Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File:                     X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier:          qFuagLkSOBXxLbPWyjpC9QuvZO4M2Poj9v5G8sa5bro=
Subject key identifier:   CD:3E:28:FD:B7:F2:B1:4A:3E:A7:3D:D7:CD:5C:C5:FB:1E:BC:59:62
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer:       /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial:       01A08BD613D209BE25AC382A35BB3D40E300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number:          0C6B
Signing time:             Thu 10 Sep 2026 15:00:57 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:57 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:57 +0000
Files and hashes:         1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
                          2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: 5M9H79iFOkTVJRgr0jgp1Zg/gwzCshCLb02dOvaxiSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:13:d2:09:be:25:ac:38:2a:35:bb:3d:40:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
        Validity
            Not Before: Sep 10 15:00:57 2026 GMT
            Not After : Sep 11 15:00:57 2026 GMT
        Subject: CN=cd3e28fdb7f2b14a3ea73dd7cd5cc5fb1ebc5962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:5d:82:73:c3:69:ab:cb:ec:c5:c0:ea:19:
                    44:a1:ba:d4:1c:80:ef:15:93:ff:d5:59:ce:2a:ae:
                    56:b8:51:fc:d2:ac:bd:93:f1:e4:39:fc:a5:3f:a3:
                    a0:a6:54:5d:6c:fa:16:44:a3:00:a3:5e:3d:fe:5a:
                    4a:7f:f1:f8:5f:7a:26:39:a1:e9:32:1e:e8:56:9f:
                    61:09:64:3b:fd:5c:ae:bb:a9:ca:7b:3d:41:38:5e:
                    78:6a:f1:96:b4:ad:97:78:96:4f:d5:e3:ec:1e:40:
                    10:42:6b:7f:0e:a2:01:0a:59:21:04:59:ad:a2:05:
                    9e:0f:5f:48:dc:7f:65:dc:0f:8a:36:ea:e4:1b:2a:
                    50:f5:33:fd:d4:cd:a3:65:7b:8d:58:39:d7:6d:08:
                    83:93:06:f7:58:fb:58:ef:04:47:d7:4b:9b:ad:88:
                    2b:93:0b:6f:ff:30:f5:6f:d4:e6:6a:ee:35:58:00:
                    df:a7:22:41:89:c0:ef:6c:d6:0e:2b:5d:e4:8c:e9:
                    06:6a:57:c9:c1:ee:e5:11:02:60:74:2f:89:13:7c:
                    2f:a1:00:2c:40:1b:9f:3a:e8:6f:4a:e3:af:b9:c2:
                    13:2d:2f:6e:ff:3d:69:8f:fc:2b:57:0c:aa:71:e9:
                    16:b5:6d:37:d9:be:6c:ab:f6:3a:a0:3d:38:8a:ab:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3E:28:FD:B7:F2:B1:4A:3E:A7:3D:D7:CD:5C:C5:FB:1E:BC:59:62
            X509v3 Authority Key Identifier:
                keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:84:f6:b3:3b:fa:7d:31:fd:a9:50:e9:68:c0:d0:41:58:b5:
         12:9a:20:14:ae:a3:df:de:be:15:30:97:5d:f9:83:0f:f4:bc:
         24:3f:8b:10:b2:10:93:3e:7f:fe:61:7e:33:30:77:8f:81:4e:
         6b:75:e4:76:f6:e7:51:c5:d2:2c:2f:7f:31:9f:08:f2:47:08:
         80:3f:47:78:9b:65:4c:7f:d9:78:c9:90:63:0f:44:0b:f2:39:
         01:43:16:5a:ca:35:b3:91:0d:06:4d:55:c9:22:b8:02:2a:70:
         75:38:e5:80:c9:67:02:94:38:c5:75:37:c8:6e:dd:a7:b1:de:
         96:42:50:a4:2c:13:2f:27:dc:02:93:c7:fa:98:35:03:87:ce:
         ee:81:72:b3:bf:d5:28:ba:ff:86:ac:f6:5d:23:09:3b:c1:dd:
         ce:52:19:58:91:d0:b4:7d:a3:c8:26:f6:2c:d9:2e:2f:d3:77:
         cb:cf:f3:18:6d:8b:69:41:45:45:10:b3:33:b3:2d:ca:fd:5e:
         93:f9:da:32:7f:9c:3b:10:eb:21:db:fe:25:af:df:44:03:53:
         23:e1:f4:3b:bf:3b:8e:65:d3:7d:6b:83:1a:51:b7:3e:64:04:
         71:bc:51:21:2b:f6:56:72:11:2a:28:a3:cf:bd:26:a3:d5:0b:
         66:6b:6c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1hPSCb4lrDgqNbs9QOMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw
Nzg0OTEwHhcNMjYwOTEwMTUwMDU3WhcNMjYwOTExMTUwMDU3WjAzMTEwLwYDVQQD
EyhjZDNlMjhmZGI3ZjJiMTRhM2VhNzNkZDdjZDVjYzVmYjFlYmM1OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw9dgnPDaavL7MXA6hlEobrUHIDv
FZP/1VnOKq5WuFH80qy9k/HkOfylP6OgplRdbPoWRKMAo149/lpKf/H4X3omOaHp
Mh7oVp9hCWQ7/Vyuu6nKez1BOF54avGWtK2XeJZP1ePsHkAQQmt/DqIBClkhBFmt
ogWeD19I3H9l3A+KNurkGypQ9TP91M2jZXuNWDnXbQiDkwb3WPtY7wRH10ubrYgr
kwtv/zD1b9Tmau41WADfpyJBicDvbNYOK13kjOkGalfJwe7lEQJgdC+JE3wvoQAs
QBufOuhvSuOvucITLS9u/z1pj/wrVwyqcekWtW032b5sq/Y6oD04iqsK1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0+KP238rFKPqc9181cxfsevFliMB8GA1UdIwQY
MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt
MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh
LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoT2szv6
fTH9qVDpaMDQQVi1EpogFK6j396+FTCXXfmDD/S8JD+LELIQkz5//mF+MzB3j4FO
a3XkdvbnUcXSLC9/MZ8I8kcIgD9HeJtlTH/ZeMmQYw9EC/I5AUMWWso1s5ENBk1V
ySK4AipwdTjlgMlnApQ4xXU3yG7dp7HelkJQpCwTLyfcApPH+pg1A4fO7oFys7/V
KLr/hqz2XSMJO8HdzlIZWJHQtH2jyCb2LNkuL9N3y8/zGG2LaUFFRRCzM7Mtyv1e
k/naMn+cOxDrIdv+Ja/fRANTI+H0O787jmXTfWuDGlG3PmQEcbxRISv2VnIRKiij
z70mo9ULZmtsWQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:29:41 2026 by rpki-client