Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File:                     Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier:          NPiOgtq/jeSqh0rP5GwwfER4aOUfZGD8Q3dsppwrvR0=
Subject key identifier:   47:0B:13:76:30:1E:EF:DC:A8:46:F2:D7:DB:42:22:96:A3:98:C2:C7
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer:       /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial:       01A182D11A4FA317C4BA9FD4985EE92C8986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number:          078D
Signing time:             Wed 28 Oct 2026 14:01:44 +0000
Manifest this update:     Wed 28 Oct 2026 14:01:44 +0000
Manifest next update:     Thu 29 Oct 2026 14:01:44 +0000
Files and hashes:         1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: iark27UH10zMOcF/WmTi1T79ZM86692M4XwoDFsT5V0=)
                          2: zrY1kiCbt_RCBDyoPeb6Gt-rfXI.roa (hash: 99km0sbg09Xs5uX9uuCKMjDG2dbDXHFkyqnyOKsmuE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:d1:1a:4f:a3:17:c4:ba:9f:d4:98:5e:e9:2c:89:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
        Validity
            Not Before: Oct 28 14:01:44 2026 GMT
            Not After : Oct 29 14:01:44 2026 GMT
        Subject: CN=470b1376301eefdca846f2d7db422296a398c2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:c1:11:d3:51:3a:50:9a:6c:fd:0e:25:3e:
                    38:cb:37:6f:de:94:8b:67:e7:67:25:0f:1e:b9:18:
                    88:6c:fd:9a:e2:26:49:ae:a8:65:c6:6f:4f:05:d0:
                    45:e3:6e:4c:43:58:fa:b2:f0:bc:12:cd:ce:b6:e6:
                    23:05:38:72:22:bf:2a:1b:1f:d1:68:fe:b5:86:12:
                    53:ca:bc:2d:ba:a8:9a:4c:0a:4f:af:bf:9c:8e:b9:
                    74:ff:6f:8a:43:90:ee:26:89:48:ae:58:5b:c6:1b:
                    69:6b:ed:76:7a:47:e5:74:7c:11:2c:00:41:68:17:
                    86:35:1b:97:0f:07:2f:ed:e0:4f:25:ac:33:95:34:
                    df:04:53:e6:5b:06:6d:a2:3a:b5:1a:3c:c3:1a:8a:
                    83:0c:5e:b6:25:35:af:68:fd:50:43:33:3b:5b:7b:
                    ac:a4:5e:26:57:47:d4:5d:54:68:6d:36:69:90:af:
                    cc:e1:50:39:47:24:30:e8:f5:0a:b5:67:f9:93:72:
                    e0:d7:3a:53:a2:df:bb:8d:1a:24:98:16:15:37:38:
                    d1:03:2e:09:f2:02:cb:ac:fe:c5:98:cb:40:7e:f7:
                    30:d2:9d:3c:b2:f6:11:f9:9a:08:78:25:97:a7:b3:
                    54:50:47:06:21:aa:af:49:34:fb:79:19:cf:3b:a4:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0B:13:76:30:1E:EF:DC:A8:46:F2:D7:DB:42:22:96:A3:98:C2:C7
            X509v3 Authority Key Identifier:
                keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:59:ac:8f:9c:39:89:4b:81:b4:5a:70:6b:3e:b4:f2:4c:48:
         da:44:16:39:1e:09:61:2c:6e:49:43:f5:29:c4:df:d0:9c:08:
         d8:fd:d7:da:f6:88:43:47:be:a3:56:60:35:3e:ff:80:38:30:
         6b:e3:db:96:29:1d:2d:e4:a6:2c:c7:98:42:40:f2:52:c7:0e:
         b2:9b:cd:c3:24:af:ff:7e:9b:77:ae:3c:49:52:0e:ea:cf:b1:
         34:3f:1d:5d:30:03:4b:a3:84:17:f8:73:ae:92:83:77:d1:16:
         d9:7a:f0:43:ac:3e:f7:77:ac:b5:24:5d:74:3f:1b:7f:2c:71:
         7e:14:34:f9:af:d6:e9:e0:48:a1:13:35:d0:81:47:0f:65:b9:
         ff:59:58:99:83:10:31:25:9e:88:be:3f:fa:2e:8f:96:c9:31:
         2c:49:43:67:21:3e:35:15:47:46:27:87:80:3b:ac:9a:5c:c1:
         73:d8:6b:3b:51:af:83:eb:01:b9:d5:bb:61:e4:b8:af:fb:2c:
         6d:1e:1f:e1:f1:f9:20:34:9e:af:b6:63:44:3f:85:1b:91:5f:
         56:32:60:59:58:71:ff:0f:99:78:e5:24:da:f5:6f:ca:1c:8c:
         9b:4b:e9:5c:05:60:91:db:91:ad:0b:14:e1:81:d3:c9:b1:d1:
         eb:15:d2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:24:07 2026 by rpki-client