:c6:80:86:55:46:e1:f3:ca:5a:9b:2d:13:7c:3d:
                    58:c6:c7:6a:e7:0a:f6:da:04:d8:47:ce:86:31:9f:
                    08:a6:f6:f7:a8:98:5c:02:7f:fc:dd:cc:97:67:e1:
                    59:2b:9e:f6:c9:f5:a7:61:21:30:31:b4:de:c4:d2:
                    e9:a3:db:88:cb:a2:d7:bd:2a:66:d3:1b:25:21:5f:
                    9c:70:02:b2:59:eb:58:3e:b7:e5:9e:1a:03:ca:89:
                    50:eb:87:7f:f7:e2:ba:7d:c4:8e:91:5c:a3:bb:ae:
                    58:aa:5f:c8:36:46:39:29:b1:32:6c:c0:03:07:13:
                    25:ce:2c:34:ba:7e:84:45:fe:d5:38:09:2f:2a:7c:
                    96:57:3c:fd:b9:54:57:89:09:d6:0a:da:2c:43:45:
                    08:4e:12:e1:93:1a:30:2e:83:32:a2:61:d4:a5:4c:
                    b8:90:3d:db:42:81:d3:d0:11:f0:e5:69:02:4b:4e:
                    65:1e:73:dc:15:6e:44:68:0e:c4:17:74:93:54:52:
                    fa:68:fc:3b:dc:58:1c:30:59:3b:34:2e:2f:31:64:
                    00:6b:7f:1c:2d:52:ef:ce:9f:5a:30:b9:af:4c:f9:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5F:70:AE:AE:AE:72:75:0B:55:BB:9B:4D:23:E8:75:CD:D6:98:9A
            X509v3 Authority Key Identifier:
                keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:c7:b5:82:7a:1f:7b:c7:4c:7f:f0:cc:c6:dc:dc:cf:7c:
         2f:62:91:52:fc:94:9f:16:a9:1d:77:9c:ef:64:b0:e0:39:6b:
         c4:1b:25:16:30:f8:c0:59:ce:91:58:fa:67:12:5f:cd:18:78:
         e9:b6:11:d2:35:5a:94:fb:65:65:3a:9b:5f:32:dc:04:0b:11:
         1b:e2:35:69:ac:b7:53:f0:17:a4:c0:db:0e:75:62:2a:7f:71:
         e8:59:98:09:89:42:d0:ab:0a:aa:70:9b:c9:15:a5:6a:2b:4d:
         77:05:76:d8:78:24:9e:48:5f:88:51:0c:5e:3d:c7:44:62:8e:
         35:cc:ff:10:40:3f:39:1a:92:2c:05:32:30:62:8e:ff:f6:22:
         a6:6a:bf:cb:c6:00:b6:93:e1:aa:ea:c3:ea:21:95:fc:14:7f:
         64:dd:9c:1d:9c:fe:2e:0f:f0:ae:3f:94:a5:c0:35:1d:b1:86:
         aa:84:fe:a0:60:92:bf:51:10:63:8f:6d:61:1d:5d:72:6a:63:
         8d:f1:98:8e:b4:d3:77:55:3f:bf:fc:e2:7c:28:23:6d:bd:c0:
         a3:46:1b:2a:dc:ce:50:54:f1:40:33:f2:3e:c3:88:83:d1:0b:
         b9:92:78:f2:d4:f3:3b:3c:0f:5c:d2:a9:d9:0e:3b:42:e0:a3:
         d9:f6:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:41 2026 by rpki-client