Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          9lPipxh4TEJI8ezbWGdJbRh1KAfemtlZnl6lyOd3OOo=
Subject key identifier:   80:C3:DA:CB:12:D1:AA:7C:50:ED:5B:73:BE:86:92:B9:E1:7B:B1:18
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       01A10135BCB81A8165C8AB8790C1F8F3EB83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          0B4E
Signing time:             Sat 03 Oct 2026 10:01:01 +0000
Manifest this update:     Sat 03 Oct 2026 10:01:01 +0000
Manifest next update:     Sun 04 Oct 2026 10:01:01 +0000
Files and hashes:         1: HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa (hash: a/gPxO3vEuqfCp70KpDQq2lcCKuUQZuTopPVCy8m4LA=)
                          2: PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa (hash: 7fFDeno1llfmG5xw2+UhwO2bFxAsVyxjb17vnpRCoYg=)
                          3: PfU-pIQUztpuCpjeK4PA6M387xY.roa (hash: IxKP4N/sSJx4IV1KMlr0VGqT7A6A6/R7M00aHJnoW/w=)
                          4: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: L9MUu7oHQIamwBVK5EiLNWVrNKXlB7a4O3PVjnbG9a0=)
                          5: _BWqmK6mrfBuguQtqF75TBClGMs.roa (hash: uZ7P5xdR1guWm1uC7RQ3bBaQOHT/pKp/etCCjtf5eTs=)
                          6: mUrwLBSn-6OABt-a8CWyid9HQT0.roa (hash: QLR5JTAjIM5uhR1YB984cbq/Umms9s9InAJMrrGnnxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:35:bc:b8:1a:81:65:c8:ab:87:90:c1:f8:f3:eb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Oct  3 10:01:01 2026 GMT
            Not After : Oct  4 10:01:01 2026 GMT
        Subject: CN=80c3dacb12d1aa7c50ed5b73be8692b9e17bb118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:c4:e0:8d:3e:5e:93:5c:44:03:90:cc:d8:
                    a1:5d:5f:3e:fb:0f:74:99:8e:8f:61:c3:9e:c8:82:
                    83:00:a9:01:5b:6d:73:05:45:cc:9b:fd:33:97:39:
                    f2:c2:a3:c1:bf:cb:24:03:23:4c:c9:df:26:61:eb:
                    a2:ab:37:eb:b1:8b:b7:9a:84:b5:7a:91:42:0c:34:
                    71:c8:d7:d0:0a:e0:27:4f:73:0a:8f:51:6a:33:e0:
                    93:83:6e:a6:54:a8:8f:f0:d6:7a:db:f7:6b:50:ae:
                    91:28:16:d8:de:b5:40:76:fb:43:21:e8:d8:d3:d2:
                    cf:13:d5:3f:45:34:19:eb:12:43:3a:d5:54:e9:aa:
                    0b:f8:58:b4:c8:2b:16:45:51:99:a5:27:4c:cb:4f:
                    9b:e0:6f:e0:59:45:d1:74:99:28:22:47:4f:3d:2c:
                    ca:1f:0b:f6:71:51:e9:3b:ff:0a:6e:ef:d3:a0:fe:
                    35:2a:b1:25:3a:ba:c1:d4:0c:d7:d2:0c:84:3f:49:
                    27:42:d7:c2:41:f7:80:a9:17:46:68:47:3f:ec:89:
                    54:a3:a3:8c:e3:f0:1f:a3:60:ea:09:35:a1:b9:72:
                    78:5b:f9:49:12:a7:28:e6:60:0c:8e:5f:d7:a1:72:
                    56:f2:13:bc:bd:a6:c8:1c:1f:7e:2f:2a:ef:c9:3e:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C3:DA:CB:12:D1:AA:7C:50:ED:5B:73:BE:86:92:B9:E1:7B:B1:18
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:69:66:6d:81:7f:79:d3:94:13:04:2e:db:cd:51:40:ac:ad:
         88:43:77:69:a4:a6:e0:ea:85:dc:70:93:8a:4f:60:9d:b7:24:
         58:8b:f7:29:37:27:ba:8b:34:11:9d:d1:f2:e0:fe:80:a6:6a:
         1c:4e:92:0b:35:05:53:f3:a3:11:76:bc:65:df:9c:8f:67:f6:
         44:d5:37:0e:9f:45:d9:e2:06:ae:1b:04:e6:e9:08:21:e6:eb:
         5c:47:55:21:06:bc:50:c7:de:41:7f:b6:4f:ca:1c:e1:90:9e:
         36:dd:d9:cd:0c:00:e6:a9:24:b6:6e:57:a9:68:4e:70:e5:02:
         96:c0:c8:40:19:1b:2f:d6:dd:02:4d:2f:19:d0:8f:60:f0:05:
         a9:d3:8c:f6:2e:02:7c:8f:b4:96:ad:19:32:1e:8b:c1:6b:d5:
         bb:72:92:30:42:a8:d9:de:87:1e:bd:cb:7c:1e:5e:d8:5e:d7:
         f2:6e:a9:1b:8c:16:b4:71:fc:e1:bc:3e:81:80:9a:14:aa:43:
         96:bd:80:27:ce:8b:b5:2b:0e:04:36:a1:d0:73:76:30:e4:f2:
         d6:32:67:e2:b0:15:9b:71:c6:27:fe:23:a7:a3:46:a6:78:69:
         5a:00:b4:ae:94:b4:07:11:8b:f3:24:b8:1e:28:ca:8c:e9:c7:
         79:6b:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:10:28 2026 by rpki-client