Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File:                     x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier:          0492rlWNFegFAaPvcrdU4nSx4AueHG4lvacD7FS6PDw=
Subject key identifier:   69:E9:BE:78:B9:12:84:E2:B3:5C:05:5C:8B:16:F0:F8:8C:F8:06:56
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer:       /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial:       01A17ADF64F809309C554E15BAA53E29FD4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number:          15D9
Signing time:             Tue 27 Oct 2026 01:00:23 +0000
Manifest this update:     Tue 27 Oct 2026 01:00:23 +0000
Manifest next update:     Wed 28 Oct 2026 01:00:23 +0000
Files and hashes:         1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
                          2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
                          3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
                          4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
                          5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
                          6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
                          7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
                          8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: /J394bVt+OBOECnRCBmumeduU+uGJESr7XUskCI8h5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:df:64:f8:09:30:9c:55:4e:15:ba:a5:3e:29:fd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
        Validity
            Not Before: Oct 27 01:00:23 2026 GMT
            Not After : Oct 28 01:00:23 2026 GMT
        Subject: CN=69e9be78b91284e2b35c055c8b16f0f88cf80656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:63:ce:0a:c0:8d:32:90:91:7a:26:7d:c4:
                    59:ee:58:cf:61:b5:47:12:9d:64:cc:8a:80:30:eb:
                    4b:a9:5c:42:2a:65:44:f5:cd:70:02:45:a6:35:5c:
                    5a:45:28:1b:23:43:ba:08:97:18:74:34:99:d9:66:
                    26:21:ae:30:62:6f:ac:5d:0c:e6:db:96:b7:02:3b:
                    56:14:8f:c3:0a:83:2e:01:46:d7:1c:eb:44:58:ea:
                    9f:92:36:d9:7d:30:da:e8:84:17:fd:00:69:f4:a9:
                    6a:99:dd:64:61:5d:cf:d4:7d:8e:fc:40:17:f0:3c:
                    12:68:a1:ef:79:f6:fe:fc:3b:91:22:8d:95:b9:be:
                    5b:2d:9e:31:10:2d:78:24:2a:6d:e4:f8:80:73:be:
                    85:2e:d8:78:8c:c8:08:c5:1f:9e:b8:58:4a:6b:3c:
                    d7:c9:d0:b8:41:17:53:63:61:a0:0e:88:ca:dd:b8:
                    b5:21:2e:2f:56:77:8b:d0:a7:2d:c4:7a:74:71:ab:
                    c1:3e:0b:09:84:c6:6d:4c:97:1e:7d:86:cc:3b:3b:
                    7f:70:80:3e:6a:9a:84:4d:16:5b:7e:95:1f:40:55:
                    38:0c:ea:1f:2f:b5:62:72:a1:94:a1:71:9c:97:58:
                    af:a9:45:18:c3:7d:8d:4b:ed:f1:52:38:ad:a3:a8:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E9:BE:78:B9:12:84:E2:B3:5C:05:5C:8B:16:F0:F8:8C:F8:06:56
            X509v3 Authority Key Identifier:
                keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:00:7b:7a:bd:48:9b:39:28:92:70:a1:9f:f6:ab:34:91:0d:
         60:2c:8e:e5:51:cb:72:30:74:e5:fa:a9:ab:03:3b:a0:3b:d3:
         19:ce:d3:3b:e3:65:39:9f:e9:8f:db:da:cd:e5:5a:46:95:c7:
         f4:92:1c:ee:da:2e:dc:8e:71:cf:5f:c1:c4:95:0c:db:4a:79:
         e5:10:7d:c2:fb:ff:c5:c1:8b:0a:fc:ea:2f:16:0d:5c:0f:41:
         43:41:1c:c7:80:49:1c:ef:ec:38:48:e3:62:30:28:a1:cc:72:
         c2:8d:79:67:9f:fa:83:a6:8d:46:68:e3:a2:01:da:2e:e8:e7:
         0a:09:4f:ff:3f:d6:36:3d:cd:9e:10:9d:f4:c7:1b:88:e8:d8:
         a8:f6:52:a3:12:7a:ae:98:71:21:f7:17:99:21:16:23:e9:97:
         bb:30:27:c9:5e:9d:ad:0f:3d:ef:34:5c:25:12:77:1b:25:c6:
         b4:1f:48:e9:f4:25:79:e8:dc:e4:d8:09:55:eb:67:69:db:b8:
         1c:e1:6c:91:6a:20:0b:2e:5d:6b:4d:bf:c7:15:df:b8:d7:34:
         ba:44:25:45:0b:ba:de:f1:90:d5:c9:e4:7e:56:cc:fe:20:3d:
         1f:a4:a8:73:07:25:30:09:5a:3f:7b:71:4f:02:07:40:e8:f6:
         b7:b0:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:57:14 2026 by rpki-client