Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
File:                     xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft (raw, json)
Hash identifier:          SSmOt7TI08Q0f1Ino+kjtY0hr6nocSnreVwofrty96M=
Subject key identifier:   64:96:F6:67:3C:C1:98:7F:E6:AE:78:E0:4C:BD:5A:E8:D6:13:58:D6
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Certificate issuer:       /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial:       01A12CC590D53C8801587D25637E579056AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
Manifest number:          0115
Signing time:             Sun 11 Oct 2026 21:01:47 +0000
Manifest this update:     Sun 11 Oct 2026 21:01:47 +0000
Manifest next update:     Mon 12 Oct 2026 21:01:47 +0000
Files and hashes:         1: 5ToKLF8AZKviRK8eveHz3y2eCJg.roa (hash: 7dZ4D04yJMNxgBoOD4N7srtpsPwEeXW0J8iTVYWeQ8s=)
                          2: O3Vhd8Uq2eyOQ_jBHy0CJlVwNZ8.roa (hash: TnvhV7uWoy8gIV9VJvw9Ua1JaBEXv8Nh3q4HaNov/Pk=)
                          3: YGhXb0KBwMPD0eKyFjo-wPSvg7A.roa (hash: QIjaZBuvHBXuD+BQAt0PNBm4499hR/AfSSSNvFa+qG0=)
                          4: nN73NbUGqukOpA94Jjdh8i2ig_E.roa (hash: v+MEZ6gE/2SzkGEIJerhbHxOQ1qEZGl9aNZd7P5DCZ8=)
                          5: q4wW-YXv4K_Q2__Fto1OvGJawss.roa (hash: jnTnq/LFPODqTvtlZrmgjvpj+t1fUdEjh4tvKg0JZjc=)
                          6: wqiyCuPlBwl0V2dv27OCD_ym6j8.roa (hash: cfx0UFR+LbEyoqcHZVCvxbww/uNktl+L5oOZlTwnYPo=)
                          7: xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl (hash: xakSQcUD9cCBLpBKkzhWBfPRZU+wlJySTA0xjVZysJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 21:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:c5:90:d5:3c:88:01:58:7d:25:63:7e:57:90:56:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
        Validity
            Not Before: Oct 11 21:01:47 2026 GMT
            Not After : Oct 12 21:01:47 2026 GMT
        Subject: CN=6496f6673cc1987fe6ae78e04cbd5ae8d61358d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d5:97:ae:6f:69:0e:6b:ae:19:77:77:1e:61:
                    3d:c7:77:a3:59:c2:51:b2:92:5b:13:b5:e2:4c:88:
                    0e:b0:0f:9f:9d:2d:92:5b:06:61:95:3c:7d:a7:0d:
                    cf:cd:bf:43:b7:69:54:84:60:d7:06:4d:01:50:10:
                    ac:0d:0c:b8:2c:e2:1e:d8:1b:31:0a:03:33:48:2b:
                    19:ae:07:e3:dc:36:c6:b1:ab:21:f2:71:15:d4:58:
                    3c:07:1f:86:a5:d1:d3:be:ee:8a:a4:6e:ae:75:02:
                    bb:10:02:ce:71:8a:b4:e2:31:03:08:92:b5:1f:bb:
                    8b:2d:d3:40:f9:d1:9e:35:f1:eb:90:75:af:7f:9c:
                    7b:73:58:84:cf:01:dd:7c:0d:5b:78:67:8f:05:34:
                    80:c1:cf:92:d9:5f:97:72:80:af:36:20:3d:7f:af:
                    22:03:00:26:3e:1c:f7:95:6f:dd:7e:e6:56:5b:3b:
                    f9:1f:b2:49:6b:ec:f1:23:7d:8b:2f:b0:58:01:60:
                    fd:a5:dc:0e:44:2f:2d:c5:23:5a:00:36:91:10:4a:
                    a7:de:97:96:44:fb:a6:fc:e5:6c:de:11:bd:46:65:
                    bc:a6:9a:32:db:a6:59:dd:ef:b7:89:0f:8b:25:03:
                    62:c9:92:8b:e4:49:78:2c:55:1c:62:9b:b1:8b:95:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:96:F6:67:3C:C1:98:7F:E6:AE:78:E0:4C:BD:5A:E8:D6:13:58:D6
            X509v3 Authority Key Identifier:
                keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b0:8e:7c:28:4d:57:4a:f0:d8:ed:eb:5e:5c:5c:6f:1f:d0:
         23:d6:fe:71:2c:88:3d:a9:30:12:6e:9b:47:ff:c9:bd:8a:75:
         aa:a6:96:49:4f:07:47:b0:eb:33:17:ec:5b:97:7b:aa:83:c5:
         50:e0:1d:2a:66:5a:79:41:22:3b:a3:b7:68:b1:49:c8:f9:05:
         76:45:b5:35:fd:02:21:3d:0b:39:2b:f1:9e:05:06:cb:3a:aa:
         a8:b3:de:c1:d9:4a:cc:20:29:22:ea:37:38:72:bc:63:f1:e3:
         87:5f:fb:28:8c:eb:4c:27:fa:8a:46:f7:79:0e:a0:c7:01:4d:
         f8:88:13:3c:c3:48:15:96:9f:c9:da:7c:51:a8:55:d0:cd:7d:
         f4:8a:3f:19:e9:ef:20:d1:38:06:83:4a:ad:e3:12:f4:29:4f:
         23:04:5c:84:2c:8d:5a:c2:bd:89:d2:09:47:01:f9:38:3a:0d:
         49:2f:96:53:1e:d3:4a:8f:1c:b3:19:aa:7f:92:28:9d:5c:53:
         4a:c7:49:c2:4f:b7:e2:d9:48:fd:a5:ff:20:a7:ef:b6:fe:86:
         91:06:1f:c3:f5:64:a4:6b:e5:ea:41:c8:93:63:59:3c:88:02:
         cf:80:73:18:28:a3:9f:6a:12:75:72:77:9b:90:44:df:c1:7e:
         45:a3:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:10:48 2026 by rpki-client