Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
File:                     xnQBIsYDCziYVCPXx8Zo7y266Rw.mft (raw, json)
Hash identifier:          YEZOmf9Z+3CkZLJZsMBpiI9Esj0LpRaT08cm2kxDtOw=
Subject key identifier:   12:05:72:6B:AE:0B:80:3D:3A:A1:6E:53:4D:6E:69:2D:86:6C:DC:25
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Certificate issuer:       /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial:       01A15D0C4F54E6BB5968AFB7C37098A1B9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
Manifest number:          012E
Signing time:             Wed 21 Oct 2026 06:00:49 +0000
Manifest this update:     Wed 21 Oct 2026 06:00:49 +0000
Manifest next update:     Thu 22 Oct 2026 06:00:49 +0000
Files and hashes:         1: 60TOPVfsN5pgJZGd8in-8hmiCDQ.roa (hash: wz0fI5J0oyRKc9opLJ8t6/QjHmyjX9i2OHs+2QaT2hE=)
                          2: BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa (hash: qwCTOzoAcAD8dBvfuZm2kT8FIK+IVROmdCz+Tdiv4eY=)
                          3: IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa (hash: HqeQTODPPkmuOhSBibsyQNBnS1QebGdzSoSsvCtv9f0=)
                          4: IjYD_4iJnSpw60hSl6hLQ78-_Ak.roa (hash: I2O8TskpKH95NKy5gMH0QHO0yhDdq5oUwAlZ1jCSCf8=)
                          5: Mer11hQ15D-jrLouYRlyFBNsr9k.roa (hash: pFGvLBy0OAKz3OIzWOuN1/pjfeO7iP38PaUND1hqokk=)
                          6: ebSyejuxZjmc3dCqgBY87Hl9RjU.roa (hash: pq+UZYWSdr5GA1Ri1WMIM+xPCym7E3lqGvtGITBuoD0=)
                          7: xnQBIsYDCziYVCPXx8Zo7y266Rw.crl (hash: 8V+5UK17FlSmEf+lLKu/85Ox9ShqPZLkc0jy4ZjBQW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:0c:4f:54:e6:bb:59:68:af:b7:c3:70:98:a1:b9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
        Validity
            Not Before: Oct 21 06:00:49 2026 GMT
            Not After : Oct 22 06:00:49 2026 GMT
        Subject: CN=1205726bae0b803d3aa16e534d6e692d866cdc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:6e:0d:8c:bd:53:77:ec:a5:b9:b9:55:7a:
                    0e:1d:57:47:b1:c3:a7:b6:9f:30:54:b3:08:3a:32:
                    5c:74:ba:87:aa:fa:81:db:05:fc:ed:94:0b:45:5f:
                    39:74:58:7e:49:76:a7:25:1e:05:9b:ba:04:72:95:
                    2f:08:78:ab:f0:5a:26:fe:29:e7:f2:58:aa:38:1c:
                    0a:0d:3e:93:0e:d4:ec:23:54:42:6b:db:28:0e:e3:
                    ac:ad:7a:1a:89:48:4a:7a:1c:94:1a:f4:14:f1:79:
                    ca:f0:b6:dd:68:f3:d0:4c:64:03:39:59:45:fc:43:
                    86:0d:c2:cd:da:0a:ce:6a:2a:1c:67:be:1b:4b:75:
                    c7:26:a6:2c:49:27:5b:80:6b:3d:5a:17:54:27:9e:
                    74:0e:86:ab:23:83:14:d3:40:d7:36:d4:23:2b:65:
                    90:30:f1:4b:7b:7b:8d:05:4b:da:e0:0d:3d:6f:be:
                    d2:55:67:3b:48:c4:f9:e9:39:e7:ba:18:54:ba:40:
                    c4:80:2d:ad:22:d6:96:80:24:c4:68:07:76:fd:47:
                    c0:d6:04:b6:a0:14:eb:19:08:c1:78:64:95:b6:f6:
                    82:8b:f9:14:8f:80:0c:ac:89:41:fb:c3:b1:b0:53:
                    51:53:b0:41:ee:ce:d9:2c:0e:68:8b:8b:00:8c:60:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:05:72:6B:AE:0B:80:3D:3A:A1:6E:53:4D:6E:69:2D:86:6C:DC:25
            X509v3 Authority Key Identifier:
                keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f8:b1:1d:1e:57:49:07:b5:48:ab:4f:98:4d:d4:f0:0a:77:
         51:31:45:28:9b:36:6c:2b:5b:79:f4:86:28:6c:91:fb:fe:af:
         79:aa:82:52:7d:2f:d7:24:68:02:77:7f:3e:32:39:54:f1:65:
         8d:bf:4e:5f:d9:2f:ef:bb:21:d7:57:94:8d:1f:7a:00:17:e4:
         c7:3d:49:09:ec:0a:db:9d:12:c6:6f:05:e6:66:6b:d4:1e:08:
         04:a6:0a:21:41:8c:44:a0:09:13:13:fd:14:6f:cd:e6:89:13:
         39:dc:10:5a:a5:91:29:f7:a0:6a:60:ec:e6:8e:29:a9:23:a3:
         9e:85:8e:c3:99:aa:9b:c2:f4:8d:60:29:b4:08:dc:33:f8:65:
         46:70:4c:43:b1:95:4d:44:c2:2a:fe:57:39:18:e0:75:ad:37:
         3a:a0:3f:4b:59:90:fd:89:c3:09:0f:fc:98:2b:92:5b:ce:7f:
         3d:cd:d2:e3:56:51:95:7a:87:98:8f:ee:9a:9e:55:fd:fa:e5:
         86:10:6f:2d:13:b4:84:ac:5d:fe:08:e5:08:bc:ce:44:34:58:
         71:ac:6c:93:71:06:6b:f4:08:1b:04:e2:05:de:89:20:d6:a6:
         4b:4e:d3:b6:21:a9:11:9d:7f:36:92:24:fa:9a:76:96:32:70:
         58:ba:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:31:10 2026 by rpki-client