Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File:                     XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier:          i932s8JK+fgzr0ymrCsXERKRLIVtzqyEnyVC6H3wDYA=
Subject key identifier:   06:E8:63:05:2A:E0:73:DC:93:89:40:41:71:5E:A6:00:4B:0F:CF:88
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer:       /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial:       01A0CEFFAD93F4E8E7A36BDD3A95BC2569D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number:          1A6F
Signing time:             Wed 23 Sep 2026 16:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:57 +0000
Files and hashes:         1: C_8ZJTyNvSRdSrcMB1h6NMWurAU.roa (hash: ZLk+V2N06Qw0Noo/WtokMKF+p0Gjo1uyGxURWhRlXwY=)
                          2: XAYcuxsajA5hLrmscRs4oynzyUg.roa (hash: AvPY1r1vk0ST8v3sz0+K9LIFAxv9kmWL/J2CaIlXu0s=)
                          3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: 9GyLAuBhqQ0+P8eGU/D2noQU1gsnMPkO4Uy4XRyDwQQ=)
                          4: b_b8FgUBWx7o4mrGSWETF1x68gQ.roa (hash: YqVNmCVOzW8nbc96cPhMeB/DqemnZKobEb9c09pjCAo=)
                          5: mjMQEKksicvgZzYu86cOaUikq_o.roa (hash: 7g64PoLicqxVLeKtHUopkjJGRzw3GYF64nr8YZ5vEEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:ad:93:f4:e8:e7:a3:6b:dd:3a:95:bc:25:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
        Validity
            Not Before: Sep 23 16:00:57 2026 GMT
            Not After : Sep 24 16:00:57 2026 GMT
        Subject: CN=06e863052ae073dc93894041715ea6004b0fcf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:2d:b4:d6:da:31:79:e9:db:71:e5:9a:ea:
                    0c:e0:f0:ea:bd:25:3a:1d:2b:76:a8:40:87:d2:dd:
                    b9:24:94:5d:7c:e8:44:fe:dc:ca:55:36:b2:fc:c9:
                    3f:53:9b:e8:e3:5c:75:6c:8f:79:20:76:e5:8d:41:
                    71:82:b3:51:81:73:0b:be:46:27:8b:f3:f7:e2:be:
                    4e:ac:81:94:1d:1f:35:17:04:6a:a1:f1:ed:e6:de:
                    67:ba:12:96:69:ee:b3:a3:1f:ea:be:44:3a:fc:7b:
                    13:5e:3f:ab:db:08:4f:01:5d:e0:11:a3:08:87:7a:
                    f6:3c:62:00:97:59:cf:fc:74:3d:c5:d6:61:d3:66:
                    bb:ee:1c:9f:0c:35:fd:c3:0a:b3:16:94:20:7c:58:
                    0d:cf:9a:ed:12:97:0a:4b:fb:88:98:ef:0f:24:bf:
                    e0:d0:82:be:d2:29:b7:bc:ab:26:b3:b1:6d:fd:d9:
                    cb:c3:a0:a9:7e:b6:f0:05:6d:51:f0:f1:b1:ca:2b:
                    75:08:16:7e:3f:c0:b7:56:15:3d:d4:f3:78:98:ab:
                    e0:db:8d:d9:82:75:5b:93:13:3f:74:fe:f7:29:0a:
                    78:04:38:7b:ad:bd:67:85:04:fd:89:de:c5:99:1f:
                    e2:56:68:52:5f:e8:14:f3:d4:16:92:a0:3e:16:e0:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:63:05:2A:E0:73:DC:93:89:40:41:71:5E:A6:00:4B:0F:CF:88
            X509v3 Authority Key Identifier:
                keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:55:4a:e8:e2:28:4f:ce:b4:05:f6:ec:3f:33:05:7f:fe:
         17:fa:dc:f3:5f:70:52:64:4f:68:84:3f:f5:05:51:25:b0:0b:
         97:5d:74:b5:97:16:94:a9:37:f5:66:63:89:3d:f6:b1:c6:11:
         9c:d1:8f:8c:d5:99:90:41:a4:75:9d:8d:46:82:ac:ec:7e:78:
         71:ec:c5:2d:39:5a:65:07:45:73:3e:49:c1:f3:9a:59:6f:6b:
         eb:3f:e4:20:7d:9b:d7:ff:39:4b:ae:27:47:08:35:61:45:e8:
         dd:7f:11:ca:65:5a:ba:da:04:3c:f2:5c:e7:21:a5:24:53:ec:
         52:e2:41:ca:66:51:a2:b4:36:61:05:1e:b1:e0:05:46:87:d1:
         9f:1c:dd:e0:5a:b8:c3:38:65:08:a8:59:6c:ba:72:79:be:8d:
         1e:b5:c0:22:96:03:05:18:1c:8c:a9:84:95:54:02:10:8d:0f:
         29:03:02:f6:96:24:4f:fd:36:4a:a0:1b:6f:28:42:67:17:8a:
         04:e5:dc:54:06:ca:51:6a:e4:9f:b6:8b:af:5a:f9:a0:a2:89:
         fe:5e:9a:19:0a:5b:15:65:94:11:30:30:36:20:43:7a:02:f6:
         2c:c2:e3:2f:19:bd:20:18:35:6c:0b:2b:00:fb:ef:4c:5b:40:
         87:23:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:00:36 2026 by rpki-client