Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File:                     x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier:          DV2/c+Pu0kunQL5f1XpkPjjQtuvDCXkkXcJISaDcINo=
Subject key identifier:   38:EE:BD:73:8D:F1:20:0C:68:DC:8D:4D:3D:45:D7:F4:53:AA:E9:3D
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       01A175B97488D986C3F670575FA44B74446E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number:          1507
Signing time:             Mon 26 Oct 2026 01:00:50 +0000
Manifest this update:     Mon 26 Oct 2026 01:00:50 +0000
Manifest next update:     Tue 27 Oct 2026 01:00:50 +0000
Files and hashes:         1: 3bor1lJpsbxwoxpTVw7SPphj0KA.roa (hash: MKCpN8MSRgBkERkhEGqpPaY9qiTFWm3a9NewCeOTHfw=)
                          2: E50xwf77j1uVlaAo_7lcWtVPS5w.roa (hash: scxT60SZGp6gVxb5G7EoEYfDA0eB2dfzl2LHenA9flM=)
                          3: EN5YRtRNeJB3G_kn9_QszN63XRs.roa (hash: ED4WNccI96qY8PVsosO6wi3ARts0z42Q1MVgegQE8i4=)
                          4: Pv_B5wrNSOIQ2rOvMqV3MMegG7w.roa (hash: wwJ2iaOAypy2cu/YyFarYyFvvtG9167wYna2ztGjItM=)
                          5: S4cOm5eDZspURLWbEjjfUiB2w9A.roa (hash: WT7udJa3v1pG5JhWMUlVe+UmSzwa9B/DLth0MoSpo+c=)
                          6: WGarpJ7r84I2BUjPwsh_FrmY5eE.roa (hash: enfn5n+6zegDsbYCXp7miXXJum8vzX4WWxNLJX5Keh4=)
                          7: Wi7IqvDgVK392tuCNUoibcF9Xwc.roa (hash: 8UDRh/dVbBhU/0zaDX6N0W8S2rKIEZNL8f2ZIttBB5A=)
                          8: rqBI1Yge5d8pkYEHzMcFHLBAy_s.roa (hash: 5Bfk1P6XoOfoIACEr9dJa6ZH0ZEA6wxnqttPtb85Opc=)
                          9: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: 6w9O42beCoaZUCYe9zAZupFiiDt2XyEaV+K3EFLg4Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:b9:74:88:d9:86:c3:f6:70:57:5f:a4:4b:74:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Oct 26 01:00:50 2026 GMT
            Not After : Oct 27 01:00:50 2026 GMT
        Subject: CN=38eebd738df1200c68dc8d4d3d45d7f453aae93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:3e:c4:4c:52:cd:2a:c3:26:a6:d4:f2:8f:
                    0f:2f:97:bf:1d:48:df:8b:ea:ef:c0:0d:df:2f:5b:
                    ec:be:32:c4:65:2c:75:96:a4:4b:e4:c7:bd:4c:9f:
                    cd:88:57:21:34:84:7e:79:f0:23:ab:8d:9c:dc:3f:
                    9e:eb:d9:cc:9b:fd:6e:67:4d:48:a9:7f:bd:4a:e8:
                    01:60:42:cc:b0:8c:28:cf:5f:e2:f7:3f:00:f8:9d:
                    65:35:89:a1:d7:31:08:07:b9:b6:e2:be:df:44:aa:
                    39:dd:13:66:67:9b:ca:bb:66:74:8a:18:33:11:86:
                    2e:72:13:2a:ae:6f:67:51:17:a6:a8:57:41:27:a2:
                    1f:a5:b7:55:44:95:21:cf:47:3c:20:ee:f6:a1:df:
                    12:83:f5:ce:0e:89:fa:9c:23:a4:44:bd:64:4b:46:
                    2b:80:08:77:f1:f6:07:a2:be:9c:1e:41:83:4c:07:
                    c3:3c:1a:c4:94:05:54:6e:26:d7:a1:95:be:1a:59:
                    fa:26:2a:62:2c:02:15:27:cc:4f:75:97:12:5f:d9:
                    3f:81:23:fc:0a:56:3a:b1:f0:a8:72:b3:30:ff:60:
                    6d:ea:14:e7:1f:57:0e:69:16:33:cb:ce:2e:ed:46:
                    5d:d6:6b:4e:84:94:2d:7d:08:59:af:ff:c8:ce:73:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EE:BD:73:8D:F1:20:0C:68:DC:8D:4D:3D:45:D7:F4:53:AA:E9:3D
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:b5:62:fc:7f:bf:9a:e2:2e:12:db:2f:04:fb:51:40:1b:
         cd:98:10:68:93:6b:18:98:05:c6:64:cb:a8:87:47:a5:82:55:
         7f:5a:9d:cc:cf:2b:8b:3c:dc:83:94:45:6a:4b:c4:8a:5e:12:
         f5:06:18:98:fc:9b:1b:1c:8e:74:6e:a8:74:34:76:08:5c:c3:
         0d:31:bc:28:f6:80:59:fc:cd:2b:eb:e2:2e:ba:8d:d6:37:27:
         94:3d:e8:b4:59:70:ca:9b:32:2d:93:2c:78:8d:b5:be:a4:fd:
         57:7f:63:76:eb:6a:20:44:97:1e:3e:a5:7c:d1:d3:2b:72:08:
         d0:0b:49:76:3f:5d:dc:82:88:fb:26:ac:28:d3:86:82:af:9e:
         28:d1:f2:84:be:c5:a3:fb:26:f6:5c:07:be:04:05:77:d2:53:
         f8:0a:b6:71:65:c2:1a:49:14:19:a0:6a:92:db:2d:b3:65:fa:
         da:6f:a3:31:85:ec:9a:a7:f6:0a:65:9e:78:ba:83:a4:ed:49:
         81:fa:f9:36:d1:bd:92:f0:6c:ab:16:af:91:6a:7f:0c:a2:fb:
         7d:ba:6e:62:38:e1:62:ea:01:c3:ba:4f:be:ae:84:09:3a:38:
         a5:e6:a4:db:70:2a:8d:51:3e:31:f0:2c:45:7e:5d:72:94:7d:
         d8:15:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:03:34 2026 by rpki-client