Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          Z7df3stXIi7muHizIQPFv9fffRW3IPRHx9XuamP7V1Y=
Subject key identifier:   5D:76:AB:23:00:DA:87:9A:E1:C2:6E:15:84:A5:08:A5:80:EC:C6:01
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       01A0C934320D07C745FF3E01441C6970111E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          09E1
Signing time:             Tue 22 Sep 2026 13:00:36 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:36 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:36 +0000
Files and hashes:         1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
                          2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: qSQDpmpxCZqVZkA1P4+e8cw6OIel4GJnwMYXfVW5BLI=)
                          4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
                          5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:32:0d:07:c7:45:ff:3e:01:44:1c:69:70:11:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Sep 22 13:00:36 2026 GMT
            Not After : Sep 23 13:00:36 2026 GMT
        Subject: CN=5d76ab2300da879ae1c26e1584a508a580ecc601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:a8:59:4c:8e:20:fe:80:bc:05:e7:ce:9d:
                    10:ea:7c:4e:2a:ed:31:64:2f:dd:99:37:be:7c:43:
                    1b:51:15:9a:8e:55:cf:fe:0a:d4:b4:dd:56:7e:c7:
                    f9:58:7c:25:31:5e:7e:f4:ba:f1:5f:a9:4f:15:80:
                    58:28:6a:7f:59:89:2f:5a:46:38:33:d5:96:e5:80:
                    98:9b:d7:11:2e:95:fb:1b:35:59:ad:b9:80:84:fe:
                    9e:b9:38:bb:56:2c:43:59:d5:26:ab:85:75:e6:57:
                    d9:d7:53:75:b1:ae:15:2d:ec:bf:f1:6c:bf:7a:a7:
                    5f:de:95:c7:1e:fc:5a:26:43:1c:4a:8c:16:f4:6a:
                    f6:ef:af:1e:d6:ad:fb:87:82:b9:48:0e:1d:6d:76:
                    6c:f6:f4:6d:47:5e:8e:12:b0:08:3d:ba:6a:6b:77:
                    96:63:e2:29:4d:a4:9c:54:fa:bc:31:40:af:a2:ee:
                    7f:ee:db:54:f4:c3:8e:44:d0:07:4b:7e:71:1e:ef:
                    5a:81:97:00:ff:39:39:c6:4d:ab:76:64:90:0d:3c:
                    43:39:c3:de:6b:65:9a:87:e6:39:01:b9:3a:ce:da:
                    2b:7c:24:ce:c6:a6:a9:9e:e1:80:62:5e:fd:6c:ab:
                    1d:f6:d5:3e:9c:60:cf:36:94:72:ff:15:8a:f8:3d:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:76:AB:23:00:DA:87:9A:E1:C2:6E:15:84:A5:08:A5:80:EC:C6:01
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7c:a2:ed:96:c6:6f:40:14:8f:f8:a1:2e:3a:93:5b:4c:de:
         43:71:f2:b2:b2:e5:ca:67:a8:af:2f:26:af:99:9e:dd:73:b7:
         19:48:ac:0b:fa:61:aa:52:a6:f2:96:f0:f9:04:5c:14:b9:7f:
         4f:11:0a:7c:eb:2d:4d:ba:be:c9:eb:a8:bb:4a:19:37:46:6a:
         a0:7b:ef:62:75:3e:a4:78:be:49:3c:3d:ee:62:48:9d:a2:48:
         25:1e:58:48:9c:61:26:c6:16:45:cd:ea:a0:22:e3:1b:b4:f6:
         2a:7f:a8:2d:af:8e:21:ec:97:79:ad:35:55:c5:38:09:df:ee:
         2a:08:78:b3:05:e4:98:41:50:de:cb:86:00:30:7b:ed:44:64:
         22:13:13:b5:b8:b6:0f:ba:ce:03:8c:ff:b4:84:cf:f0:1e:31:
         a3:e1:e2:b0:f8:06:9a:f1:6b:74:74:54:d0:c9:68:77:5b:4a:
         aa:ea:f4:b3:47:c1:a5:a1:1c:46:1b:73:6d:6a:6d:a1:52:ae:
         d6:4c:1b:ad:a5:c0:a3:44:33:1a:bf:58:aa:25:3b:94:7a:96:
         0a:3b:bb:59:72:94:de:48:11:a9:22:be:0f:70:18:0d:7d:d5:
         dc:b4:28:74:8f:18:c7:e4:7c:4f:f6:ae:9d:91:fa:17:8e:b5:
         ee:f9:ff:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNDINB8dF/z4BRBxpcBEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl
YmFjYmYwHhcNMjYwOTIyMTMwMDM2WhcNMjYwOTIzMTMwMDM2WjAzMTEwLwYDVQQD
Eyg1ZDc2YWIyMzAwZGE4NzlhZTFjMjZlMTU4NGE1MDhhNTgwZWNjNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fqoWUyOIP6AvAXnzp0Q6nxOKu0x
ZC/dmTe+fEMbURWajlXP/grUtN1Wfsf5WHwlMV5+9LrxX6lPFYBYKGp/WYkvWkY4
M9WW5YCYm9cRLpX7GzVZrbmAhP6euTi7VixDWdUmq4V15lfZ11N1sa4VLey/8Wy/
eqdf3pXHHvxaJkMcSowW9Gr2768e1q37h4K5SA4dbXZs9vRtR16OErAIPbpqa3eW
Y+IpTaScVPq8MUCvou5/7ttU9MOORNAHS35xHu9agZcA/zk5xk2rdmSQDTxDOcPe
a2Wah+Y5Abk6ztorfCTOxqapnuGAYl79bKsd9tU+nGDPNpRy/xWK+D1g+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF12qyMA2oea4cJuFYSlCKWA7MYBMB8GA1UdIwQY
MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt
NGE3ZGRmMmQ4NmJkLzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk
LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXyi7ZbG
b0AUj/ihLjqTW0zeQ3HysrLlymeory8mr5me3XO3GUisC/phqlKm8pbw+QRcFLl/
TxEKfOstTbq+yeuou0oZN0ZqoHvvYnU+pHi+STw97mJInaJIJR5YSJxhJsYWRc3q
oCLjG7T2Kn+oLa+OIeyXea01VcU4Cd/uKgh4swXkmEFQ3suGADB77URkIhMTtbi2
D7rOA4z/tITP8B4xo+HisPgGmvFrdHRU0Mlod1tKqur0s0fBpaEcRhtzbWptoVKu
1kwbraXAo0QzGr9YqiU7lHqWCju7WXKU3kgRqSK+D3AYDX3V3LQodI8Yx+R8T/au
nZH6F4617vn/Pw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:10:13 2026 by rpki-client