Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File:                     xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier:          IfjTxnd73NezCMXNYk7Xfia7wdelbGFqyDfpW8cpTG4=
Subject key identifier:   10:3E:AA:C2:BA:9F:1E:E8:9A:0C:0C:20:6D:FD:BB:98:58:D1:58:A7
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer:       /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial:       01A008160EC512C6BE493364D3C9F67214BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number:          05C9
Signing time:             Sun 16 Aug 2026 01:00:58 +0000
Manifest this update:     Sun 16 Aug 2026 01:00:58 +0000
Manifest next update:     Mon 17 Aug 2026 01:00:58 +0000
Files and hashes:         1: MBR4X9txb_DAPbAumwTsJqubBTw.roa (hash: 3GXUKqS4uNcGQw91JnWr+7X42phsItesfGJzuOIsuBE=)
                          2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: A7IVe0kY/ozNf//fGsq01DI4mkow5p3TVo+5o0S8sF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Aug 2026 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:08:16:0e:c5:12:c6:be:49:33:64:d3:c9:f6:72:14:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
        Validity
            Not Before: Aug 16 01:00:58 2026 GMT
            Not After : Aug 17 01:00:58 2026 GMT
        Subject: CN=103eaac2ba9f1ee89a0c0c206dfdbb9858d158a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:ae:af:ce:ae:ed:df:ae:21:cb:be:1e:cf:
                    db:4e:6e:4e:d9:2b:48:dd:89:68:e1:a3:c2:52:ee:
                    b9:d9:d7:80:86:84:dd:f9:3b:1b:f8:83:8f:ab:c9:
                    88:6b:88:c2:26:0b:59:0a:7b:c0:09:32:d2:10:72:
                    b0:32:64:36:fb:d7:89:9b:b8:23:2f:91:e8:3c:7e:
                    cf:c3:66:2a:91:8f:dc:8e:c2:94:2e:fd:b6:63:f2:
                    7b:ff:05:ae:7e:6d:b9:dc:e4:f9:79:7b:1a:cb:2d:
                    dd:7f:b6:5f:33:cd:9c:04:ab:2c:e9:9e:e2:f7:bd:
                    31:25:cd:19:a0:b6:ba:a9:84:7d:93:d3:13:96:6b:
                    2e:81:48:b6:e3:48:97:30:27:fc:4b:b8:91:2a:b3:
                    60:7a:d3:29:b8:fe:09:1b:2e:fa:cb:b3:9f:aa:bf:
                    50:17:bc:f6:17:1c:26:69:78:41:0b:78:b4:a1:7e:
                    0b:92:56:79:71:a2:b1:39:96:f3:f0:1e:c5:c9:ff:
                    9b:b6:f3:b2:b5:1c:1d:d7:9f:f3:4b:24:90:61:d7:
                    31:11:e8:f6:30:2d:e1:26:1d:10:aa:0c:a8:4f:3c:
                    50:2f:7a:c3:e6:3f:08:f7:c7:45:e1:64:ec:ef:06:
                    43:8f:1f:83:3b:a0:5b:54:4a:80:10:23:97:d2:30:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3E:AA:C2:BA:9F:1E:E8:9A:0C:0C:20:6D:FD:BB:98:58:D1:58:A7
            X509v3 Authority Key Identifier:
                keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:46:8b:1f:c1:93:19:48:3b:4d:8f:5b:91:42:b7:dd:b3:f8:
         16:56:60:d2:74:c3:75:72:bc:c3:99:e3:cb:41:70:57:2e:1b:
         30:10:f7:5c:0a:a6:35:a8:f0:f7:ea:a4:96:fd:87:60:5f:6a:
         7f:9e:8f:7e:70:5c:2f:45:f9:91:5a:0c:d1:87:5c:54:96:32:
         45:0d:97:69:ed:35:52:f6:46:1b:94:87:68:e2:45:da:54:53:
         2c:fb:38:95:ef:f8:00:2b:0a:9e:f4:a2:5c:19:0c:99:82:31:
         da:39:bb:6a:28:ea:d2:d1:1f:ff:36:12:c9:bf:9d:68:2c:02:
         2d:e9:c2:fe:ef:96:0f:cf:8d:ef:04:6d:93:c0:6e:8b:ed:d7:
         ed:1e:b4:84:1a:71:bd:c1:78:f2:c2:ab:e7:e1:a2:bd:eb:ae:
         4f:6c:e7:65:1d:a4:84:de:79:3e:21:74:27:fe:81:3d:20:54:
         54:92:75:35:e4:65:49:9e:03:ba:e3:97:8a:bb:91:99:51:d9:
         14:8e:2b:b5:55:b2:f3:47:7a:ad:0e:aa:89:0d:e0:aa:28:ea:
         b2:b0:a9:d5:f0:ba:14:cf:be:08:de:5a:65:48:b6:b9:06:fe:
         4e:ce:96:77:77:87:23:83:55:b8:17:45:a5:ba:79:ed:e4:c4:
         ab:35:e0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 11:24:02 2026 by rpki-client