Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File:                     XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier:          +HRTXfjhGKwyZJO23wEmzxs1d6L7Da90pjIPf/kl6Tk=
Subject key identifier:   10:CE:ED:7D:4A:F5:5D:C7:AC:A9:BC:08:FE:EA:90:0A:81:A3:11:82
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer:       /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial:       01A1445FC33A74855AAB45496D71A1C25BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number:          10D3
Signing time:             Fri 16 Oct 2026 11:01:28 +0000
Manifest this update:     Fri 16 Oct 2026 11:01:28 +0000
Manifest next update:     Sat 17 Oct 2026 11:01:28 +0000
Files and hashes:         1: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: PWaX7hixeeE5c6P+sG8SWhEasYicsfaL5v5fXLBWJQ4=)
                          2: z7DQCTMfSpxYNEqc8NdY7ztXAQY.roa (hash: 0f3C1JOESj8A6E71R4wmJYEbq8aExFFVXotwYdP1hio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:44:5f:c3:3a:74:85:5a:ab:45:49:6d:71:a1:c2:5b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
        Validity
            Not Before: Oct 16 11:01:28 2026 GMT
            Not After : Oct 17 11:01:28 2026 GMT
        Subject: CN=10ceed7d4af55dc7aca9bc08feea900a81a31182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:7b:48:d3:a8:8a:a8:06:66:8b:7a:54:0d:
                    35:ef:dd:81:fd:0b:e5:4c:29:0e:ae:e0:5c:0c:67:
                    dd:38:66:50:63:e8:06:de:46:e7:dd:9b:a1:72:f4:
                    df:89:d5:73:94:3b:c5:71:83:ab:78:6e:e3:84:df:
                    7b:51:cc:ad:87:6e:a8:6a:70:a5:9c:9e:ea:61:8c:
                    40:ef:39:88:ca:72:85:3f:e0:00:63:e4:00:76:57:
                    c0:d8:80:b1:df:0a:c0:71:2c:36:bc:0d:5d:12:16:
                    82:2c:2b:34:26:05:5a:f4:f0:ae:17:ca:fc:27:44:
                    51:6c:e4:0f:33:7d:d3:b8:ed:6b:5f:88:96:68:5f:
                    52:b1:79:e8:11:c4:08:53:28:7f:61:e5:9c:f8:82:
                    81:78:60:99:f3:f7:3e:a3:00:ea:55:b2:69:0b:a6:
                    d8:51:d9:90:34:a1:60:a9:b3:c4:4e:cb:6d:9d:b2:
                    8f:58:b0:2a:08:35:68:d6:d7:3a:31:bb:a1:fc:a8:
                    55:c1:19:54:a4:a1:5e:91:d2:9d:e0:42:f7:13:29:
                    d9:99:ac:3a:b9:08:94:e6:c0:f2:c7:a4:34:2f:a4:
                    4a:a2:65:f8:21:3b:58:52:87:76:e9:ba:10:99:67:
                    a5:9c:e6:c5:2c:dd:d5:96:9e:c3:f5:35:f0:eb:c4:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CE:ED:7D:4A:F5:5D:C7:AC:A9:BC:08:FE:EA:90:0A:81:A3:11:82
            X509v3 Authority Key Identifier:
                keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:99:26:f2:ff:bd:cd:2d:5b:a9:97:f8:8f:8b:4f:17:f5:
         44:a2:26:46:1c:eb:71:d2:66:ff:d2:94:93:22:32:60:dc:13:
         c0:c6:7c:c3:e0:39:5e:ca:d5:33:46:de:07:c2:eb:fc:3d:bb:
         3e:1b:72:c3:d1:55:a2:bc:ef:10:1e:fa:d6:78:2f:b3:70:48:
         e6:cb:a5:16:e2:c6:3a:6b:52:a9:30:1e:e8:42:b1:2c:40:3e:
         e4:76:ed:96:5d:23:3a:20:6f:ff:50:31:11:8e:4b:f4:84:6c:
         cd:cf:cd:21:16:43:d3:cf:33:ad:53:df:5a:60:37:e9:dc:8f:
         f3:9f:0a:89:b9:ee:23:f7:ee:ba:3e:68:b5:bf:94:93:a1:cb:
         53:17:8b:f6:01:01:59:cd:1f:46:91:be:30:d8:53:38:b3:20:
         01:c1:78:90:92:5b:eb:87:17:ff:a5:a2:a3:be:02:9b:e8:bb:
         58:51:d3:56:ed:05:95:09:89:4d:be:a0:e1:c0:86:7f:b3:41:
         63:8c:0d:b1:66:c3:f8:66:7e:33:66:22:6e:d2:22:8d:79:7b:
         f1:8a:9e:51:25:8b:83:59:14:b3:3e:ad:0c:18:8f:ef:e5:b2:
         a4:9e:4d:94:73:37:ca:84:0d:56:d8:76:8d:0d:0c:26:a7:82:
         12:75:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 23:14:13 2026 by rpki-client