Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File:                     xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier:          UpdLWfCZKCIza7OMR1PTPnMVkg0eVqu9ycofgjTlh2Q=
Subject key identifier:   E8:CF:B7:B1:A7:8B:AE:D6:4B:B1:CB:AD:F6:BA:97:CD:AF:0D:9A:2A
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer:       /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial:       01A0E587AF52CFAE691E29CFE9DA6ADF87F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number:          1081
Signing time:             Mon 28 Sep 2026 01:01:09 +0000
Manifest this update:     Mon 28 Sep 2026 01:01:09 +0000
Manifest next update:     Tue 29 Sep 2026 01:01:09 +0000
Files and hashes:         1: 28OK2J3AhlsvkP5KX5FGL4PLk4k.roa (hash: sLJmlSxlUCogmrsIa1DupMYliLkoDK/6nUhbL0KQoh8=)
                          2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: Wq/wAMgixM1y6I2BB8UNifgZrcNnw2GS0jKwrlidicI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:87:af:52:cf:ae:69:1e:29:cf:e9:da:6a:df:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
        Validity
            Not Before: Sep 28 01:01:09 2026 GMT
            Not After : Sep 29 01:01:09 2026 GMT
        Subject: CN=e8cfb7b1a78baed64bb1cbadf6ba97cdaf0d9a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:44:64:5f:e6:cc:6d:af:7e:dd:0d:43:6c:
                    c5:df:20:2f:d9:8b:15:be:bc:ef:ff:5a:1b:18:4b:
                    f8:e0:09:e5:ac:cc:14:e3:21:fb:56:0f:6f:9b:cb:
                    f0:78:6f:11:2f:8f:c8:ac:d1:a0:d5:fc:b2:e0:68:
                    cf:56:56:f7:47:b6:55:74:1a:ad:7e:9f:b4:43:1b:
                    37:09:66:5c:cd:2d:83:b7:83:bb:d1:b9:f4:f8:fc:
                    74:eb:67:0f:17:2a:92:66:d0:2b:46:ed:c0:88:2c:
                    8a:0b:62:14:2b:c6:7f:56:d0:dd:f3:bc:39:86:02:
                    73:32:aa:42:22:22:d8:b3:c8:94:c5:e7:e3:2e:e2:
                    b4:31:29:1f:54:0b:91:42:c5:12:f5:f5:40:e2:53:
                    d5:d3:9a:8e:5a:2c:76:8d:5a:5d:3b:02:cb:8c:83:
                    26:1d:b7:4e:c8:b8:04:ec:0f:d8:e5:15:d1:17:68:
                    8a:a2:a4:d4:60:74:d3:a2:3b:81:95:74:e1:14:74:
                    a2:dd:e0:41:0a:d9:62:be:4b:eb:5c:1c:0b:c3:ac:
                    22:25:75:80:38:00:19:9f:7d:43:16:a7:54:0f:d4:
                    d9:74:61:82:54:6f:97:bd:98:35:bf:55:66:5c:ab:
                    69:37:73:8a:49:46:dc:33:3c:cf:0e:2d:58:23:29:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:B7:B1:A7:8B:AE:D6:4B:B1:CB:AD:F6:BA:97:CD:AF:0D:9A:2A
            X509v3 Authority Key Identifier:
                keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ef:1e:23:07:82:d3:a4:3f:e8:57:c1:64:b3:47:9b:5d:d7:
         4a:05:16:c4:15:aa:c9:c0:ee:b1:69:47:ae:62:2f:d6:c8:c2:
         2a:f0:36:df:10:a3:08:40:5d:1c:23:f4:35:29:93:44:a1:c2:
         fe:03:91:ea:c0:b5:24:9b:da:4e:57:27:52:07:aa:1a:3e:5a:
         f8:87:93:4a:7a:ae:a9:71:9e:bf:b4:43:9b:6a:7f:db:93:f3:
         de:e8:1a:b5:85:9c:9e:4e:de:68:34:36:ae:07:e8:9e:7b:88:
         5e:67:6e:9b:bd:01:12:15:ed:05:23:bf:36:17:44:d7:60:a2:
         08:05:2a:ae:13:76:e3:5c:d1:ff:30:eb:39:71:c6:13:97:8d:
         58:3a:f8:26:92:1f:8d:33:e8:a6:4f:2f:29:ba:16:11:a6:91:
         4e:85:8b:bb:c8:06:d1:77:3d:ba:aa:8b:fa:0e:68:c3:e1:71:
         a1:1f:e2:da:15:48:b1:3e:83:61:83:a6:bd:11:40:58:77:61:
         91:14:9a:6d:e1:7e:01:ab:4f:7e:56:8c:a3:c0:79:f6:7e:ca:
         50:63:5f:ea:cb:70:5e:56:b7:7d:0c:07:69:52:b9:d1:2e:46:
         c8:00:93:b0:7f:ed:80:c8:c7:e0:cb:89:95:0d:8d:d4:54:96:
         7d:28:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:08:55 2026 by rpki-client