Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          73++xr9fTjbslTIYWurdshdGA6FA4yoRjpim+wCFpa0=
Subject key identifier:   51:D8:17:6A:29:56:BF:BC:3B:C4:EF:87:69:F5:D6:72:2A:A4:6B:E1
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       01A10580FE9756ED3535A43071C51B350051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1ABF
Signing time:             Sun 04 Oct 2026 06:01:42 +0000
Manifest this update:     Sun 04 Oct 2026 06:01:42 +0000
Manifest next update:     Mon 05 Oct 2026 06:01:42 +0000
Files and hashes:         1: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
                          2: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
                          3: jdER3phX5mbgg6aj7xFihDYqyto.roa (hash: Gf4TEMTFntYzNK0gZEShHChZxR+vxTAfCM1wkhuszWc=)
                          4: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: jEKCFE/HA11SU/cjlIYVJUUd0tKeMZr2K5bS1FD6R2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:80:fe:97:56:ed:35:35:a4:30:71:c5:1b:35:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Oct  4 06:01:42 2026 GMT
            Not After : Oct  5 06:01:42 2026 GMT
        Subject: CN=51d8176a2956bfbc3bc4ef8769f5d6722aa46be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:23:2f:97:b9:54:84:ef:a7:63:b3:9a:25:
                    52:c6:39:5a:58:f6:d5:4b:54:f6:07:69:b7:31:95:
                    6f:88:03:82:66:ce:9b:76:c9:83:0c:e0:06:cc:6d:
                    47:e7:3a:d5:18:1a:48:6c:1c:4e:89:70:59:ea:1d:
                    66:ee:cd:6f:ce:6b:54:2f:30:b6:01:55:36:78:e2:
                    dc:7a:57:97:2a:06:a7:e7:4f:30:22:2c:07:a8:8e:
                    0a:60:2b:86:61:e6:1a:03:f5:c2:06:ca:49:af:6f:
                    f3:4d:14:65:b5:af:43:85:17:bf:fa:46:68:9f:08:
                    9d:5c:e6:1b:d2:5f:4a:cf:c9:db:46:09:34:2c:34:
                    fb:f4:c1:54:0a:0b:11:e5:29:4c:05:4b:ab:82:df:
                    39:9f:9b:c2:7a:7c:25:39:2a:12:b2:10:68:a1:4a:
                    61:16:35:f1:0d:e3:8e:4c:4c:3d:99:7f:ef:4e:8d:
                    41:58:e0:24:db:0d:d5:31:ec:60:98:33:13:b9:34:
                    4c:d9:15:bf:62:c2:96:81:7e:c9:b6:1d:1b:c4:ce:
                    85:16:21:3a:0b:22:da:47:a4:84:8d:7c:d6:4c:f3:
                    8a:de:22:83:39:4f:8b:07:96:72:26:0d:cf:80:6e:
                    e6:4b:ef:c3:74:fe:9e:9c:74:4e:ba:a8:d1:1c:32:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D8:17:6A:29:56:BF:BC:3B:C4:EF:87:69:F5:D6:72:2A:A4:6B:E1
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:08:33:f5:ab:5a:23:d1:8f:5a:69:87:23:10:2e:19:2f:6f:
         14:7a:05:92:16:e2:74:c1:e6:58:eb:a9:9e:74:d7:50:64:ad:
         d7:73:ce:90:25:52:02:f8:df:e9:34:af:a3:e4:7b:e9:89:2f:
         a6:13:e0:c6:cd:c8:52:a3:ae:74:13:32:c1:39:b4:46:2f:26:
         a7:cc:2d:ce:97:3b:f3:30:d3:b8:f0:ab:b3:ed:e8:28:88:be:
         71:0a:f2:39:dd:22:b8:b4:4c:2f:07:bb:9f:91:5f:05:7e:54:
         bf:e0:e0:5d:3c:eb:6b:09:a3:36:1b:17:dd:25:46:33:9c:45:
         18:73:34:f9:e2:f1:c0:78:ac:74:39:a8:15:81:de:17:cc:a2:
         67:73:6f:02:88:51:46:f4:0b:69:cf:60:55:63:73:1f:28:e8:
         7d:9f:5d:06:21:6d:ed:90:4b:e7:22:91:34:28:45:a7:86:5b:
         4b:db:45:2a:02:5d:1c:0b:7d:bf:c5:25:3c:2d:ee:bc:1e:82:
         62:8c:b0:5c:0a:f8:f7:c2:80:79:88:72:ab:fe:a6:50:83:00:
         68:df:fe:4c:da:f9:d2:64:79:85:13:e2:19:cb:0c:a1:1d:f7:
         51:69:8c:8e:e8:de:21:5c:49:b4:d1:3d:a8:7a:b5:68:cb:26:
         d8:fc:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:23:32 2026 by rpki-client