Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File:                     xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier:          A84wdOBs6U640eZ3xCdS6A+fAr0SSM9nzbxbdde/kMw=
Subject key identifier:   7E:50:15:04:F6:6A:0E:98:78:82:98:A0:EA:AC:90:86:49:55:08:2D
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer:       /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial:       01A0C933F793654FBF421AD7BA6384928425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number:          01AE
Signing time:             Tue 22 Sep 2026 13:00:21 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:21 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:21 +0000
Files and hashes:         1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
                          2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: lOzJKVSOX768fvaE8+id+oxisoUoiiqLdyJMqXuWnhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:33:f7:93:65:4f:bf:42:1a:d7:ba:63:84:92:84:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
        Validity
            Not Before: Sep 22 13:00:21 2026 GMT
            Not After : Sep 23 13:00:21 2026 GMT
        Subject: CN=7e501504f66a0e98788298a0eaac90864955082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:99:e2:0c:9b:70:1c:73:74:ab:87:b5:34:
                    8c:4f:f8:bb:46:a2:c4:20:fd:c5:ba:de:fb:6e:c4:
                    42:dc:e4:a1:62:a4:6d:17:0a:9f:0f:c8:18:2e:83:
                    f4:85:c0:9a:af:35:5a:74:7b:8d:bb:c2:47:78:3e:
                    44:34:f9:86:62:13:13:cd:a5:6b:5f:84:f2:0f:78:
                    fb:23:e3:06:e1:4c:05:41:2f:20:fc:81:6a:b7:0c:
                    c8:c6:a7:76:88:5e:22:24:91:1b:a9:ef:39:82:8d:
                    06:15:61:0e:34:0f:fc:a8:4e:8f:8d:ba:39:60:a7:
                    88:25:a9:82:43:a2:ba:f8:b5:7e:43:2a:48:35:72:
                    c8:ad:44:d8:43:66:f5:9a:7f:07:7c:a5:35:d2:55:
                    99:66:a0:e0:8f:6f:d4:37:1d:c7:d3:75:d3:3b:d6:
                    7b:87:b8:e3:81:4a:a1:21:89:c5:b0:61:4b:c3:b2:
                    7a:19:09:4b:04:9d:88:e8:56:d4:6d:ba:0e:72:26:
                    c2:09:de:50:8d:46:44:a3:03:e6:ac:63:f4:75:d6:
                    ee:50:79:6c:f1:0c:b9:55:a4:3f:8d:80:14:5f:a8:
                    b1:2f:3a:cc:aa:2d:b0:1f:f6:cd:47:c1:1b:76:49:
                    b5:24:d4:a1:a4:41:6a:5d:9a:f8:36:0b:43:cf:ad:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:15:04:F6:6A:0E:98:78:82:98:A0:EA:AC:90:86:49:55:08:2D
            X509v3 Authority Key Identifier:
                keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ec:96:69:58:4c:eb:6c:48:12:4e:0b:ee:43:f5:5c:f2:24:
         b4:46:2f:7a:28:d3:38:c8:16:de:3f:24:fe:25:26:90:ac:ce:
         c0:a9:7c:71:91:46:a4:56:a4:76:34:66:8c:b6:a1:7b:76:76:
         77:70:8d:a3:cc:14:06:88:2b:4a:88:92:5f:13:07:d9:af:4b:
         ea:b6:22:11:12:3b:ea:d3:50:3b:5c:9c:a8:c6:05:ee:29:c9:
         85:c3:3a:c9:fe:27:76:0f:58:64:ba:b1:dc:3e:2d:8f:9f:70:
         62:3c:10:73:5c:4d:e5:a9:b5:9b:24:5d:4e:0b:1a:06:b6:dd:
         d8:d8:76:65:c3:9e:c8:f6:df:b1:ab:d5:f4:07:7d:12:a4:f4:
         48:49:a7:a9:c6:ec:95:14:ed:69:e4:5c:aa:cb:e7:8e:9d:fd:
         89:dc:85:74:fe:6b:eb:b8:23:55:9d:7e:dd:66:cb:0d:12:20:
         8c:df:ee:c7:7f:84:40:10:65:63:db:77:a0:f8:bd:4f:63:5e:
         2d:7c:08:ce:28:4f:19:79:57:63:69:7f:ee:4f:5c:cf:8b:52:
         a8:b6:f3:88:42:66:ed:81:69:62:a8:d1:05:ed:25:ce:94:06:
         95:8c:6c:29:99:00:72:3d:8c:8c:cb:92:e6:69:1d:d6:9a:b5:
         ef:5f:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:47:58 2026 by rpki-client