Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File:                     Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier:          Xe446ulZgN4ak8N/PBBcAGjL651gyAp8TLuBEP81+RE=
Subject key identifier:   70:3E:AA:B0:F5:19:80:27:F6:07:96:18:E0:C0:76:D8:DF:D9:28:D0
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer:       /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial:       01A0E32BE1E9367B23389855DADF809E8479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number:          1246
Signing time:             Sun 27 Sep 2026 14:01:38 +0000
Manifest this update:     Sun 27 Sep 2026 14:01:38 +0000
Manifest next update:     Mon 28 Sep 2026 14:01:38 +0000
Files and hashes:         1: 3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa (hash: cQV4nw2YNAHZleBjiJhNysmR6KlbphemL85k3lR/q4I=)
                          2: IRKwCUFzai38fr65-FRH_xYS0jI.roa (hash: oO+4buqTDLcCJZOc7fvRD7YLk4AQs3LNbZe5FzwGorY=)
                          3: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: CejTOyPr2dQjaRkix/IUz+kdcpp0VnbPhD9JMHzzkhQ=)
                          4: egWOQdMCICFVY-fSqkSUyufqt9w.asa (hash: KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:2b:e1:e9:36:7b:23:38:98:55:da:df:80:9e:84:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
        Validity
            Not Before: Sep 27 14:01:38 2026 GMT
            Not After : Sep 28 14:01:38 2026 GMT
        Subject: CN=703eaab0f5198027f6079618e0c076d8dfd928d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:ee:59:ff:f7:68:f9:1d:f8:e3:05:99:55:
                    d9:11:b4:56:74:51:8c:3b:fc:55:84:50:1b:b2:2a:
                    67:d0:15:51:b0:34:fc:ba:91:5f:99:7c:63:34:c4:
                    df:60:82:7c:a3:50:e5:f8:fd:f6:11:f2:ab:19:f7:
                    36:12:3c:6a:c2:32:32:83:8a:4e:f5:c4:46:14:ef:
                    60:0f:c5:99:38:f7:41:bf:3d:4d:d6:17:f7:fc:67:
                    13:26:7a:ce:e3:de:d4:dd:69:85:61:ec:2e:4d:a2:
                    38:35:05:30:a1:8c:9a:ec:67:1f:89:f6:b8:12:e0:
                    29:f7:17:60:50:7a:59:b5:aa:33:21:b6:8d:b5:38:
                    8b:64:e0:a5:c3:a1:8c:3c:00:c7:0d:ae:d7:ad:9c:
                    b2:26:ec:53:40:e4:30:0b:d7:a5:05:0d:79:85:eb:
                    52:4d:d8:63:32:62:95:22:2e:9c:c4:85:b9:07:72:
                    17:9a:2a:60:1d:83:ca:7b:44:ae:10:6d:79:9d:2c:
                    de:68:67:5a:82:74:5e:28:fa:22:85:6a:c4:03:d0:
                    66:e0:14:cf:a8:d8:e5:0c:c7:d2:57:d0:c5:92:6d:
                    5c:1a:c5:06:1a:da:ba:86:12:fb:21:4c:8c:00:35:
                    d1:62:95:65:ba:8f:e9:9d:69:65:29:36:81:20:69:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3E:AA:B0:F5:19:80:27:F6:07:96:18:E0:C0:76:D8:DF:D9:28:D0
            X509v3 Authority Key Identifier:
                keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:39:ee:4f:cf:7e:2f:f1:e7:ba:42:d9:c4:1c:e5:bc:ce:4b:
         e6:58:1c:13:55:8c:6c:2c:f7:30:cc:a8:92:d0:c9:2e:47:19:
         6d:00:95:ee:00:a9:36:76:55:32:dd:e9:52:a4:d0:92:ce:13:
         4b:69:4f:32:5b:ea:45:70:f1:13:67:14:e7:f2:ef:4f:5b:fa:
         07:aa:aa:54:44:78:bd:6c:98:86:06:1b:23:54:d5:f3:19:7f:
         7f:f0:75:ac:51:9f:8f:75:87:12:eb:05:1b:0c:3c:62:12:1f:
         bc:f0:ee:73:15:c4:c4:ef:3f:58:69:ae:86:69:5c:9e:17:21:
         e3:fc:99:6f:44:7d:9e:a8:c8:cc:01:0e:8e:44:5a:ee:23:2d:
         de:46:2b:f5:5d:f5:fd:12:8d:58:af:c1:bc:2f:bc:f3:9d:79:
         19:ef:88:9e:cc:b7:7c:00:f6:1a:f2:f5:72:58:1c:8e:00:f9:
         b0:31:40:4d:f4:a7:55:91:c4:fe:36:28:ad:ad:a8:67:05:fe:
         fa:e5:04:8d:f0:31:c8:dd:79:c4:c8:8e:b2:95:23:32:c2:66:
         4e:9d:36:e9:24:0b:bd:77:7e:6a:1c:15:47:02:89:1a:51:3a:
         3c:ad:1c:ab:e2:ba:a0:a1:ac:d9:57:e7:6f:55:8c:4c:eb:cc:
         68:3c:f2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK+HpNnsjOJhV2t+AnoR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx
MTdiYWQwHhcNMjYwOTI3MTQwMTM4WhcNMjYwOTI4MTQwMTM4WjAzMTEwLwYDVQQD
Eyg3MDNlYWFiMGY1MTk4MDI3ZjYwNzk2MThlMGMwNzZkOGRmZDkyOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpbuWf/3aPkd+OMFmVXZEbRWdFGM
O/xVhFAbsipn0BVRsDT8upFfmXxjNMTfYIJ8o1Dl+P32EfKrGfc2EjxqwjIyg4pO
9cRGFO9gD8WZOPdBvz1N1hf3/GcTJnrO497U3WmFYewuTaI4NQUwoYya7Gcfifa4
EuAp9xdgUHpZtaozIbaNtTiLZOClw6GMPADHDa7XrZyyJuxTQOQwC9elBQ15hetS
TdhjMmKVIi6cxIW5B3IXmipgHYPKe0SuEG15nSzeaGdagnReKPoihWrEA9Bm4BTP
qNjlDMfSV9DFkm1cGsUGGtq6hhL7IUyMADXRYpVluo/pnWllKTaBIGliWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA+qrD1GYAn9geWGODAdtjf2SjQMB8GA1UdIwQY
MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt
ZWVlZGQ5OWI4Y2M0LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0
LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjnuT89+
L/HnukLZxBzlvM5L5lgcE1WMbCz3MMyoktDJLkcZbQCV7gCpNnZVMt3pUqTQks4T
S2lPMlvqRXDxE2cU5/LvT1v6B6qqVER4vWyYhgYbI1TV8xl/f/B1rFGfj3WHEusF
Gww8YhIfvPDucxXExO8/WGmuhmlcnhch4/yZb0R9nqjIzAEOjkRa7iMt3kYr9V31
/RKNWK/BvC+88515Ge+Insy3fAD2GvL1clgcjgD5sDFATfSnVZHE/jYora2oZwX+
+uUEjfAxyN15xMiOspUjMsJmTp026SQLvXd+ahwVRwKJGlE6PK0cq+K6oKGs2Vfn
b1WMTOvMaDzyGQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:22:40 2026 by rpki-client