Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File:                     xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier:          sI+vX4IYZRe8GFVMnsJ1zhOQMyzL8kjSmC1k8Xeoo3M=
Subject key identifier:   C3:3A:D5:1F:6E:3D:7E:71:FF:A9:42:66:D6:9D:5C:5F:FE:C6:12:F3
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer:       /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial:       01A134105BA5B0C0503E933C58131AB7325B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number:          07BA
Signing time:             Tue 13 Oct 2026 07:00:49 +0000
Manifest this update:     Tue 13 Oct 2026 07:00:49 +0000
Manifest next update:     Wed 14 Oct 2026 07:00:49 +0000
Files and hashes:         1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
                          2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: N/DAvunhGYuAvkVFWaqlUwDYmjWidfPp/xnP9KId7Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:10:5b:a5:b0:c0:50:3e:93:3c:58:13:1a:b7:32:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
        Validity
            Not Before: Oct 13 07:00:49 2026 GMT
            Not After : Oct 14 07:00:49 2026 GMT
        Subject: CN=c33ad51f6e3d7e71ffa94266d69d5c5ffec612f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ec:51:f8:a6:52:f9:56:a8:88:b3:c6:6f:96:
                    3a:0a:d9:a3:b4:ac:11:f3:54:89:32:90:ad:87:da:
                    bf:81:a2:5e:fe:85:72:16:67:7a:03:57:c7:d9:49:
                    77:29:22:2a:bc:c0:c3:e6:52:86:8a:da:1a:9d:8e:
                    2e:5f:6f:e0:dc:c2:6d:05:67:c2:96:f8:5e:8c:06:
                    95:15:17:ef:76:d6:1c:e4:3f:ae:1b:d2:76:04:0c:
                    7f:8f:ee:a4:d0:39:33:d8:97:f7:aa:78:54:ba:8b:
                    5b:73:a1:78:bd:c7:59:55:23:c8:96:24:b6:c2:d4:
                    86:bf:9e:e6:65:12:1b:94:d2:f4:87:69:70:76:18:
                    2b:b7:6f:14:b4:57:0d:60:d0:b9:48:80:27:4e:9f:
                    fa:63:c1:8c:da:e0:23:98:2b:33:ec:c5:b2:a8:be:
                    4a:35:64:ed:05:2f:31:09:0e:bd:7e:f3:07:56:f8:
                    19:68:c0:6d:ce:20:e3:d9:97:5e:8b:70:a8:bf:ef:
                    6b:e8:06:25:8e:54:45:8f:68:14:44:90:79:e5:65:
                    ae:6d:ad:b9:7e:5a:e9:8e:91:17:2c:d2:68:77:13:
                    bd:f3:c1:45:28:2c:ca:96:7d:db:60:e3:76:88:93:
                    12:9d:70:cc:46:ce:99:cc:1a:4e:3c:b6:31:e3:b9:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:D5:1F:6E:3D:7E:71:FF:A9:42:66:D6:9D:5C:5F:FE:C6:12:F3
            X509v3 Authority Key Identifier:
                keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:60:82:71:a2:8c:27:20:2b:3c:8c:34:3c:4b:a1:d9:29:
         33:fb:96:74:0b:d1:b0:e2:1c:72:70:30:46:a6:1d:ff:64:56:
         53:93:d2:9e:92:8b:ac:7b:87:97:e5:e3:dc:bf:d2:c6:af:bb:
         f0:41:83:a7:f8:b8:78:e5:8e:22:e5:b1:d6:50:62:dc:6f:6f:
         23:02:5e:c6:ff:87:7f:b3:84:07:6c:19:51:09:2e:10:59:9e:
         bc:b7:33:f0:a7:cf:58:c9:37:83:71:c0:84:3d:c7:26:e9:c8:
         58:8c:4c:34:d9:3f:48:ed:5c:75:33:48:f4:97:c5:8a:8e:86:
         18:ec:e0:8d:1b:85:11:22:c1:c4:31:99:12:da:0a:22:bc:fd:
         4b:0e:fe:01:24:f6:07:21:b7:0e:a4:4c:cb:e3:62:75:f2:0c:
         c9:df:8d:86:a6:0a:b0:2c:ec:3a:c1:ee:bf:f5:3c:85:62:dc:
         9d:76:8d:c5:b1:99:f8:ed:56:95:e8:c8:e3:46:23:00:cc:4f:
         a0:5e:6a:ee:c7:d3:dd:c7:f6:73:e2:50:3c:b6:bc:1b:5d:5e:
         15:bc:9b:32:f7:1d:e6:62:a4:fb:23:64:8f:12:9d:90:7b:fa:
         9d:a9:33:2b:ce:c4:6a:fd:55:63:1d:3f:12:56:74:91:fb:4f:
         28:46:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:16:42 2026 by rpki-client