Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File:                     X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier:          u49M1h2nkAImlSfMolA+c9hISYqvxCThNNQR6TqMkBY=
Subject key identifier:   FF:6D:FE:2E:3E:4B:B5:5B:9D:31:36:C2:2E:9D:61:E5:CC:0F:E9:35
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer:       /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial:       01A11B6383DEA46753D43E718D04C9A3A0AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number:          0E5E
Signing time:             Thu 08 Oct 2026 12:01:08 +0000
Manifest this update:     Thu 08 Oct 2026 12:01:08 +0000
Manifest next update:     Fri 09 Oct 2026 12:01:08 +0000
Files and hashes:         1: EhpMBlG4nDKvcGQKRYPAEZtRdEU.roa (hash: 00M7VIQ9njSy4l1huIv3bbpiOTYXp7U9IOJHNMG4ZKk=)
                          2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: s3SmBYFhh4xQRI837GZByLmTyhXnseBuOwtg6hGTmp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:63:83:de:a4:67:53:d4:3e:71:8d:04:c9:a3:a0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
        Validity
            Not Before: Oct  8 12:01:08 2026 GMT
            Not After : Oct  9 12:01:08 2026 GMT
        Subject: CN=ff6dfe2e3e4bb55b9d3136c22e9d61e5cc0fe935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:5c:64:90:5b:b5:e8:b2:97:bd:29:30:91:
                    52:93:dd:b7:ca:6f:47:e0:c5:4c:a4:53:fe:27:ec:
                    1a:7f:3f:cf:31:6c:d8:18:7f:52:63:c0:8d:e2:ee:
                    60:03:01:d8:f0:36:96:da:51:f6:67:f4:6b:d6:ef:
                    61:f0:95:44:fe:d2:50:65:77:6f:f7:ce:82:01:d4:
                    1a:42:10:57:d7:0e:be:b3:1d:4c:78:85:9a:d3:10:
                    de:d0:1d:2b:fc:e6:99:9a:ae:bf:5c:25:ab:1b:fe:
                    78:2b:53:27:81:92:8d:54:97:ef:4a:e4:16:3d:1b:
                    f3:72:19:ff:c6:ac:ad:b8:46:b5:7e:31:af:e6:cc:
                    e8:89:12:8b:fd:80:7b:0f:73:ad:35:89:dd:6e:fb:
                    f0:b0:07:a3:53:31:c7:35:52:e3:45:6b:8e:c4:9e:
                    bb:25:a2:5f:49:f0:9c:51:45:09:2c:e3:32:93:ce:
                    77:8b:6b:fb:11:0a:b0:1f:8c:6d:e8:bb:12:9a:8d:
                    e7:8f:fc:68:b4:c4:7a:65:99:5c:35:dd:8c:a0:47:
                    5a:72:71:ef:57:e9:07:ff:f4:37:fd:a0:7d:59:cf:
                    8c:06:4a:a7:0c:a4:df:99:87:c9:90:7e:f0:e8:c9:
                    39:78:8a:7b:b7:c6:11:b8:ca:8c:79:7f:de:b8:73:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:FE:2E:3E:4B:B5:5B:9D:31:36:C2:2E:9D:61:E5:CC:0F:E9:35
            X509v3 Authority Key Identifier:
                keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:fb:46:4c:a2:7c:ff:cb:60:06:63:31:12:22:b2:d7:fc:
         e0:7d:da:9e:9c:20:7f:7d:1b:e8:dd:44:cb:a1:8f:be:6c:b5:
         0d:29:e0:58:24:29:f0:aa:cf:9a:e3:9a:84:ff:e1:ad:74:1c:
         a2:ed:fe:fb:a8:6f:59:a9:1b:36:9c:a5:81:8f:4b:13:06:8e:
         2f:9a:5d:8d:fd:39:45:62:c4:db:c2:46:c7:e6:7d:f2:94:30:
         66:34:f3:84:a1:bd:a6:2f:1e:13:3a:b5:5e:0f:1a:a6:db:56:
         bb:96:ce:75:bf:81:c6:58:33:ad:c8:6c:26:4e:ab:ff:e9:90:
         f7:38:f5:ed:37:89:ee:ae:35:d0:1b:6d:9b:d8:36:4f:c0:48:
         9d:09:ed:7a:e4:40:f0:e8:c9:4e:d8:ee:c3:01:d8:68:af:bf:
         73:22:b2:a2:5f:96:fb:36:39:a9:f3:8f:a9:be:38:0f:19:cb:
         1c:5c:58:0a:4d:e8:e6:c2:86:17:93:13:a4:3f:e5:57:42:93:
         7d:70:e6:b6:a4:1a:1b:5b:a8:a9:6f:b7:6f:86:f1:a7:6b:3b:
         c0:0b:b3:23:52:45:d4:f7:c9:2d:4d:fc:c9:46:a0:0a:8d:97:
         f4:9d:ef:4d:70:80:8c:53:ea:4c:0e:45:36:52:be:65:bc:a4:
         6b:ac:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:01:32 2026 by rpki-client