Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File:                     xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier:          Im1SBZSnmnxp4WuWTc9QHZl4ZkZLEWpTbo2MsEApHx4=
Subject key identifier:   BA:34:E2:17:6B:E0:70:5B:FF:6E:E6:17:12:2C:E8:09:F4:72:FC:92
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       019CA9EA94239767232985231A62FE4122E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number:          09B9
Signing time:             Sun 01 Mar 2026 15:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 15:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 15:00:48 +0000
Files and hashes:         1: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (hash: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4=)
                          2: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (hash: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4=)
                          3: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (hash: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc=)
                          4: eqTX003eyxyptc_5akwZQ-er_vM.roa (hash: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c=)
                          5: qBNprkht_3wALG390SrSxt6PGBw.roa (hash: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ=)
                          6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: y9n3X5WRiDPNSqZwua31joZLGY6NcIZHO9Vxzr9TGiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:94:23:97:67:23:29:85:23:1a:62:fe:41:22:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: Mar  1 15:00:48 2026 GMT
            Not After : Mar  2 15:00:48 2026 GMT
        Subject: CN=ba34e2176be0705bff6ee617122ce809f472fc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:af:96:21:c6:27:bd:c7:51:6d:20:d9:de:
                    91:ef:e2:fe:40:a5:15:d4:c7:2b:ea:e3:6d:1b:55:
                    21:ab:fa:19:d3:d4:89:da:94:d5:f2:38:e2:f7:9c:
                    d1:dd:34:b5:ea:7d:e4:4e:91:29:b9:c5:0c:28:36:
                    e7:13:d7:28:ff:ec:ad:14:87:50:5f:d8:72:51:0d:
                    c2:83:8d:e4:31:29:af:bb:c8:67:3a:ce:75:94:24:
                    7b:f9:30:13:54:63:25:a9:7e:2c:79:63:fd:af:44:
                    86:25:29:42:78:d9:a0:d9:c4:96:4c:15:22:aa:35:
                    ed:e5:c9:61:8c:47:c2:db:98:84:91:c7:1e:78:53:
                    45:c1:e4:9a:43:36:7c:6e:5e:94:3f:6d:03:d8:00:
                    28:68:21:c7:4b:06:40:09:20:df:a8:b6:fa:a0:6b:
                    c5:94:87:a3:b2:35:1d:87:25:7f:fa:63:d4:66:5d:
                    bc:37:cc:31:3b:cc:7b:bf:80:97:6e:23:f6:87:fe:
                    c7:91:c1:50:10:5b:4c:8f:ab:62:53:05:b1:a7:06:
                    07:da:e4:53:67:64:78:42:d0:8f:81:e3:3f:21:5f:
                    e9:38:56:95:88:30:f4:f9:21:75:d3:79:b9:98:6e:
                    55:e9:56:6d:05:2c:73:27:bf:2a:62:04:69:96:6f:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:34:E2:17:6B:E0:70:5B:FF:6E:E6:17:12:2C:E8:09:F4:72:FC:92
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:1b:8e:54:35:4b:79:5e:ae:0d:17:29:c4:cb:2b:d8:e3:
         f3:a5:1f:8e:12:61:d0:b5:22:bc:f1:42:5e:82:04:fc:9f:01:
         a5:94:12:28:90:f5:6f:44:69:e5:aa:6f:54:e4:71:d8:25:81:
         f4:93:7e:75:e6:50:9f:67:ad:6d:e1:af:e0:b2:f9:b1:ad:a3:
         a4:0f:12:1e:ce:ca:76:4f:0c:0c:0d:6a:1f:fb:35:83:48:ad:
         a1:e5:8a:2e:b1:41:32:d0:9a:38:3b:5c:20:96:92:40:8f:0e:
         ef:03:08:91:c2:4d:72:59:b3:e1:11:b9:78:aa:0f:6a:e5:0f:
         e9:02:0f:f2:96:36:a1:61:23:70:03:f9:78:02:80:5a:14:bc:
         37:fa:16:40:d9:f8:0a:c6:3d:14:ed:73:72:d3:59:d9:1f:d1:
         4e:77:a3:42:74:fb:78:25:76:e2:0d:ce:b3:61:b9:d9:23:74:
         0f:4e:1f:e1:b0:1b:bc:66:e2:3b:bc:79:9f:85:6f:90:d0:4f:
         8b:02:23:87:3f:54:a1:cc:35:7c:85:f6:06:66:28:68:52:f9:
         6e:b2:26:6f:5f:04:6f:ad:49:cb:18:02:0d:64:b6:c0:5f:93:
         f5:d9:2e:b9:63:0c:c8:70:32:3d:0a:39:50:a6:52:f6:a9:bb:
         6e:6f:0a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:00 2026 by rpki-client