Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File:                     X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier:          KIW4mzWnRTOvBBjvcZVbqVWouMSixTrdMlVF4l+jRdQ=
Subject key identifier:   7F:D4:AE:46:CE:39:68:FA:C5:A9:FA:C8:E5:EC:B6:8F:F4:7D:D1:EC
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer:       /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial:       01A08DC47D289F25733586B77FFB2423297C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number:          0C6C
Signing time:             Fri 11 Sep 2026 00:00:59 +0000
Manifest this update:     Fri 11 Sep 2026 00:00:59 +0000
Manifest next update:     Sat 12 Sep 2026 00:00:59 +0000
Files and hashes:         1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
                          2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: Vj7PB77p0TnJwdJSQurRjXl5zwZagbqhDCjJEh/buWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:c4:7d:28:9f:25:73:35:86:b7:7f:fb:24:23:29:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
        Validity
            Not Before: Sep 11 00:00:59 2026 GMT
            Not After : Sep 12 00:00:59 2026 GMT
        Subject: CN=7fd4ae46ce3968fac5a9fac8e5ecb68ff47dd1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:12:b4:07:8b:12:98:62:f3:c2:ad:26:d7:ac:
                    88:8a:64:2c:78:87:54:19:ab:14:8b:98:c5:5d:b6:
                    a0:98:b6:62:d9:87:97:ca:b7:b3:c8:9a:0c:c7:9d:
                    6e:46:c8:af:34:b2:9b:af:bb:89:31:b8:bc:c9:3e:
                    76:47:66:49:a2:39:e1:92:bf:27:05:df:0f:1a:ce:
                    47:65:d4:48:60:42:2d:f7:e2:96:b5:fd:7b:3a:df:
                    00:73:ee:bf:a3:55:5a:a9:a3:4f:5b:29:d2:f9:ee:
                    14:bf:61:34:97:cb:e9:c1:ea:e1:f1:03:9d:14:43:
                    f3:8c:ea:2a:72:cf:7e:f7:eb:d4:fd:c7:5a:d2:e0:
                    bf:09:eb:59:ac:98:e7:6e:92:74:98:fb:92:58:8f:
                    f6:1e:40:62:b6:3a:87:ec:2c:8a:fa:49:d0:15:d1:
                    05:5f:35:52:d7:a5:8d:03:86:f8:bc:0c:8f:bc:e1:
                    94:43:0a:6e:cf:ef:fb:18:1e:0e:2e:ba:11:d7:58:
                    a5:d8:77:67:2b:d1:86:3f:34:7c:a4:ba:75:15:5f:
                    5d:de:c6:1d:e4:81:e2:e6:e2:9d:15:1c:2e:cf:d6:
                    62:5b:19:8d:64:a8:55:00:13:1b:25:8e:4f:48:03:
                    a2:88:5a:dd:51:b9:42:d4:eb:43:14:5b:68:ad:1d:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D4:AE:46:CE:39:68:FA:C5:A9:FA:C8:E5:EC:B6:8F:F4:7D:D1:EC
            X509v3 Authority Key Identifier:
                keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:73:33:e0:a8:46:c7:0c:71:c2:e3:f7:de:f3:39:fc:d3:38:
         46:86:2c:8d:5e:8a:91:7f:f6:98:58:c8:c9:5a:1c:1d:d8:59:
         82:f8:9a:b8:6c:ae:29:78:11:66:da:69:d8:55:1f:aa:54:e4:
         19:f7:5a:fe:89:98:9a:73:0e:2d:5c:d9:6c:89:d0:91:2b:0b:
         88:29:95:74:b0:a9:a4:bf:4e:a8:e8:31:85:18:13:bb:63:0b:
         dc:3b:61:c2:b1:d9:a1:76:e2:5e:a5:c4:0a:fc:4e:6b:d4:73:
         ef:ba:61:4e:59:ca:6f:ae:10:2a:96:6c:dc:62:22:72:a7:8a:
         c9:a0:5d:f1:63:ee:d8:e8:1d:fe:ff:6c:e4:85:fd:2f:93:b3:
         d8:3c:04:b7:4a:f9:8d:3c:e9:a4:9c:ca:2c:cc:74:be:e8:7c:
         75:2a:bb:e4:86:3d:4c:96:dc:ca:76:b9:97:c4:4f:4d:29:ed:
         78:38:25:8e:a1:98:df:0f:da:a2:c3:61:dc:b7:dd:60:ff:75:
         cb:d6:32:3d:4d:4c:69:1a:40:dd:61:87:b1:53:8d:ee:23:1b:
         15:ea:d8:a9:db:93:b2:5f:50:89:51:d7:aa:07:8b:df:91:10:
         95:40:f1:05:cf:87:00:29:8e:2a:73:8c:7b:66:5a:3b:33:98:
         b3:52:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:27 2026 by rpki-client