Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File:                     xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier:          fVVsSD0IM2XEslZzymfBO9tCiazmYoVAzMfUGuy4NB8=
Subject key identifier:   0C:59:17:EC:25:A4:2B:A3:40:C8:3E:50:27:48:7F:0E:9E:91:9A:A7
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       01A10D3948C3F07A69D703649C8EFBE871B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number:          1A9A
Signing time:             Mon 05 Oct 2026 18:00:20 +0000
Manifest this update:     Mon 05 Oct 2026 18:00:20 +0000
Manifest next update:     Tue 06 Oct 2026 18:00:20 +0000
Files and hashes:         1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
                          2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
                          3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
                          4: hH5lYIIstKbYV8H358tnW54wm9U.roa (hash: RAsZHB1Yh42IjrJI10Ub1gqtfRjbrjmrW4OdMAOzHUY=)
                          5: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
                          6: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: 3OeQcnYF8S/b67vFlhg0eIrFFMBTuBCok9Tne+Y99Gg=)
                          7: yvMzPdRbVYmbJvMWc2zXq74usuI.roa (hash: etf/eWqAazEnJN6yxm72oD5OZcNfw7xVjQijbiFJx4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 18:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:39:48:c3:f0:7a:69:d7:03:64:9c:8e:fb:e8:71:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: Oct  5 18:00:20 2026 GMT
            Not After : Oct  6 18:00:20 2026 GMT
        Subject: CN=0c5917ec25a42ba340c83e5027487f0e9e919aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:4d:09:7e:9c:14:ed:5d:f1:94:54:fe:46:
                    a9:fb:ae:7e:ea:30:11:7a:35:3c:2a:0d:a0:ce:37:
                    c3:5f:5f:d8:77:16:55:6e:c5:3c:50:de:92:d5:a7:
                    b0:85:7b:37:74:ef:e1:dd:6b:69:dc:ad:98:c6:d7:
                    7e:78:07:e0:2a:ad:b9:53:f0:2a:ed:2d:a0:b3:62:
                    59:55:d1:80:ef:bd:19:c7:e4:d2:3b:85:94:3d:d3:
                    57:88:92:35:04:59:ad:73:49:04:a0:8d:31:c0:38:
                    34:8e:c8:bd:94:7b:22:bd:b0:3a:04:79:f4:a8:e3:
                    2a:6e:2b:9b:aa:50:4d:65:50:80:9b:0b:55:ba:d8:
                    f0:d3:9d:fb:bb:e1:a9:4b:58:2f:18:b0:d2:c4:3c:
                    66:86:8a:eb:66:b1:83:74:bd:61:8b:a3:2f:da:83:
                    dc:7b:a4:a4:3f:9b:43:f0:03:3d:d3:34:b1:ee:9f:
                    dd:24:89:62:24:f8:38:e2:66:21:45:0a:38:b2:7f:
                    f0:59:76:20:41:eb:cb:17:76:11:18:a9:b0:a9:cc:
                    c5:2d:56:23:c1:0c:33:0e:34:af:96:9c:b8:81:87:
                    53:59:d7:9d:b6:c6:f1:28:a9:fb:bd:e4:54:c5:b2:
                    1c:9b:71:c7:b8:8d:5b:72:08:f1:98:29:ec:e2:be:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:17:EC:25:A4:2B:A3:40:C8:3E:50:27:48:7F:0E:9E:91:9A:A7
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:4f:51:ab:ba:b7:fd:3f:8d:d9:e7:fc:8c:5b:46:a3:46:
         9f:5e:65:c0:88:e2:09:3f:0d:09:c2:b1:76:5d:f2:92:7b:df:
         74:b0:65:3d:9c:bf:42:11:6f:cb:b3:86:21:f6:49:19:a0:62:
         9c:0c:d3:7b:ae:93:cf:6b:d1:97:80:4b:e2:e0:ea:b5:9b:9f:
         a1:00:47:d5:de:fc:ed:36:fd:dc:4f:14:d9:3e:67:20:04:3d:
         58:30:23:61:f3:bc:62:c4:ab:ac:2d:29:d6:40:cc:22:de:54:
         11:47:46:b7:e8:0f:ee:53:e9:3b:b2:4e:50:cf:ce:42:87:07:
         cf:04:c8:4c:58:c9:b6:f4:f9:65:e8:26:85:5b:7e:38:1c:db:
         ae:64:2d:16:9f:0c:fd:bf:56:cd:7e:5e:c6:09:65:04:e1:73:
         e4:5c:29:c9:8f:eb:a6:b2:47:89:69:42:29:65:1a:25:19:fb:
         94:3e:c6:b2:b6:84:27:50:a2:7f:8d:dc:bb:d4:a0:ff:8a:37:
         f0:bd:76:e9:78:7e:ad:9e:7e:35:b7:57:bc:b7:84:f4:55:43:
         b2:69:1c:18:34:85:df:c7:f4:c1:28:ad:37:4e:da:ff:62:0d:
         46:10:ad:5c:3c:11:38:22:25:7e:41:69:2b:72:01:f6:16:2e:
         92:59:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:29:22 2026 by rpki-client