Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          3LODcfftVFgP/QWPmNctssdaD+tvlmzLA/Dm68MPd38=
Subject key identifier:   82:92:23:73:87:6B:92:D6:1A:E8:B4:1D:CD:15:3E:1C:86:7F:69:52
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       01A0C77CF9E47BD21E93389CE3038F50FE20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1E4C
Signing time:             Tue 22 Sep 2026 05:00:51 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:51 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:51 +0000
Files and hashes:         1: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (hash: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY=)
                          2: 1VeSyKgoW_hdI2bbFiunFJEHv7k.roa (hash: 39GBudpqQhwmIXgctxupPXC6d9l92XtC5ldofsNVST4=)
                          3: JA3aV6MgGoL2z_IQfntSb_aP7uU.roa (hash: aYSzbFJAF8yxMW75i/p+QgiYTSiC1EmZoDMKHak76gE=)
                          4: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: zQ2zHw9ZE0IJKxkui2loTc1FQ2HqBPQplNdJy2yndoE=)
                          5: onUcHcMkvFv3eRd2HH3aPRf6vhg.roa (hash: FMvdGW8G/i8Ujn/8ecIl88xpPzK27z5df59EqMBKxi8=)
                          6: zlLTIm7_QxUIi55M7RwMbt95iIQ.roa (hash: fDPF6ZEfEYsC4ffY8eEmFZICdqyb8tsUKaWPIRXssWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:f9:e4:7b:d2:1e:93:38:9c:e3:03:8f:50:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Sep 22 05:00:51 2026 GMT
            Not After : Sep 23 05:00:51 2026 GMT
        Subject: CN=82922373876b92d61ae8b41dcd153e1c867f6952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:20:7f:8e:95:61:0b:d0:3f:17:84:2b:7f:
                    cf:9a:36:24:e0:f5:ea:58:d9:61:e2:ac:53:1b:2a:
                    08:53:22:a4:80:b0:ee:27:d9:69:c8:8a:85:18:89:
                    21:09:21:99:02:ca:cb:f7:d8:da:94:21:03:dc:65:
                    80:5d:3c:2b:c4:48:db:54:4a:4b:99:44:b7:ff:2b:
                    b8:ed:6f:b8:a9:33:91:3f:2a:3a:56:98:73:51:8a:
                    50:e3:6f:c2:2b:13:bc:11:7a:c3:57:e4:df:aa:5f:
                    08:23:45:14:5b:0c:e6:50:cb:ea:7f:ee:46:17:94:
                    f7:e9:a0:d8:52:d8:0a:f4:43:05:36:1c:5a:f1:33:
                    bd:e3:c4:70:d5:d1:40:0d:29:69:04:e0:e0:00:73:
                    45:38:fd:b1:3b:88:c5:6f:0d:99:d0:55:cc:77:05:
                    53:e7:bc:93:3f:20:b6:82:ec:f1:3c:4c:2b:ea:56:
                    c7:86:eb:97:ef:79:f9:79:b6:a3:0d:a4:c5:8f:97:
                    02:98:26:52:e1:63:cc:8b:8b:61:9e:00:2d:78:98:
                    18:9d:58:7d:6a:c5:a1:f7:39:a5:5b:2f:ef:19:4d:
                    6f:49:33:d6:3d:23:e0:6e:50:0c:c7:5d:6d:67:df:
                    3f:60:80:e9:54:7b:fe:0d:0a:d9:1e:37:53:ba:41:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:23:73:87:6B:92:D6:1A:E8:B4:1D:CD:15:3E:1C:86:7F:69:52
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:24:b5:2b:a2:6e:66:8d:61:2a:69:5c:d1:12:41:48:36:
         73:50:13:da:22:ce:79:08:f5:aa:77:2d:7a:aa:2a:cc:d9:11:
         d9:8d:2c:a2:69:a0:c9:84:56:5f:19:85:69:c7:e3:2f:43:f6:
         c9:d1:17:0e:7d:c8:63:04:a7:85:89:40:9d:f2:95:fe:c4:40:
         13:54:14:22:de:15:a2:dd:2f:86:02:68:44:87:84:49:72:c6:
         45:a9:15:ce:a6:5f:9e:9f:8f:0d:12:4b:56:05:e2:20:c4:9e:
         25:9b:25:18:eb:19:8d:65:6d:a6:1d:b8:a1:aa:5a:17:b3:c4:
         9a:05:68:e4:a1:1e:ed:b4:5f:8d:ae:07:d5:7e:09:61:21:3a:
         45:27:aa:15:74:7b:09:ff:a3:29:56:7e:b1:6e:cd:07:ef:3d:
         c2:b6:d9:70:47:7f:a1:51:e1:76:b3:2e:6d:bd:d0:09:81:ad:
         24:13:48:c6:8c:49:cf:02:c8:67:e2:cc:93:20:70:6f:80:3f:
         99:a1:fe:a0:dd:ef:9d:95:18:ca:b9:bf:07:b6:58:87:01:4e:
         07:48:84:08:c3:c1:f9:11:e6:91:45:60:1a:95:bc:24:ca:d8:
         46:7d:a5:8d:35:3f:6c:a8:3b:7f:ef:35:57:26:2f:41:ad:d2:
         1f:be:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:15:09 2026 by rpki-client