Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
File:                     X6D0liYE-a0a0Yitw92fxcGS4ko.mft (raw, json)
Hash identifier:          vwR7M4CI7rcDtFnH+BIr3aw8SymESJz7CIY5VYYobaU=
Subject key identifier:   38:C3:5D:6C:86:04:97:30:33:96:76:7F:CE:E8:E5:12:5B:9E:0B:FE
Authority key identifier: 5F:A0:F4:96:26:04:F9:AD:1A:D1:88:AD:C3:DD:9F:C5:C1:92:E2:4A
Certificate issuer:       /CN=5fa0f4962604f9ad1ad188adc3dd9fc5c192e24a
Certificate serial:       01A113E0E0EF088E11AD5D6B1FCD4473774C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
Manifest number:          84
Signing time:             Wed 07 Oct 2026 01:01:07 +0000
Manifest this update:     Wed 07 Oct 2026 01:01:07 +0000
Manifest next update:     Thu 08 Oct 2026 01:01:07 +0000
Files and hashes:         1: 3zNJZY1mynaOMt0PR_6OOhCID_k.roa (hash: eVoFznym7O4+TfKPzoOO9hJbiKl608aCcwNQSwV6jhY=)
                          2: X6D0liYE-a0a0Yitw92fxcGS4ko.crl (hash: XgCfSpiwyfo//nlYpwygWc2g6jKT4N4GY0C4gcGYlhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:e0:e0:ef:08:8e:11:ad:5d:6b:1f:cd:44:73:77:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa0f4962604f9ad1ad188adc3dd9fc5c192e24a
        Validity
            Not Before: Oct  7 01:01:07 2026 GMT
            Not After : Oct  8 01:01:07 2026 GMT
        Subject: CN=38c35d6c860497303396767fcee8e5125b9e0bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:74:f7:90:2b:10:61:13:69:56:cb:72:01:
                    ed:08:f7:b4:67:31:50:f3:32:00:d7:8f:a5:5a:05:
                    7e:eb:e6:91:12:de:7b:2c:bb:c3:77:92:48:6e:6c:
                    14:69:f1:ca:e7:bb:0b:1f:1d:64:fe:e1:2c:58:4b:
                    0a:b8:0a:4d:ae:af:2f:1f:c7:35:80:fb:27:7d:62:
                    a1:6a:e8:31:f5:b9:34:68:04:02:61:ae:ff:8e:7d:
                    d6:60:f9:8d:fa:b6:56:2f:46:bf:d7:5d:c0:73:d5:
                    85:d4:e4:8f:68:ec:1c:c7:81:e6:c1:f4:25:8a:91:
                    6c:f4:d5:e4:6e:df:a1:77:c5:93:a9:64:32:b3:cb:
                    8f:a8:4c:6f:b3:6b:6e:c7:54:d8:54:6a:ff:e0:a3:
                    a2:f8:fa:6e:8b:51:61:c3:30:40:f6:bf:7f:f8:c6:
                    e7:48:44:5e:f2:b2:91:c5:ab:90:30:bb:ae:c9:b6:
                    cb:d9:46:d7:47:50:90:ee:df:22:4e:e3:6b:98:3b:
                    c3:09:67:66:14:13:04:1e:1f:f0:e4:6c:2a:40:54:
                    26:62:da:34:1b:15:42:87:ac:c0:30:51:62:7f:6f:
                    47:0d:3f:9d:9f:ea:bc:21:e2:34:e4:e3:63:87:e0:
                    3f:ce:31:d3:c2:4a:ec:6a:0c:b8:41:b9:82:c8:11:
                    7a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C3:5D:6C:86:04:97:30:33:96:76:7F:CE:E8:E5:12:5B:9E:0B:FE
            X509v3 Authority Key Identifier:
                keyid:5F:A0:F4:96:26:04:F9:AD:1A:D1:88:AD:C3:DD:9F:C5:C1:92:E2:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:59:aa:f8:81:aa:a0:23:fa:47:c4:65:ed:42:b4:17:f5:44:
         8b:db:53:0c:f9:3a:c1:cf:ab:e1:19:9f:28:2f:b2:da:1b:67:
         d3:c1:c6:5d:3f:13:54:12:a2:23:c7:e2:b9:56:d9:60:84:93:
         53:39:4f:ed:6f:ca:67:b5:34:62:b2:57:98:a3:70:0a:28:fc:
         61:cd:c3:de:43:fb:d4:09:b7:67:6e:f3:01:1d:2d:18:39:e6:
         7f:ae:f6:e8:bc:6c:0e:13:2b:09:5e:a0:93:2c:4d:43:07:13:
         1a:af:6b:69:d1:9a:f4:fb:17:56:41:30:0d:47:b1:0b:73:6e:
         3d:bf:39:97:3a:87:0d:a9:f5:ce:72:59:fb:62:ab:63:7f:6c:
         bb:e9:22:13:96:f0:63:69:ba:34:04:59:bf:f8:62:56:47:70:
         ec:f7:01:da:db:8c:0c:80:06:8c:9c:05:36:cf:37:73:e8:14:
         c5:2c:0d:1d:60:df:45:f8:45:cd:86:3b:20:88:7f:8a:a6:76:
         11:03:05:d9:6c:f4:0c:ec:f1:b0:28:8c:8e:30:0c:5a:cc:04:
         13:0c:12:ee:71:67:4a:5b:5c:9a:dd:3b:c0:3a:f1:05:c1:39:
         95:e4:fd:29:c3:9f:96:75:e2:e9:89:f4:ca:1e:a5:16:47:7d:
         38:73:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:16 2026 by rpki-client