Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File:                     Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier:          2dwfZrA5PF4ao4a4FlUztmxk04PHkw+NDbbmpbJu2q4=
Subject key identifier:   CE:92:15:D2:AF:5C:00:81:75:16:92:5C:3D:65:06:04:B3:22:DF:8C
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer:       /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial:       01A0C8211A4E900F1683A954BF42A03826EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 08:00:07 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:07 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:07 +0000
Files and hashes:         1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
                          2: PQFHhglqtcFEFN0zXrd66FRNn2c.roa (hash: UrYnODwnEvY5/u5NDLBTYWkNOxtCx+Fpql4otdo2Y88=)
                          3: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
                          4: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: +GVWQKr/Sjx+KhJnPPeuIf6cWsRxNCw0CIojBBxBUds=)
                          5: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:1a:4e:90:0f:16:83:a9:54:bf:42:a0:38:26:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
        Validity
            Not Before: Sep 22 08:00:07 2026 GMT
            Not After : Sep 23 08:00:07 2026 GMT
        Subject: CN=ce9215d2af5c00817516925c3d650604b322df8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:e9:22:6c:7a:d4:33:0a:d4:e0:ce:61:9f:
                    3d:46:46:de:7f:9a:52:01:9e:87:6e:22:d4:11:c9:
                    2c:23:c1:27:8c:a4:5e:b8:c2:35:89:c8:01:00:78:
                    dc:4e:8b:64:0a:68:ea:f5:a3:39:33:ee:39:62:8f:
                    6d:97:ae:4e:91:24:be:3e:39:01:dd:f1:d9:85:f8:
                    eb:86:ea:16:3e:5c:d0:79:ec:12:a3:79:ce:78:2d:
                    a0:6e:8d:0e:7d:18:75:d9:7c:7b:aa:80:0d:63:35:
                    8e:0e:6e:f9:e6:a1:ed:f8:e5:84:72:09:86:40:82:
                    3b:7d:c0:aa:14:77:77:70:ed:91:22:72:92:c6:18:
                    e3:fb:80:2c:78:f5:8d:57:f3:30:81:fd:eb:c3:be:
                    0b:f0:a0:2f:db:92:fe:1e:73:49:37:0b:38:9e:f9:
                    d0:2b:b0:73:3a:1b:9d:d7:ae:2b:a1:40:84:a9:42:
                    f2:3c:0d:88:a0:d5:74:86:c7:61:ef:40:ee:38:63:
                    4c:f9:c6:74:4d:62:ac:6a:6c:54:7c:51:9a:d5:9f:
                    77:68:14:c5:97:b6:41:8a:a5:07:83:6c:f3:33:9d:
                    ca:12:3b:e5:e8:01:bd:7f:cf:41:02:db:9c:5a:66:
                    46:05:55:17:f0:01:d0:c5:83:7f:8d:3b:9f:d7:ef:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:92:15:D2:AF:5C:00:81:75:16:92:5C:3D:65:06:04:B3:22:DF:8C
            X509v3 Authority Key Identifier:
                keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:fe:58:a1:18:69:6e:ed:ff:a0:86:e2:bb:12:fe:85:c4:
         0a:73:03:e2:ca:14:8f:0f:58:4d:2b:ee:65:77:26:d4:42:03:
         9a:b9:2b:c2:a6:0a:8a:41:4c:18:78:4b:57:d1:6d:3c:8a:76:
         35:da:47:af:22:50:8a:9f:0c:7e:c6:72:4f:5e:e9:cc:c3:21:
         14:f8:0f:8e:73:24:0b:e6:c2:fe:05:05:0e:18:8c:35:30:13:
         b8:90:8e:69:24:45:00:7a:cc:e1:df:7a:34:cc:29:01:20:1e:
         00:9b:f3:f5:7b:e7:34:34:ee:1f:dd:e4:01:34:25:73:9b:fa:
         9c:96:2f:fd:ae:99:75:7e:9a:6d:64:9f:9c:d2:44:43:ba:93:
         54:6f:53:58:c3:c2:5a:cf:a3:4a:46:b0:82:f6:34:1f:65:cc:
         c4:2d:b9:2d:6d:c7:df:70:6d:ca:bc:15:5e:32:c2:fc:e6:e8:
         89:4f:a4:c3:4e:c7:ff:69:34:4e:21:dd:5d:a7:48:51:ee:89:
         8a:d6:ad:0c:83:bc:81:30:0b:da:59:8c:bf:cd:a3:25:d2:b4:
         5a:7b:56:3f:c7:02:c6:91:b5:e2:0b:00:fd:13:bc:e2:98:cd:
         39:37:31:18:70:4a:14:7f:2f:a7:d6:b1:cb:f2:eb:44:64:07:
         f5:bd:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:01:14 2026 by rpki-client