Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          /bjXT5IaHlVzlcIVD4+/8Pj7/hhkh39yQaQ72mdYDZA=
Subject key identifier:   21:27:96:0D:84:1F:6D:63:B4:64:E1:E1:E0:90:27:1D:71:21:15:BC
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       01A0E5BECB8E75FAEE369554EC44A4D023B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0BB1
Signing time:             Mon 28 Sep 2026 02:01:21 +0000
Manifest this update:     Mon 28 Sep 2026 02:01:21 +0000
Manifest next update:     Tue 29 Sep 2026 02:01:21 +0000
Files and hashes:         1: 97z5LT1W4vZYavKPXg_O49_MY-s.roa (hash: gyOyoIXXJi4jWXdpeab8PuMwCqtDwMbIU0Xhxks68Zc=)
                          2: IXIJrAigMS2KyNlGn9SAWS-uqGg.roa (hash: X7AJTqMC9nUdid2/jCikNAnO+sineLkma/nJ09OZfic=)
                          3: sIwtMgSLwoMidXac2nJ71qi4_js.roa (hash: zMSbXlEzGzEvRSISFMw5oU4Wqz6Z/skGDxHBRIE6e+8=)
                          4: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          5: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: Xg1KWB0jlWbRFbRP8E7e6kd57m40M2LACkXmAIHnIm0=)
                          6: zRSd70TdIvpXG9E317tO5nOGMLU.roa (hash: RYQRkWxOaPRNfKvsAV9YZE5gwnP5mGesOdQB0s+hJOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:be:cb:8e:75:fa:ee:36:95:54:ec:44:a4:d0:23:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Sep 28 02:01:21 2026 GMT
            Not After : Sep 29 02:01:21 2026 GMT
        Subject: CN=2127960d841f6d63b464e1e1e090271d712115bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:a0:8d:b3:ac:84:64:a3:d0:84:ba:ba:b4:
                    d0:c6:ab:7a:b3:34:e7:55:26:81:20:93:d9:d3:c0:
                    f2:aa:b7:32:29:eb:90:7d:42:1f:68:10:92:85:36:
                    78:0e:a3:20:2d:a6:fa:a4:d7:ef:f5:cf:77:68:8c:
                    1f:38:dd:1c:07:c7:18:78:6e:91:07:02:16:d5:8a:
                    0d:61:8f:24:5f:72:2c:55:2f:fd:e0:ef:d4:c1:d5:
                    9b:fc:04:02:d5:e0:7a:9b:6a:5f:91:e3:53:6f:72:
                    17:68:68:ef:59:eb:b9:0a:49:01:53:fa:09:1c:d7:
                    4a:a6:52:09:4f:89:e4:78:c1:8c:9d:de:e4:79:86:
                    b0:76:b3:ef:f9:e6:b1:d1:af:25:88:33:00:5b:05:
                    5c:06:f1:37:43:29:e7:47:8f:36:8b:12:1c:90:35:
                    93:43:b0:6a:66:9c:f3:1d:fc:38:5a:1a:7f:03:b9:
                    06:82:0f:db:94:02:4d:fa:7a:a6:f3:ec:a8:b3:8c:
                    45:a4:5d:84:a1:79:c8:e0:06:01:5f:5c:31:92:bb:
                    00:3c:f6:f8:69:f6:0d:d5:03:50:99:f1:20:9c:e0:
                    2d:d3:12:cb:a3:19:8c:ad:42:93:d3:94:98:1b:5e:
                    28:9c:0a:10:96:73:85:ad:e5:e6:0e:57:a1:bc:a4:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:27:96:0D:84:1F:6D:63:B4:64:E1:E1:E0:90:27:1D:71:21:15:BC
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:92:f7:fe:c8:0f:09:cd:20:01:79:89:9d:b7:05:1c:7d:91:
         7e:08:3a:be:27:01:53:31:93:a0:90:a2:5f:03:0f:21:1d:d8:
         d2:4b:cc:08:f2:2c:29:73:04:50:d8:2c:88:03:a7:42:42:84:
         1e:64:97:f7:f3:67:73:48:9b:02:b6:50:0d:f4:4f:70:f2:f6:
         59:39:30:c4:5f:18:50:f0:eb:d4:47:94:40:5e:17:61:70:20:
         c1:dd:df:c0:ba:23:bc:66:71:7e:4e:5b:e5:0d:9b:7f:a2:57:
         93:1f:5d:97:24:b9:5f:44:8e:a0:0f:04:88:b2:66:93:5a:13:
         df:bb:9a:f7:af:13:72:a0:56:ae:99:34:95:a7:ce:e1:dd:91:
         30:5e:4b:8e:1e:82:f0:f0:a4:c6:90:dc:25:9c:fb:28:2f:d6:
         c4:3f:a3:0d:cc:13:12:56:b0:34:df:93:8d:0c:7d:0a:f9:6e:
         2a:ae:95:02:98:8c:40:44:a6:c2:cb:f0:e7:b2:46:31:0a:ba:
         6b:ff:5a:fd:7a:cb:01:6a:c6:23:8b:ee:32:cd:42:57:f6:33:
         27:96:f7:bc:34:5d:95:66:f7:89:4e:45:22:36:c4:96:a6:57:
         37:b0:3c:f6:f3:65:91:c6:f8:88:59:03:5a:c4:a1:26:3b:d7:
         35:45:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:47:48 2026 by rpki-client