Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          /T6P8rTn8aTh4UU/nNYB7vTYX9zKbGoR+RaPIjWoxE4=
Subject key identifier:   7C:42:F5:C0:7F:97:5F:10:10:F7:F1:4F:F9:B5:12:1F:F6:40:22:CC
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       01A0DDCE7D23718BC3A3A224C9B3E2AA8FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          1AA8
Signing time:             Sat 26 Sep 2026 13:01:32 +0000
Manifest this update:     Sat 26 Sep 2026 13:01:32 +0000
Manifest next update:     Sun 27 Sep 2026 13:01:32 +0000
Files and hashes:         1: 9D820He12zEiGHJY2yEp95HuOYo.roa (hash: JgNweIsliEaUH1GQxpLBgGrSQ23iPTPHkKTdFr797ts=)
                          2: HPAT1MyeKAtUXfiwHelB0dU143I.roa (hash: MB/EaJsVrRQhtNPL6YNv0ijVFjc3MkwuTavJrFTSstk=)
                          3: P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa (hash: DDSuenDK/kT9T6J/tQTGQwxbDy3mpq7Bc6isbXiDO5I=)
                          4: TieuC1DoyThjRQq3uG3ihjLScTo.roa (hash: vC9rnpVx2T8cbVOPfkfZTZYOxBuzPINUpSnwkUZDkSE=)
                          5: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: MFlMq8b/S1oK6hDnqpu+phFOqYbMw8VUnvT3HCrG5qA=)
                          6: bcAIwuJO8aDrVEXNrt-8O6on-lo.roa (hash: Q91/Ln+O0FS/Y8Cqj8uQ0UCV73gOKZK5ODen/j5W9Oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:ce:7d:23:71:8b:c3:a3:a2:24:c9:b3:e2:aa:8f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Sep 26 13:01:32 2026 GMT
            Not After : Sep 27 13:01:32 2026 GMT
        Subject: CN=7c42f5c07f975f1010f7f14ff9b5121ff64022cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:1b:14:48:7f:a0:03:19:f7:78:bc:28:29:
                    3f:39:8c:7a:c6:bd:5f:fb:15:ef:5f:79:18:4a:22:
                    ce:01:ac:4f:f8:5c:43:78:9b:8d:a7:c9:f9:5e:a9:
                    8d:6c:35:f6:d2:2e:c4:9b:5c:ff:61:a0:98:7b:dc:
                    00:69:9c:8c:f7:e8:5d:0d:7a:70:c8:57:27:f0:e3:
                    44:b4:37:9e:1c:31:c1:00:67:9c:13:21:da:4d:5a:
                    0d:7e:06:a0:6e:f3:95:57:1b:c7:da:8d:f6:e5:11:
                    68:ec:61:fe:7d:f0:42:a5:2f:2b:c4:bc:66:47:0c:
                    71:e4:ca:e9:19:99:8f:b0:c4:a4:d0:82:e1:24:fc:
                    99:98:45:a9:04:9f:3e:69:cb:b1:fd:32:77:19:7c:
                    a4:66:45:fd:71:cc:d4:f1:ae:a8:a1:ad:a3:62:d1:
                    3e:95:5f:53:1d:31:55:15:50:fd:13:eb:ec:20:05:
                    30:d1:89:96:bb:c1:0d:39:06:33:ed:55:1e:06:01:
                    15:09:8a:b1:98:9c:5b:fd:31:85:18:29:8e:39:01:
                    1f:36:5b:ad:27:47:4b:1d:19:ef:49:ba:06:3b:e8:
                    29:db:67:e2:8b:56:20:0c:2b:66:ce:4b:5f:19:3d:
                    b1:21:56:ac:ce:dd:e5:1d:21:ae:9a:c1:0a:71:54:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:F5:C0:7F:97:5F:10:10:F7:F1:4F:F9:B5:12:1F:F6:40:22:CC
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6b:5f:74:c2:1d:97:9e:23:1d:27:07:d4:4d:d2:ab:19:36:
         fc:0b:71:b9:bf:7c:fb:1a:e7:bb:c7:68:ad:94:81:34:d8:cb:
         a7:fb:13:7d:fa:b5:78:0b:37:b0:51:fa:30:23:93:06:41:0b:
         37:74:12:ae:e1:87:40:c0:de:08:04:6f:3c:a9:80:5b:60:27:
         ba:89:ba:4e:4c:eb:bd:8a:f0:e6:d1:6a:ed:fe:1c:8a:de:f9:
         57:76:57:b5:0a:80:48:a7:db:1f:88:ab:00:af:9c:74:12:ae:
         59:a7:5a:75:40:34:59:9b:9a:5d:18:a6:a6:7d:ae:3f:09:b6:
         ad:39:eb:f3:a0:fe:e8:40:86:1c:21:76:82:dc:16:a6:7d:7f:
         3c:05:9d:65:19:83:4a:9e:1c:db:98:5b:93:e6:69:5c:e4:3a:
         ca:40:be:96:7d:c8:6a:70:67:d6:15:6e:db:a4:49:78:ed:72:
         b1:80:6f:f5:96:15:66:78:cc:0e:7a:d2:f3:4a:3f:70:4b:02:
         78:bf:69:fe:70:c7:e6:8a:73:ca:7c:41:2e:57:bd:5f:04:92:
         7e:22:a7:eb:37:91:d8:14:7f:49:c3:ee:41:6a:5b:72:3d:39:
         e1:db:86:d9:a5:a0:f2:0a:50:fb:e8:3f:03:c2:54:b9:56:6d:
         cc:6e:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:18 2026 by rpki-client