Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File:                     xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier:          V5tGMWVbwz6a1ttfB/duRZlHcOZxncQv0ZTnbP8wX5Y=
Subject key identifier:   0B:0C:AF:36:57:4E:40:FF:70:84:0F:F7:AD:8F:D3:A5:7D:D6:E4:BE
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer:       /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial:       01A003264CEFACBFACCCD26BB938DB6A147E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number:          1A04
Signing time:             Sat 15 Aug 2026 02:00:36 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:36 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:36 +0000
Files and hashes:         1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
                          2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: FrZzeJcln8wu4hCR3bmTWBBsdlVtFnDH7ziF1hy20Hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:4c:ef:ac:bf:ac:cc:d2:6b:b9:38:db:6a:14:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
        Validity
            Not Before: Aug 15 02:00:36 2026 GMT
            Not After : Aug 16 02:00:36 2026 GMT
        Subject: CN=0b0caf36574e40ff70840ff7ad8fd3a57dd6e4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:4e:0d:e1:29:7e:4f:40:37:11:9b:aa:97:
                    56:b8:c1:5c:40:46:7c:25:62:39:85:b6:f4:5a:e9:
                    09:7d:c4:95:74:f3:41:e1:a1:ab:aa:15:6a:11:f9:
                    83:d7:69:ed:5e:27:70:bc:77:c0:e6:fb:e4:4d:2c:
                    b5:64:f3:be:77:9c:fc:63:b3:92:c5:4a:b0:cd:16:
                    85:db:ad:bb:ac:4a:4b:fd:18:90:9a:c0:20:f6:4f:
                    6c:17:29:18:bd:09:03:ee:ca:70:32:c5:4f:cc:f3:
                    ed:22:bf:5e:49:73:bc:8d:a1:db:8e:ed:3c:72:f9:
                    59:76:92:a8:9b:1c:5a:a7:07:22:2f:17:22:5d:1a:
                    0e:59:e9:71:76:ef:35:cc:df:17:38:06:14:43:ce:
                    e1:b2:bf:47:85:1c:18:60:47:53:4f:36:dc:8d:46:
                    09:2c:c2:f6:7a:97:86:c6:0e:57:10:79:16:f8:28:
                    ef:39:d6:25:49:6a:5b:6b:e3:18:9e:60:f8:aa:8f:
                    66:e4:f0:09:ea:43:51:ef:76:b3:d9:5b:95:cf:85:
                    47:6d:aa:db:d9:40:07:1b:a9:38:8d:46:c2:a1:9c:
                    fa:5a:b7:7b:cc:61:e5:90:b2:0f:da:f2:e6:5d:f2:
                    fe:e3:03:a7:dc:90:fb:14:8d:d7:97:2f:50:c4:07:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0C:AF:36:57:4E:40:FF:70:84:0F:F7:AD:8F:D3:A5:7D:D6:E4:BE
            X509v3 Authority Key Identifier:
                keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:99:4a:c2:5a:b0:e9:6c:d3:1b:48:74:9a:f9:47:48:be:
         3b:5a:19:62:74:69:0f:53:57:f5:6a:39:fa:83:2c:92:37:13:
         f1:93:41:46:f0:96:42:3d:77:66:34:86:73:31:4c:ad:dc:df:
         bd:17:07:3d:c3:bf:97:ae:c3:58:1f:1f:df:9c:9c:e1:b8:1c:
         4f:07:f7:cd:e4:a8:5e:a3:14:d8:7b:95:f1:23:ce:43:87:bd:
         40:ec:31:dc:76:27:7c:50:f8:db:9c:a3:89:ca:37:0f:ff:9e:
         34:3b:4c:d3:80:b0:15:fb:86:55:c9:b4:9e:00:4d:fa:84:e4:
         64:9e:8f:53:90:be:3f:c7:99:2a:69:70:c8:d4:2a:74:ee:41:
         e1:22:4a:c9:b9:f6:4b:a4:23:3a:0f:54:5c:77:70:f5:db:b5:
         10:a1:33:d7:63:1b:26:55:13:c7:fd:2c:22:3e:56:fa:b7:fc:
         84:24:0b:5e:08:da:16:2e:41:78:b6:d1:bc:a3:2c:7d:f2:a3:
         29:4c:8e:ee:2b:3b:3f:f8:2e:97:6e:a0:e6:59:73:d0:9c:74:
         3a:ef:6d:b2:4d:a9:9a:a4:40:17:5f:4b:c1:06:ff:11:13:53:
         14:df:e1:d7:2b:af:9f:fc:15:1f:58:b3:dd:c2:b8:4c:cb:a6:
         bf:bb:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:55:01 2026 by rpki-client