Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          mora9crXOkXbcwIJ31e//odkHuU+TSTFMBEcAlOCPfI=
Subject key identifier:   2C:29:C9:2D:2A:15:83:9E:FF:95:53:D2:4D:26:B7:DD:35:90:A9:F4
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       01A17DE1D85B0F6753E4DB90FCA4406893AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          09A6
Signing time:             Tue 27 Oct 2026 15:01:55 +0000
Manifest this update:     Tue 27 Oct 2026 15:01:55 +0000
Manifest next update:     Wed 28 Oct 2026 15:01:55 +0000
Files and hashes:         1: 7VD9FedHhDKp3jdPS8TH2m8uSuc.roa (hash: xZcVVNzE+1lnqo21oPoTvLeW+I9A4gbqd0xRQIvFm5Q=)
                          2: SIDQ9sVBzRAafOCm9UYDrXMxlh8.roa (hash: kvIxSm7iZMTEjZ77jOpCtNSAajMjFLsT+5gwQRQ5+oM=)
                          3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: iDjoRtEr0NELgXmaLh1Rf5PgbNH3nzpJeBwG6dIzwJE=)
                          4: e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (hash: hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=)
                          5: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (hash: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e1:d8:5b:0f:67:53:e4:db:90:fc:a4:40:68:93:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Oct 27 15:01:55 2026 GMT
            Not After : Oct 28 15:01:55 2026 GMT
        Subject: CN=2c29c92d2a15839eff9553d24d26b7dd3590a9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:01:4b:ea:94:e5:79:66:5b:7b:27:0f:87:
                    78:97:b4:d2:55:a5:6c:12:c1:c2:48:e5:cd:03:7a:
                    22:97:bf:02:1c:25:67:3f:4d:1b:ae:06:cd:92:36:
                    96:4f:d4:7b:6b:fd:1e:c2:d7:0a:89:9e:16:f7:a3:
                    33:f3:bb:03:fc:c1:ae:43:d9:0b:61:fe:35:17:dc:
                    3c:f4:8f:a1:02:7f:0d:f0:5c:c5:7b:5c:4c:ff:f0:
                    15:ff:96:23:ab:75:e2:59:1a:39:33:4f:b1:24:59:
                    c8:a4:54:06:bc:1b:5f:92:85:e0:1e:35:0b:25:a3:
                    ea:b5:b4:e9:18:a0:04:be:ad:ab:71:be:f4:09:ee:
                    7e:79:a1:e6:58:f5:40:44:63:ad:16:38:e7:20:f2:
                    7a:a3:62:a4:d0:4d:8b:11:f4:a0:bf:cf:95:5e:d4:
                    44:1d:0e:9b:17:d5:92:66:74:25:2c:3a:d4:ef:56:
                    7c:80:6d:9f:8c:77:8d:ed:2f:4a:43:9b:41:5c:a8:
                    cc:df:f6:23:7d:f9:ee:44:c4:c4:5a:9e:36:13:d0:
                    00:17:09:18:a2:19:7f:f6:86:6a:ba:8f:78:89:48:
                    7f:ce:8a:d3:ee:24:fe:1e:1b:6c:0c:52:f3:31:cd:
                    2a:55:f1:81:e0:bc:8b:b3:eb:8a:d6:14:7c:72:1b:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:C9:2D:2A:15:83:9E:FF:95:53:D2:4D:26:B7:DD:35:90:A9:F4
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:cd:cb:b2:89:fe:0c:dd:bc:a3:64:6a:11:d1:1f:84:60:
         a0:fb:58:83:fd:df:73:16:11:76:14:f8:db:6f:08:9a:c1:8a:
         b8:91:76:3a:85:23:19:9c:9e:a2:16:28:e5:f1:61:b3:ba:87:
         14:68:f3:4c:3b:d5:aa:5d:75:6f:33:79:4b:86:30:6c:14:0b:
         08:98:53:67:97:d0:b2:43:d9:84:df:b2:c4:01:ef:ba:69:1b:
         de:9f:74:05:8a:84:47:c9:52:44:7c:cd:03:31:d4:bc:a3:60:
         10:ba:3b:b6:e6:1e:08:bd:12:d2:01:09:d6:82:ae:bc:a9:46:
         cc:d7:54:2d:40:e3:4c:f1:89:10:70:1d:0c:f5:a3:6c:80:b8:
         96:ee:bf:68:b0:7b:2f:4b:af:0d:02:1e:df:b1:fc:60:6f:70:
         66:22:bd:7c:bf:1f:39:9e:4f:7c:8a:a4:c5:d7:62:f2:d6:1e:
         ec:a7:35:58:bb:1a:ed:ed:63:81:f3:99:3f:35:ae:19:e4:45:
         1e:18:b9:78:b9:16:d3:40:d7:5c:b3:9d:19:50:a5:8d:1e:03:
         d1:8c:67:77:88:e1:0e:40:e0:83:31:00:89:9f:90:25:b1:33:
         a1:ca:94:69:7d:77:cd:bd:fb:c9:95:19:09:0b:96:cf:8a:95:
         11:a5:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:41:56 2026 by rpki-client