Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File:                     xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier:          LeWPOz7gbFYIUVK1Z7kehT/Y6M0ke7yuypISu5eBe50=
Subject key identifier:   B6:8D:76:D3:29:74:69:9B:98:0B:E5:1E:56:9B:2B:28:29:E6:EF:F2
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer:       /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial:       01A0CCA2CC545A804303879A154A3C494A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 05:00:16 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:16 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:16 +0000
Files and hashes:         1: 3cbC9vEeA_OfonVqz4nPVMIodpI.roa (hash: IGj7kwjiWovmIKkao+Fqphubf76yFz/hI4+0oTX7zU8=)
                          2: HRkMr8-Sqbu9H440GtqWqBMvrRY.roa (hash: u8W2AOx3ZvteH41TI9EbqMt/z7mq+kc+OzabEJ0zUCM=)
                          3: wemV0d9_X9NASzk5HBev3Xd67ss.roa (hash: xfH5MjrkqijIT96yucgZV5bkcjqDyV5OtrwCabRA68Q=)
                          4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: hM5M+BSh2Ztg8ZY5GTVhzbnCCZJbLGZohmwH1hbLUhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a2:cc:54:5a:80:43:03:87:9a:15:4a:3c:49:4a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
        Validity
            Not Before: Sep 23 05:00:16 2026 GMT
            Not After : Sep 24 05:00:16 2026 GMT
        Subject: CN=b68d76d32974699b980be51e569b2b2829e6eff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:7e:e7:42:71:4f:92:5e:a0:cb:b6:92:6a:
                    b3:30:63:49:43:1d:b5:d0:7c:39:45:7d:58:93:e8:
                    39:4d:5c:12:bb:19:5d:af:3c:c5:94:fd:90:b1:b8:
                    bd:fb:fb:e6:c1:d2:e4:08:37:29:9c:a1:9b:9c:e3:
                    80:74:21:41:c3:f6:86:66:ee:11:6b:78:a0:2c:11:
                    8b:ae:c3:10:7b:ac:74:cf:44:e0:08:12:ce:2f:53:
                    2e:3d:e5:58:4a:1c:eb:d0:88:a3:6a:33:54:e8:31:
                    01:5a:ec:fa:2f:55:e5:ea:5f:54:a7:8e:a2:55:40:
                    8b:15:1c:66:00:c6:dd:da:20:01:6e:53:0e:1f:0b:
                    f5:99:9a:80:99:2a:04:22:9c:16:12:3b:91:b2:5a:
                    33:71:a2:33:eb:69:e6:e2:4f:b5:d9:b9:b1:81:3f:
                    b3:c3:47:86:69:80:86:85:2e:26:73:8c:56:4b:75:
                    24:be:b3:79:73:a9:2c:a2:03:49:5c:18:fe:6e:f8:
                    25:7e:55:bd:37:c9:36:7a:e7:80:3f:90:20:0d:6f:
                    24:dc:c8:44:31:0f:e6:6d:42:2f:32:45:e1:83:d5:
                    51:9f:f2:bc:7f:63:15:f1:31:c5:36:9d:92:63:b2:
                    a5:8e:64:ba:7d:0a:71:58:1d:dd:2d:b2:72:92:ac:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8D:76:D3:29:74:69:9B:98:0B:E5:1E:56:9B:2B:28:29:E6:EF:F2
            X509v3 Authority Key Identifier:
                keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:65:d2:c3:64:32:67:74:76:8c:f8:21:dc:83:b9:ef:be:
         8b:82:1d:57:9c:e2:79:69:28:f1:96:e6:b1:7e:31:51:5d:14:
         a6:1c:d4:c2:d0:94:6d:b2:84:7d:de:8e:04:a7:31:13:39:39:
         df:c6:db:4d:8f:38:b8:b3:3c:49:9c:d7:a7:eb:ea:c7:26:ac:
         96:53:8a:08:16:fc:ac:5f:0a:21:28:fe:2a:90:03:c3:4e:bb:
         36:c9:4f:6f:ae:a4:7d:70:07:a0:19:2b:d2:6a:71:e7:08:72:
         80:f9:3f:02:c5:4a:85:ec:0f:98:13:0c:8e:23:53:03:b7:bd:
         29:5a:65:8a:6f:9f:47:6b:3c:41:bc:6f:17:19:d2:0e:e6:48:
         ab:1b:35:46:c4:c2:bf:d6:e3:40:f0:bc:c4:68:71:1e:5d:70:
         c5:da:9a:5e:8c:86:ad:1e:29:71:61:00:53:d2:47:3d:5a:e2:
         69:89:43:f9:42:3d:62:b0:ca:02:48:2a:e9:f8:97:71:3d:97:
         db:d4:34:0e:3f:df:f5:0d:af:94:d7:20:a5:4b:0f:69:3a:3d:
         da:b4:e4:d1:77:22:be:35:3f:e7:36:87:1d:47:15:b4:41:de:
         d9:0d:bf:47:b2:22:79:30:0f:7b:86:33:4d:d4:7e:d4:03:a3:
         87:c8:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:48:15 2026 by rpki-client