Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
File:                     cxr_GtmPWxpYwO179ZVNRqxpqX0.mft (raw, json)
Hash identifier:          TuCnFx0VWPTVuVI6ip9BfoV8eCOS2WsEvS2qGnkPFU8=
Subject key identifier:   54:B7:ED:D0:7E:0F:3F:42:54:4F:A2:DE:6B:A8:A8:F1:A7:B7:48:FC
Authority key identifier: 73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
Certificate issuer:       /CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Certificate serial:       01A117F3F1AB16EEFCF15884E83F09113EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
Manifest number:          010B
Signing time:             Wed 07 Oct 2026 20:00:25 +0000
Manifest this update:     Wed 07 Oct 2026 20:00:25 +0000
Manifest next update:     Thu 08 Oct 2026 20:00:25 +0000
Files and hashes:         1: 6kl226BoKPatXqH-G4ESWpFt8PI.roa (hash: DAR9tJljAJznRmywtMPx4oPb201hbh/d1GIS4ZxDEnU=)
                          2: CpwJHamX3s4jWnYcAa8QCmKY4rg.roa (hash: 89U2iRmH/tQ9pJ58ExZmeppXf1oLInBv/nRgnRGClC8=)
                          3: MD01cmZnnlwsixl4zb4iNIv80Do.roa (hash: xZkexBZwyclrdYp0+CSreOyRAK1MNsO9cG6O13KYEhQ=)
                          4: Oa1C2BiJUB2DPinZHDtphEprA0w.roa (hash: INR06IqVsKSdmdf46tvWiLyHqQeLCDTxEJjybjAgDxs=)
                          5: RduCDzabknqx75Z7msEvHVBFkGM.roa (hash: 6PmmB7OhBUhbkEYJC3o0vaIC4G1noOIy4/skgep5Xfw=)
                          6: cxr_GtmPWxpYwO179ZVNRqxpqX0.crl (hash: 7/DhyZdzYq5JBUG78vv8gjXNiTlTk49HBZXqEiDHjwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:f3:f1:ab:16:ee:fc:f1:58:84:e8:3f:09:11:3e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
        Validity
            Not Before: Oct  7 20:00:25 2026 GMT
            Not After : Oct  8 20:00:25 2026 GMT
        Subject: CN=54b7edd07e0f3f42544fa2de6ba8a8f1a7b748fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:3c:bd:9f:15:2b:8d:aa:f9:a3:42:2d:9a:
                    60:bf:a0:bd:d9:62:8e:bc:99:64:9d:42:3a:fc:c5:
                    15:e6:2c:50:09:f2:82:3c:3f:af:d1:49:85:88:d5:
                    03:ee:bc:aa:13:1a:6d:d3:0c:d8:c4:ca:74:84:92:
                    b3:05:2b:24:13:e0:26:60:c9:99:b9:ca:62:a6:1e:
                    7d:62:30:60:d0:88:df:24:7c:dd:bb:98:77:e4:76:
                    00:ab:a4:75:d2:61:3c:af:84:53:38:af:e3:cc:94:
                    9b:a1:98:0d:c2:c2:cf:1c:8d:91:16:38:8d:56:09:
                    67:b9:4f:e0:be:cb:33:63:e1:c1:df:4b:bc:dc:5e:
                    dc:31:5a:83:31:2b:30:9c:65:ff:a9:68:ac:36:42:
                    1d:05:9a:d5:f8:4d:07:35:26:5d:0d:4f:d2:71:e4:
                    cf:33:7f:6c:20:a2:89:78:d2:4b:3b:d3:d1:12:3f:
                    16:e3:53:9a:f7:ba:b5:da:6c:ec:a6:d7:1e:e2:f6:
                    30:aa:ec:90:a8:df:4a:7d:57:a0:09:98:1e:c5:fa:
                    50:aa:b6:bf:88:86:ec:28:fb:fb:01:9b:51:43:31:
                    47:60:4d:a9:41:91:d3:84:f9:0a:32:44:8d:20:2a:
                    e1:e6:da:2d:35:9b:00:7b:e8:f3:89:1b:b6:fb:bf:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B7:ED:D0:7E:0F:3F:42:54:4F:A2:DE:6B:A8:A8:F1:A7:B7:48:FC
            X509v3 Authority Key Identifier:
                keyid:73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:38:b8:f6:82:38:75:72:ed:e0:85:ec:6f:34:a3:da:de:
         c1:66:82:95:88:e5:db:8e:99:3b:31:17:2b:9d:b1:c4:85:f9:
         78:29:c3:2d:54:ec:e1:3c:ff:c3:e4:d9:b2:b6:74:d8:fd:e5:
         6d:1e:68:a4:58:2f:4e:22:59:21:ee:ab:75:42:22:0c:a2:73:
         0b:27:3e:79:61:50:c1:68:97:5d:17:62:6e:3f:0c:47:02:86:
         da:9f:cd:01:c8:d7:21:5e:ad:26:df:38:8d:aa:34:03:29:32:
         96:2e:70:92:b0:0b:bc:15:c9:c1:27:62:94:ce:bc:ff:e3:b1:
         6f:a4:b3:93:ee:3e:3c:7e:6c:42:66:f3:c5:7c:72:ab:ab:92:
         f8:e6:3d:c2:7c:af:f5:7c:cf:7e:5c:55:6b:ad:c6:c5:40:d4:
         d1:92:9a:83:57:01:bb:f4:02:d1:52:01:bd:df:d4:2e:05:31:
         2e:1d:da:99:69:a0:63:f1:70:ac:00:c5:05:b6:a6:e1:e5:f5:
         88:2b:b2:27:77:b0:dc:d9:e0:a6:bf:18:cf:46:98:69:86:51:
         e2:8b:48:2c:ef:28:41:71:14:da:6d:51:2a:d6:71:3b:37:75:
         b7:aa:c6:df:1b:0f:88:3c:75:b2:77:a2:3a:7a:07:c7:03:af:
         35:75:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:55:07 2026 by rpki-client