Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          YWOMVAtNYNUYLTqDqceE7/cCZ7xZS0ioMajp2+Iq7P0=
Subject key identifier:   ED:B6:93:52:35:B5:26:35:25:18:DD:E7:4A:32:09:58:66:B4:A4:36
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       01A17F2B1359139D192EEC22033E8E583558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1AFE
Signing time:             Tue 27 Oct 2026 21:01:31 +0000
Manifest this update:     Tue 27 Oct 2026 21:01:31 +0000
Manifest next update:     Wed 28 Oct 2026 21:01:31 +0000
Files and hashes:         1: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
                          2: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
                          3: jdER3phX5mbgg6aj7xFihDYqyto.roa (hash: Gf4TEMTFntYzNK0gZEShHChZxR+vxTAfCM1wkhuszWc=)
                          4: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: QbRKVJiajCz1vCsyJJlPiYTmktLYqpVv47RUFGv3gqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 21:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:2b:13:59:13:9d:19:2e:ec:22:03:3e:8e:58:35:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Oct 27 21:01:31 2026 GMT
            Not After : Oct 28 21:01:31 2026 GMT
        Subject: CN=edb6935235b526352518dde74a32095866b4a436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:d8:eb:93:81:27:ce:a2:c3:59:33:66:14:
                    4b:5a:a1:ce:7a:9b:92:43:ed:cf:e4:86:93:32:f4:
                    87:70:a4:b9:81:17:be:10:2b:a3:6b:eb:b8:18:f1:
                    40:7f:56:46:c3:0e:78:6a:27:d2:5d:4a:7e:1d:d5:
                    73:b6:b1:aa:0a:2c:f2:b5:c1:80:be:52:97:be:f3:
                    4a:bc:57:5d:3f:ba:dc:87:aa:3c:7a:19:10:e3:a9:
                    0d:1c:ee:49:7c:83:2e:0f:8d:c0:64:b0:c8:06:e7:
                    99:8f:b4:e3:60:ea:22:4d:77:40:c5:0a:42:b1:a1:
                    19:87:3d:0c:7e:e5:e1:b3:3d:7f:c5:17:fc:f9:40:
                    cb:0a:89:62:cb:06:63:bf:42:90:61:61:4d:3b:56:
                    f3:b9:77:e2:52:c9:d5:ce:f2:6d:03:4a:30:65:ba:
                    c3:fd:e4:d1:15:92:5b:c4:93:ab:40:f8:e3:4e:bc:
                    57:52:bc:51:73:24:7b:1d:a5:90:c4:b0:46:f5:5f:
                    4e:59:68:4b:95:c1:a1:a4:80:f4:22:87:ba:3a:17:
                    5e:e3:40:94:69:88:d8:a2:f9:a7:66:f4:b9:87:7f:
                    a4:20:5e:9c:a8:59:cb:ad:20:4f:7b:18:75:98:31:
                    bf:bb:9f:c2:81:cb:2c:2c:59:9c:28:c6:9e:89:3a:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B6:93:52:35:B5:26:35:25:18:DD:E7:4A:32:09:58:66:B4:A4:36
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:df:1e:bb:6b:f8:c5:36:32:5e:c1:b9:38:24:3d:94:5b:bf:
         c1:99:65:a4:27:cc:78:01:0c:77:c7:0f:3a:29:0a:88:fb:43:
         fd:c4:a0:4b:50:50:98:6f:f6:0a:db:01:68:0c:9c:06:fb:a8:
         4e:06:75:43:55:a7:7d:60:ee:ca:3e:10:eb:6e:00:7d:3e:6f:
         c8:db:4b:e4:6d:7e:34:be:aa:12:b3:50:b9:a2:77:16:0a:43:
         2a:d3:ca:b2:18:84:79:3e:c0:15:c3:87:92:bd:b5:e9:5a:1a:
         9f:0e:1f:e3:0f:75:af:21:28:88:d8:87:6e:02:6e:08:dd:56:
         7b:2b:bf:bb:34:2f:6c:5b:48:bf:d9:0b:2c:fa:24:31:61:c3:
         45:2a:07:3f:ec:0a:74:2c:d0:ea:15:3d:be:e5:a8:e2:20:b5:
         e2:7b:30:1f:6f:12:5a:31:d5:5b:e8:26:c7:72:d2:f8:6c:57:
         dc:78:14:69:6a:17:5e:43:8c:a4:95:ce:32:f4:9b:4e:3c:50:
         b6:4c:ba:3c:56:a0:68:d9:23:6e:37:2a:54:f1:0e:3d:f9:5a:
         04:7b:b1:37:ce:c4:18:73:bd:fd:0b:fc:a6:79:5f:bd:78:15:
         cf:68:ca:59:00:57:1e:49:db:73:6c:6d:ce:0d:50:a0:45:d7:
         60:70:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:26:38 2026 by rpki-client