Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File:                     X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier:          xxEHzfAJwrcpf4HmV1+BBGw5qZMr711ry8gLj4wy8Kg=
Subject key identifier:   8D:BF:E5:CC:0A:A2:B2:D6:35:31:89:6F:EE:3E:08:CF:9D:98:DA:96
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer:       /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial:       01A13A803A5E16F900B0F07F636C8FB1A108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number:          14B7
Signing time:             Wed 14 Oct 2026 13:00:44 +0000
Manifest this update:     Wed 14 Oct 2026 13:00:44 +0000
Manifest next update:     Thu 15 Oct 2026 13:00:44 +0000
Files and hashes:         1: OgANtrj8j6WImSC_x9463NVhsNw.roa (hash: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=)
                          2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: wFrIJLP+26I8v+OmVu54S+Ovt+FkYJ5ZTLVACepbVVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:80:3a:5e:16:f9:00:b0:f0:7f:63:6c:8f:b1:a1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
        Validity
            Not Before: Oct 14 13:00:44 2026 GMT
            Not After : Oct 15 13:00:44 2026 GMT
        Subject: CN=8dbfe5cc0aa2b2d63531896fee3e08cf9d98da96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:d0:88:6a:0b:00:57:8d:2c:3c:15:62:3e:
                    9f:4f:fb:6a:f2:c1:ef:b0:08:0b:b0:e9:b3:ae:3e:
                    82:d4:d9:cb:5c:f7:be:a5:d4:07:f3:e3:8d:c9:61:
                    ea:99:be:ff:9f:b8:41:99:ae:1f:5c:0c:01:79:07:
                    05:a8:2b:15:e1:0f:4e:bd:2a:d8:d2:51:51:27:20:
                    8e:7e:5e:53:42:f8:60:3c:eb:c3:5f:a0:12:01:ea:
                    22:74:7d:d6:b2:81:6d:6a:04:b8:5c:a5:db:31:d8:
                    ab:d8:e6:c9:99:0c:dc:8f:04:00:78:e4:1a:db:f4:
                    39:3a:a0:e9:fc:7f:7b:36:53:5a:d2:69:88:15:bc:
                    14:4c:51:2a:49:70:59:1c:5c:f6:c8:66:d8:07:0b:
                    02:76:f3:e6:0d:1f:c0:b3:8c:7e:4c:3d:15:9b:fa:
                    04:bb:34:d7:45:c3:c1:0e:5a:31:3d:1f:2a:82:8f:
                    7d:5c:92:c7:27:3b:26:1d:ea:3f:d6:2a:d8:d3:ec:
                    6d:ae:12:c6:72:5c:00:ef:16:d1:8c:12:b2:83:59:
                    d0:73:5d:76:88:3e:f0:aa:a9:29:8f:b6:c6:23:bd:
                    e7:3a:30:83:b3:f3:8c:41:5a:5e:7a:24:9a:56:74:
                    62:3a:58:39:71:23:6b:c2:54:9d:e6:9c:0d:27:87:
                    52:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BF:E5:CC:0A:A2:B2:D6:35:31:89:6F:EE:3E:08:CF:9D:98:DA:96
            X509v3 Authority Key Identifier:
                keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:47:5d:f3:30:ef:b4:15:8a:fe:51:96:92:ed:8b:66:fd:12:
         6d:69:fa:17:bc:64:2f:2d:ae:66:ce:d4:d7:20:65:9d:0c:78:
         f8:66:4d:69:e7:f4:9d:7b:f6:37:9e:3d:bf:10:7c:56:50:b6:
         1d:a2:4e:fc:5f:96:37:f6:30:0c:4b:d6:14:a9:11:3b:0a:95:
         ea:f8:bc:01:df:22:ae:ca:22:84:a2:54:7d:0e:cd:6d:0d:1c:
         67:b5:4e:5f:5d:13:c8:fc:46:cf:79:be:7c:78:99:d1:4e:b2:
         e7:7b:40:f9:da:a4:9e:0c:82:c4:ba:68:73:6a:d5:96:95:5d:
         3a:b4:75:c0:ce:7a:6a:37:d0:d3:3c:64:d2:e6:17:b9:db:f0:
         eb:bc:54:39:b0:91:aa:2d:f3:44:98:45:17:fa:86:5a:ec:53:
         29:bd:26:50:e2:e9:30:b2:0b:8c:70:cc:d0:61:29:67:f3:d0:
         bb:af:78:3b:60:20:5e:a1:50:03:c7:a7:9b:c6:49:a1:19:31:
         a3:69:71:0b:92:ad:1c:e5:e4:9d:53:2c:27:67:91:f7:c4:f5:
         ba:96:f9:d2:14:de:2d:ae:29:32:5f:a3:3e:4f:b5:4d:5c:81:
         76:f6:34:17:96:c1:39:15:35:38:39:6f:44:c6:51:e8:60:87:
         97:ce:6e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:23:26 2026 by rpki-client