Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File:                     xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier:          +jKDWcMD8DMBFgBhx84ERnXxh2JKfXx4fsHLt1f8u2Q=
Subject key identifier:   67:B3:99:ED:23:B6:AC:F7:F3:CF:47:F7:D2:57:0C:95:A2:D4:29:54
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       01A0CE24294A1784DDF1DC8036C2440F092F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number:          0BDE
Signing time:             Wed 23 Sep 2026 12:01:11 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:11 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:11 +0000
Files and hashes:         1: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (hash: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4=)
                          2: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (hash: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4=)
                          3: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (hash: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc=)
                          4: eqTX003eyxyptc_5akwZQ-er_vM.roa (hash: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c=)
                          5: qBNprkht_3wALG390SrSxt6PGBw.roa (hash: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ=)
                          6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: F48Cga7tzRYroRIRvWlXb2iKDY92E5nt0z+m3wl17v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:29:4a:17:84:dd:f1:dc:80:36:c2:44:0f:09:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: Sep 23 12:01:11 2026 GMT
            Not After : Sep 24 12:01:11 2026 GMT
        Subject: CN=67b399ed23b6acf7f3cf47f7d2570c95a2d42954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:54:ea:ea:7d:35:03:4d:6c:81:06:c2:45:
                    c9:2b:e1:68:4b:c3:bf:6b:e0:e9:02:54:38:51:ec:
                    aa:f5:dc:13:af:1d:bf:33:90:05:dc:17:95:5e:a1:
                    1b:e9:09:ae:39:a3:bb:23:6e:db:f2:a5:52:87:0f:
                    e8:c3:ea:b0:5b:37:bf:af:36:05:96:67:e4:c5:20:
                    60:bf:fb:c7:cb:bb:04:77:58:2e:1c:c8:5f:49:74:
                    6c:6b:d0:a3:5e:c7:7c:54:36:12:f5:92:c2:9e:60:
                    0c:1f:b0:56:9d:7d:be:ef:a4:61:f4:99:99:94:2e:
                    06:d2:28:67:bb:ae:2e:eb:b8:ff:b5:d9:1a:27:26:
                    ff:fc:76:02:e9:9a:ec:75:33:37:57:ad:75:36:46:
                    5f:ce:d0:ba:7c:5b:8e:b9:d0:a0:66:09:2c:ed:77:
                    a1:1f:2c:1a:01:64:1d:44:81:68:c4:d2:2e:a7:d2:
                    63:f6:7c:c8:1e:68:ff:1a:91:38:6f:5e:58:1a:5a:
                    e5:44:96:68:72:c0:2c:e8:2b:56:95:bc:1b:69:3c:
                    f7:61:14:78:1c:33:f9:3b:2e:e3:6a:1c:75:14:c6:
                    16:f9:f4:a8:b4:4f:b0:f0:7c:9d:85:08:a4:bb:5d:
                    1a:29:85:9b:d0:4a:a8:ba:aa:23:25:c7:59:2f:e4:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:99:ED:23:B6:AC:F7:F3:CF:47:F7:D2:57:0C:95:A2:D4:29:54
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b4:c4:27:c2:45:5b:cd:b2:93:e6:f8:c2:5e:41:01:14:46:
         9d:68:56:39:7e:11:2d:5a:c2:04:7f:a5:60:4d:4f:d9:69:5d:
         56:f5:fe:6a:9c:c4:4b:41:41:e7:64:9c:8a:fa:51:a5:94:7a:
         dc:7a:a2:32:00:b0:e6:e2:e5:20:25:49:b4:67:af:1a:e9:7b:
         f3:8b:6d:98:ee:c5:a9:a2:61:2c:02:1e:73:af:7b:c0:47:a9:
         9f:63:43:6f:8a:b0:66:23:62:56:b2:df:71:f8:e5:73:93:cf:
         cc:7e:ab:54:f3:89:87:04:31:db:62:44:d6:d6:e0:3d:85:56:
         8d:0b:c0:a9:22:48:6f:73:a1:b2:c7:29:f0:a0:da:db:31:ff:
         e8:4c:5e:5b:70:4a:dc:1d:80:56:9f:ce:97:10:51:13:b3:4d:
         7c:86:ac:e0:34:1d:cb:5e:59:a4:d0:cc:f8:39:de:67:08:c9:
         00:1f:e6:9d:ab:d4:9d:66:7d:44:8d:70:2b:50:4f:2f:d0:d6:
         8b:25:75:4d:b1:d2:66:bd:5d:68:1f:ba:ee:55:c9:8b:f6:f7:
         76:ca:38:a6:5e:71:81:39:7d:22:d7:a9:53:df:96:70:94:6e:
         1b:43:b9:b5:d8:b6:6a:ed:93:f4:d4:19:e2:9f:4f:d6:f0:7c:
         b9:3c:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:56:46 2026 by rpki-client