Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          biWnTMXtvfuB/hUFfdcYR6PkevPBvu9GRsQruz1HZ/A=
Subject key identifier:   BE:A0:11:F9:74:E7:BD:73:BB:36:52:7F:82:74:56:63:74:B2:6E:06
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       01A12C1FC482CD9E86139161A442F6DB7768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          1A3A
Signing time:             Sun 11 Oct 2026 18:00:41 +0000
Manifest this update:     Sun 11 Oct 2026 18:00:41 +0000
Manifest next update:     Mon 12 Oct 2026 18:00:41 +0000
Files and hashes:         1: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (hash: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M=)
                          2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: QbW+Gb9/XTNGDbSkjPeqbAYQ0v54nfkuDqU17o9opws=)
                          3: gSEruQPSsoefkss2yCXL7050kig.roa (hash: P+q5a1NeLiWUtBFC04Wzt8w9SD2Mit1ctA7LK/VHJRo=)
                          4: xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa (hash: 7eLkL929YGBrLf10p7Xu8H5BWgjYEKgp3pDvwQ/th+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:1f:c4:82:cd:9e:86:13:91:61:a4:42:f6:db:77:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: Oct 11 18:00:41 2026 GMT
            Not After : Oct 12 18:00:41 2026 GMT
        Subject: CN=bea011f974e7bd73bb36527f8274566374b26e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:e1:a9:e1:fe:a2:4e:bf:f1:ee:55:64:67:
                    89:ed:66:64:75:ca:30:21:17:31:e3:16:10:e1:02:
                    ef:5d:a8:2c:d5:8f:82:5a:90:f9:9c:bc:50:11:0f:
                    ea:54:9c:34:19:d4:1f:7e:a2:82:f8:c7:8f:5b:eb:
                    15:f0:06:70:b8:75:5c:84:58:c7:b0:dd:47:d5:5b:
                    05:0e:9f:52:aa:18:65:9a:1d:0b:f7:1e:bd:59:2b:
                    9e:0d:7d:34:60:e5:44:1c:6e:2b:52:38:34:35:93:
                    65:f3:45:bc:03:27:47:19:ed:7b:70:8b:9c:d8:3f:
                    74:af:c0:45:c4:4b:e7:28:a9:4d:d7:e2:55:ee:33:
                    d5:45:64:b7:89:70:36:78:6a:7f:5f:90:5a:95:f9:
                    16:66:6e:01:36:c2:60:1e:8f:2e:1b:49:53:49:c9:
                    47:d0:c1:a6:ff:01:cd:40:fd:b6:99:c4:22:6d:68:
                    60:69:6a:89:5c:e7:eb:04:d5:9c:5f:5a:c2:11:e6:
                    d9:4f:ec:72:42:20:ca:e6:40:b0:18:31:3f:b4:91:
                    3a:6e:c6:c1:a6:91:e5:62:4b:7e:0a:7b:cc:ac:bf:
                    7c:f7:c6:78:19:3f:2f:51:c4:38:95:a3:ac:52:2e:
                    52:10:99:7b:dd:71:6e:71:5e:84:34:72:95:43:d6:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A0:11:F9:74:E7:BD:73:BB:36:52:7F:82:74:56:63:74:B2:6E:06
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:93:c4:90:6c:e8:24:7b:c2:bb:f8:55:94:af:af:4a:c9:a8:
         76:30:5f:e7:6f:50:8b:c6:95:0e:1e:85:c7:e9:27:1d:c1:f5:
         44:6c:da:17:8e:b1:ce:b9:14:0c:09:73:88:d2:ba:59:ad:a7:
         cf:1c:5f:f6:7a:4e:90:04:5b:29:a8:4d:66:80:e8:05:0a:96:
         24:6f:c0:b8:ad:eb:dc:28:ac:7d:04:a3:53:93:73:9f:9e:d4:
         a5:cb:29:f5:84:f8:1d:54:22:8d:fb:0e:d9:c2:ca:1a:a4:1a:
         49:70:bb:71:34:69:a5:1d:fd:a7:72:ab:14:db:98:38:7f:83:
         58:57:6f:60:fd:92:64:35:d4:9c:e5:54:0b:be:d3:30:b2:5e:
         a5:95:c9:65:25:82:4d:c7:09:db:fb:03:8f:bf:cc:c2:ea:53:
         e3:d6:ac:8d:aa:48:aa:74:72:51:c7:b0:18:bd:6e:a8:ce:d7:
         e0:cb:98:6e:7e:d9:4d:7d:2f:cc:eb:50:13:d7:82:f3:76:35:
         76:e4:a2:fc:85:20:81:07:47:78:d9:bd:ba:ce:b0:e6:0e:b1:
         36:7f:b2:6b:cb:73:63:d2:74:d4:53:3e:c7:a7:5d:5a:11:f7:
         47:80:2a:38:06:6c:af:12:10:05:a4:aa:a3:4d:f0:d6:5d:76:
         2c:1e:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:53:21 2026 by rpki-client