Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          PJeQonRB+sDxtTadJr1ZjCyMOZQYdkuGQ1X4h2lKlKk=
Subject key identifier:   8A:D1:B1:A0:D9:80:44:56:3A:89:0E:8A:EE:81:89:EC:25:DB:70:F2
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       01A17D3CC72BFCD6FD1D0DEA4F52A98CBAB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1AFD
Signing time:             Tue 27 Oct 2026 12:01:37 +0000
Manifest this update:     Tue 27 Oct 2026 12:01:37 +0000
Manifest next update:     Wed 28 Oct 2026 12:01:37 +0000
Files and hashes:         1: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
                          2: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
                          3: jdER3phX5mbgg6aj7xFihDYqyto.roa (hash: Gf4TEMTFntYzNK0gZEShHChZxR+vxTAfCM1wkhuszWc=)
                          4: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: oK9zjHofYHHZKEJwgn6EvtA0S8rIJPw9JxAuQR1njh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 12:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:3c:c7:2b:fc:d6:fd:1d:0d:ea:4f:52:a9:8c:ba:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Oct 27 12:01:37 2026 GMT
            Not After : Oct 28 12:01:37 2026 GMT
        Subject: CN=8ad1b1a0d98044563a890e8aee8189ec25db70f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:14:a9:83:8a:9e:00:4f:42:90:ad:3d:4a:
                    76:12:86:f1:68:b8:40:da:12:f7:84:ed:63:14:26:
                    01:0e:e6:f5:df:2f:51:40:83:55:63:64:6b:a5:5a:
                    83:b7:23:03:21:b0:26:25:d4:c3:4b:80:12:a4:c8:
                    d6:3c:ea:9b:82:87:a0:5e:e9:90:50:3a:61:43:b3:
                    0b:97:ce:94:60:5c:8e:d1:5f:74:c3:c9:9a:98:02:
                    8c:db:cf:4f:e9:af:1d:1b:a4:e7:f2:7e:8f:25:0d:
                    12:b4:20:77:e1:b1:b1:d8:3f:58:28:2b:69:fc:7e:
                    6f:2e:c4:89:41:7e:d3:9c:6c:7b:f5:8c:47:80:6e:
                    d2:f0:b4:a5:0e:c6:9b:bf:b6:63:7d:0f:a7:2a:76:
                    f3:f9:0c:2d:06:71:00:30:39:fd:f9:dd:29:5d:ee:
                    4d:e1:30:87:b4:14:2d:df:e1:e7:24:0f:57:98:c6:
                    19:32:b5:87:e6:54:e7:ee:be:13:c6:a9:c4:57:41:
                    d2:19:aa:53:57:94:fe:2f:20:c1:bf:76:db:9d:ef:
                    36:40:b9:9b:94:af:c7:06:9f:46:68:e0:d8:00:b4:
                    37:ff:02:e9:06:05:5b:29:4e:ea:a3:de:a9:af:e1:
                    33:9b:33:33:0f:67:24:eb:4d:88:42:7f:e1:c6:91:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D1:B1:A0:D9:80:44:56:3A:89:0E:8A:EE:81:89:EC:25:DB:70:F2
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9c:f2:6d:f3:00:ff:69:94:9d:fa:ac:d7:58:86:cc:c6:31:
         68:f9:da:57:50:d1:44:94:e6:05:ef:2b:88:37:32:2d:40:e6:
         10:02:f4:93:77:f0:f8:8f:4c:5b:4b:b3:b4:40:3d:3f:96:80:
         f0:99:d6:b7:72:5d:69:c4:c3:6e:07:79:b8:b1:63:84:7c:c7:
         e9:54:2f:8b:43:a8:04:d8:af:52:a7:44:83:ce:d7:d8:c8:2d:
         01:37:0c:25:33:ba:71:33:ff:c8:75:81:7e:f0:aa:a5:2f:4e:
         9e:dd:88:c1:c5:fe:c2:45:8b:12:18:5c:79:67:e3:dc:d8:1b:
         37:11:ee:8d:e0:a8:84:04:b9:8a:56:5e:58:c1:ac:ba:29:50:
         c4:32:bd:85:a8:b7:11:26:7a:b3:87:1d:15:5a:e0:09:43:e5:
         4f:34:d9:2f:14:19:fe:26:51:d8:50:eb:eb:6b:07:c4:5d:eb:
         6c:c4:02:2c:9a:c5:02:33:d7:f3:25:16:a0:70:d0:34:68:2e:
         e0:07:4e:01:cb:80:e9:d4:55:47:22:2a:49:35:cc:17:77:fc:
         16:3d:bd:c2:17:a8:f7:78:0e:97:d5:d7:1b:38:6e:1a:6c:05:
         4b:98:30:6d:9b:a4:98:8f:4c:5a:54:6f:78:31:45:98:7c:7d:
         00:53:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:30:29 2026 by rpki-client