Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File:                     XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier:          RgUGsLWWCdRGJng831JhM8oAs2IO/iOzrVSM11iLgfM=
Subject key identifier:   38:B1:D0:D3:19:70:9E:CC:B1:1C:36:16:C7:24:DA:FC:53:64:80:84
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer:       /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial:       01A13B24D0DE430F53BA6F771F61E3ACACB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number:          08D3
Signing time:             Wed 14 Oct 2026 16:00:30 +0000
Manifest this update:     Wed 14 Oct 2026 16:00:30 +0000
Manifest next update:     Thu 15 Oct 2026 16:00:30 +0000
Files and hashes:         1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
                          2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: yjiposdOXEaK2aCZ+hHt8xY/EP1v5j5u+dcWalDsGeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:24:d0:de:43:0f:53:ba:6f:77:1f:61:e3:ac:ac:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
        Validity
            Not Before: Oct 14 16:00:30 2026 GMT
            Not After : Oct 15 16:00:30 2026 GMT
        Subject: CN=38b1d0d319709eccb11c3616c724dafc53648084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:ca:60:2a:3e:22:fc:3e:19:2a:eb:01:95:
                    72:9f:b1:b0:06:21:e8:1f:52:65:99:f7:97:ae:8b:
                    db:f5:0f:9c:bb:a7:2d:5e:0a:6c:f0:92:8d:34:33:
                    57:86:40:76:d7:52:21:e2:80:a3:27:4e:5a:e1:e1:
                    20:9c:7a:08:87:46:8f:91:20:3a:37:7b:50:23:17:
                    a7:16:f6:80:ae:96:57:37:c1:93:cb:54:ed:fa:89:
                    01:ad:e3:d6:fd:e1:f8:7d:69:24:ab:50:90:23:1b:
                    1f:4e:a6:5c:0e:5f:98:9c:64:2d:13:9b:a3:d0:5f:
                    b8:fa:4b:99:50:92:72:9e:ad:9a:15:8f:06:97:b0:
                    74:65:e0:a7:85:9f:d0:36:b0:32:5b:e7:78:44:92:
                    d0:d9:54:65:e4:a7:a6:28:8a:cc:9d:84:29:93:98:
                    69:08:b1:3f:2a:2f:dc:37:73:b2:b1:46:21:d7:89:
                    f8:12:1f:84:c3:58:d4:eb:25:87:5e:e2:bc:11:44:
                    d8:36:c1:9b:fc:eb:a5:99:a4:86:6d:e5:3d:98:fc:
                    03:7a:87:6d:27:69:54:18:11:c5:1d:5b:d4:1f:1b:
                    12:81:cc:21:34:b9:ff:dc:68:b6:c6:f1:32:1b:a7:
                    86:76:5f:3b:48:59:32:4f:08:1d:11:e4:ce:2a:c3:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B1:D0:D3:19:70:9E:CC:B1:1C:36:16:C7:24:DA:FC:53:64:80:84
            X509v3 Authority Key Identifier:
                keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:99:88:45:ed:0c:2e:80:7f:a8:b9:c6:d8:de:22:c8:f4:
         61:43:35:6e:1e:1f:52:9c:8a:f8:fb:00:f9:d8:c7:11:ea:91:
         c6:01:a7:76:3e:4f:eb:48:16:ba:09:49:8c:1b:03:1b:c2:33:
         c7:3a:11:1a:e0:f0:e6:ac:ac:70:3d:f3:9c:40:a0:f9:c2:7e:
         4b:18:f4:69:3e:e4:9a:ea:b7:7b:f5:c9:33:8d:da:d1:a3:2a:
         38:e8:1c:95:b2:ee:51:1c:b0:46:7c:3a:3f:e2:1d:70:6b:80:
         94:79:c6:b1:8a:e8:76:98:56:93:e7:ed:42:aa:d7:04:ea:0e:
         0a:15:75:b7:86:1f:f4:cf:e0:c9:79:de:d7:b5:d8:4f:50:d0:
         a7:ec:9e:ec:5e:62:6a:db:d8:15:f3:0a:b3:bc:e0:e8:d2:62:
         33:e1:db:69:65:d8:dc:ec:48:52:66:c3:59:d2:56:e8:a7:3c:
         49:f9:aa:6d:d2:b5:c3:b0:93:f3:06:a3:91:c6:22:e3:6f:f9:
         f6:85:08:35:92:1d:51:83:21:fc:54:6a:52:45:fd:f3:59:af:
         15:66:bb:c6:fc:6b:9d:62:dc:de:9a:4c:78:7f:0f:c0:34:50:
         9c:e8:b1:0a:6c:0a:ef:3e:e4:c3:9a:77:45:7e:bc:4c:a4:49:
         ab:40:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:52:39 2026 by rpki-client