Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
File:                     X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json)
Hash identifier:          vA1vw4l5a+Mqa+k6ubF3ZsrJ3W2b57AnKKkCEl0TlfA=
Subject key identifier:   58:3E:2C:B6:A2:2D:9E:77:1E:91:A8:D8:79:A4:05:3C:5B:9B:96:FF
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Certificate issuer:       /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial:       01A0E889525BD6D0BDB729EA3E488091E7A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
Manifest number:          0322
Signing time:             Mon 28 Sep 2026 15:01:48 +0000
Manifest this update:     Mon 28 Sep 2026 15:01:48 +0000
Manifest next update:     Tue 29 Sep 2026 15:01:48 +0000
Files and hashes:         1: 5uXpm1mK2Lkx_hom9YzVY6h3X8g.roa (hash: Cn3egeW7Svzjn6B2DztmCBuQlzu52DOzJj+3bmdAQVc=)
                          2: 6PCZUJB3ipwVXLiyKcyJrFQu4wQ.roa (hash: m4ynyhKu4YCsiRrg6pHmEytuHr7lJuhn9fuEsyhPlJc=)
                          3: E442yFoubLa9bbHQX2sPzSASVTE.roa (hash: L1eajpA9gokqpuNWLmwF69Ryq4SoiSwFUyEsL1FAUYk=)
                          4: UgHcaBSwg0Iexf-S3Ppu9ltxOdY.roa (hash: uwkGrsjIen3tBe54+2c/5zWUfceUkyrc4GB8+Uk2gSA=)
                          5: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: Nc1ZEwAhGwc1GIRKNfdqKsrU5JLcrAD4eL9knX5Q5Kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:89:52:5b:d6:d0:bd:b7:29:ea:3e:48:80:91:e7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
        Validity
            Not Before: Sep 28 15:01:48 2026 GMT
            Not After : Sep 29 15:01:48 2026 GMT
        Subject: CN=583e2cb6a22d9e771e91a8d879a4053c5b9b96ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:bf:17:8e:12:15:cb:5c:bd:4b:10:38:6c:
                    92:82:9f:7e:4f:28:e2:9c:57:dc:ac:7e:7a:40:e7:
                    0b:5e:37:dd:09:51:7b:ac:28:be:07:aa:68:03:39:
                    15:06:af:6b:05:e8:c1:d0:87:15:d9:5a:d6:51:57:
                    19:18:c4:86:bb:61:42:45:a6:88:1e:a1:b7:d0:4d:
                    b1:0f:a5:d6:33:2d:09:b8:0a:b6:af:cf:d0:24:90:
                    ee:7a:26:c9:37:ad:30:04:74:47:0c:9c:86:73:7b:
                    28:5e:69:14:a5:03:28:7f:95:78:89:09:07:4f:45:
                    18:cd:6e:34:66:7e:0e:d4:8e:62:2f:45:49:bc:66:
                    a8:cc:9c:02:09:1c:e2:fa:fe:39:ec:13:6d:f3:f4:
                    cc:de:ba:b0:2e:63:b0:1e:10:4b:0b:71:90:f4:54:
                    a4:7c:7d:02:c1:64:96:8a:2b:1c:1a:df:60:71:d2:
                    07:f1:64:21:17:68:3f:00:2b:4b:56:2b:e8:be:08:
                    4f:2b:cb:45:63:8e:3d:bd:86:ce:d6:fd:a8:b9:86:
                    98:50:c7:65:4f:f0:c9:7b:eb:ca:e3:b8:96:94:46:
                    e4:f8:40:59:d9:0e:e7:11:8d:4b:88:f8:8f:dc:ae:
                    1a:8f:4c:7e:7d:32:34:71:54:fe:75:e6:42:96:30:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:2C:B6:A2:2D:9E:77:1E:91:A8:D8:79:A4:05:3C:5B:9B:96:FF
            X509v3 Authority Key Identifier:
                keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ba:1d:64:4d:5f:df:d1:fa:23:38:5c:14:42:22:47:ed:a2:
         6c:fc:7c:7e:b2:3f:f9:2f:7d:4a:68:35:f1:08:1e:73:fe:9b:
         e7:77:49:43:f3:a5:49:4d:2c:fa:3b:aa:53:00:68:6b:65:5a:
         f1:33:2b:95:d7:d9:0c:e6:c1:a3:01:8b:7d:ae:81:24:c2:9d:
         55:31:c3:94:b9:c1:ee:f3:a8:83:24:bb:a6:73:9c:a9:35:d6:
         2c:b8:e4:6f:89:42:5a:b2:6e:c2:7b:94:9c:58:6f:74:60:f4:
         bf:27:6b:32:c7:fc:33:03:8e:9b:cd:11:4b:72:1a:5c:52:9f:
         7d:a8:b3:54:df:b8:f0:d1:5b:d8:77:95:3d:08:94:10:f4:20:
         8f:96:62:e8:0d:97:00:cb:77:19:68:5d:03:57:d7:0d:f2:6b:
         00:47:12:44:21:7c:89:17:9c:26:2c:41:65:54:67:11:8c:6e:
         dc:81:7d:c6:86:d9:02:f1:a3:01:89:a1:4c:4a:bd:06:74:5e:
         5c:be:58:b8:6b:c4:ab:0d:6a:2b:a9:05:71:0f:c3:b7:f1:29:
         d0:79:00:25:56:98:e7:f2:47:f8:3e:ac:2d:c2:e1:c2:ba:c8:
         9f:ff:82:ff:1d:a5:30:c0:c9:6d:34:f7:51:b9:d1:17:e2:a2:
         be:c1:c8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:29:50 2026 by rpki-client