Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          IezC03Tv+o3GAHgZtYDcfD/6Rw9YUTzZguAbBrAWvxA=
Subject key identifier:   71:8B:BD:3C:BF:33:B0:A5:FA:8D:ED:A7:7B:7F:74:8C:E9:53:7F:AE
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       01A0DBA97D351CD65102EA0457BD5CDBB1B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          08B3
Signing time:             Sat 26 Sep 2026 03:01:52 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:52 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:52 +0000
Files and hashes:         1: 0-9sd-qmadUujczOz2WkJX2kNQA.roa (hash: GjNrMaOgADYzx542miG7jXCQg7xlwiNJxr+8IrSPpjc=)
                          2: AseCw-Cx6ezC6H7Qv_I1tR4Ip8I.roa (hash: gUy59gatZE9by6rU4gxGRzBS3ZQ/USUckizwien/R8k=)
                          3: W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa (hash: FSZFedNs1YnxbjhewAgdDVFznFYlPK2O05FcBLwFtyk=)
                          4: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: Yjpc2+U39Qjhs7TtVjrCGt3Ek7lXFa21G9jLrxRipQ4=)
                          5: jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa (hash: EV9l1WgVc2rsgYc/+T8QGA8A2PJD5mEc20rAUOjgeu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:7d:35:1c:d6:51:02:ea:04:57:bd:5c:db:b1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Sep 26 03:01:52 2026 GMT
            Not After : Sep 27 03:01:52 2026 GMT
        Subject: CN=718bbd3cbf33b0a5fa8deda77b7f748ce9537fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:2e:45:a6:1f:e0:f9:c6:bb:e5:51:59:4a:
                    16:d0:55:3e:bb:96:cb:8f:92:29:13:87:58:08:29:
                    9c:37:08:44:4b:f2:da:97:3a:e9:68:49:18:57:28:
                    24:21:4e:36:4f:ff:fb:f7:62:bc:3c:b8:85:45:20:
                    5b:45:a5:03:a4:f5:e8:94:c3:70:95:45:b9:9e:fa:
                    29:c6:5b:70:62:0f:a6:9d:63:09:d8:29:84:29:41:
                    9c:a9:b4:95:b6:c1:fa:6a:eb:13:65:02:c9:0b:00:
                    7f:13:8a:93:ad:b7:5a:b9:53:7e:a4:51:fc:84:00:
                    a1:28:aa:15:6b:52:cc:a6:98:bc:5a:9e:8e:27:fd:
                    31:6c:d4:6d:dd:96:61:fb:47:b8:45:fa:53:68:a0:
                    06:c7:02:0f:b9:7a:40:d6:c8:58:a0:af:45:e9:de:
                    e3:77:c5:d6:dd:52:3f:ee:c4:86:f5:7b:b0:a7:68:
                    15:3d:45:49:64:35:2f:84:7e:c0:5d:30:76:89:f6:
                    89:fe:c9:e2:1b:c2:5b:d2:ee:d5:c7:fc:ae:04:ab:
                    7a:8a:6e:f8:53:56:bd:aa:9f:30:a4:6f:aa:63:ae:
                    8c:e7:b8:de:ac:e9:8b:d1:77:5b:3d:8d:2c:07:62:
                    a3:c3:33:63:f9:d5:9e:86:e0:bc:36:92:69:bb:5c:
                    c4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8B:BD:3C:BF:33:B0:A5:FA:8D:ED:A7:7B:7F:74:8C:E9:53:7F:AE
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:0e:53:1e:d3:92:a0:08:68:1b:c2:95:a5:03:1e:b5:7a:
         e1:c8:7c:17:6d:aa:a3:35:7b:50:4b:f1:a5:16:c8:16:b8:b1:
         71:ba:e4:c2:0f:03:07:a8:ad:2a:33:4d:57:38:5c:f5:00:88:
         85:b3:e8:8e:18:cc:90:09:58:a9:56:01:d9:69:2b:69:bb:15:
         dd:7a:c0:02:24:25:d2:69:1b:dd:47:ed:e7:16:f0:3b:b6:29:
         75:91:93:c8:43:18:a3:8d:dd:93:5b:59:06:6c:27:b6:44:f0:
         7d:97:c4:04:55:eb:59:1e:17:57:87:83:0e:de:54:91:e5:f3:
         d6:a0:7d:2c:55:3b:9b:25:7b:af:69:4b:86:07:f1:ec:04:bd:
         40:6e:2a:f8:9c:9d:79:c7:4c:d5:62:a7:d9:0c:7a:21:a1:b3:
         ee:1f:f2:d4:eb:24:be:b9:43:94:f8:e5:a9:b6:92:19:46:8f:
         35:b9:bf:79:54:8e:4b:90:1d:1d:4e:ad:4d:e0:c7:1c:d1:a4:
         6e:89:dd:9d:26:d7:91:f4:a2:23:6d:48:7c:86:cb:11:9b:59:
         38:c3:03:0a:db:00:09:1b:76:6c:14:34:57:0c:f7:07:94:97:
         96:11:3b:93:af:32:f9:76:44:78:14:fd:f3:38:a5:2b:99:82:
         44:4f:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:43:01 2026 by rpki-client