Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          LD8CNwEEioC21qEP2s4YD01/Yt0sEICkPswHI24yOQU=
Subject key identifier:   EE:01:81:7A:E2:8F:9E:D7:89:4F:8A:22:9A:9C:96:79:3A:FE:37:4A
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       01A0DC4D6A539628024EDDEEABD63B293928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          1231
Signing time:             Sat 26 Sep 2026 06:00:55 +0000
Manifest this update:     Sat 26 Sep 2026 06:00:55 +0000
Manifest next update:     Sun 27 Sep 2026 06:00:55 +0000
Files and hashes:         1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
                          2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: Ov6cipWPwP38y1unkA01xoDPk4sLPThVWVto6LwUzHA=)
                          3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
                          4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
                          5: fQWCmfLdQl9kgPQ8VBdW1T6y5WQ.roa (hash: c6z+qlka4njKh+KsSdKsKGpsRerVkXlOyNamnYTlXAw=)
                          6: hVXu442W8sHVh8F2wI339U-u6hw.roa (hash: tfQAfvgbfBIutk9LhU3LMYfREhO9WhUNbbEaKiJKIO4=)
                          7: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:6a:53:96:28:02:4e:dd:ee:ab:d6:3b:29:39:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: Sep 26 06:00:55 2026 GMT
            Not After : Sep 27 06:00:55 2026 GMT
        Subject: CN=ee01817ae28f9ed7894f8a229a9c96793afe374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:24:c0:49:ba:b3:9f:05:52:a7:2f:07:44:
                    01:b2:f2:c7:94:7b:ff:cd:e4:6a:5a:25:e2:0c:24:
                    ef:db:87:c6:f0:5d:ff:60:59:c9:a7:7d:e7:73:33:
                    db:7f:75:b1:e1:80:41:c6:05:fc:a0:a5:1c:60:05:
                    5c:1d:b1:1c:b7:76:5a:75:ed:e3:f5:b5:96:2c:0f:
                    38:71:7e:e3:a5:67:f2:dc:82:cd:ee:22:e2:ed:53:
                    75:21:43:25:d9:68:cf:be:9c:91:f9:2c:6a:99:1f:
                    09:ba:d6:52:01:79:a9:f3:20:57:d8:25:36:85:a6:
                    6b:ea:fb:78:0a:1b:ec:6f:98:dd:7e:b6:8b:cf:ce:
                    f8:8f:79:da:ba:94:c6:11:53:74:cc:a7:d2:79:38:
                    39:78:7c:8a:fe:c5:1b:e8:7d:4f:23:bc:86:76:1b:
                    84:60:be:4f:2a:6a:ad:87:4c:ff:00:85:b4:d8:b8:
                    04:0c:92:35:e2:59:65:f3:b0:59:69:fd:47:a3:46:
                    6b:cc:de:2f:c2:6e:46:ac:6c:6b:c9:c4:37:0a:f1:
                    83:07:25:80:16:29:3e:c2:a6:78:6b:32:de:b3:3b:
                    cb:fa:72:3b:93:e3:f0:53:7a:31:9d:16:43:6c:b8:
                    a5:42:ab:c0:1e:fd:44:a6:7b:51:c1:8b:65:e8:c0:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:01:81:7A:E2:8F:9E:D7:89:4F:8A:22:9A:9C:96:79:3A:FE:37:4A
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:de:c4:61:87:43:fe:26:10:9d:8a:28:9f:f5:39:93:e1:a5:
         38:b9:22:ed:f8:b8:05:65:29:09:f0:9f:c7:22:92:7e:38:68:
         ab:7f:11:da:fe:96:70:a5:d2:f4:60:7b:92:65:fd:73:a0:af:
         8c:48:36:26:67:51:c9:8f:80:30:77:24:da:22:e2:6e:63:8d:
         0b:2f:f2:22:f4:c5:db:db:77:d4:2b:ff:d2:7b:c7:83:7b:19:
         02:a7:72:1e:32:71:08:ed:c3:b4:f4:2f:82:af:f1:42:38:29:
         87:ed:25:ee:18:77:df:27:00:51:79:97:bf:fe:2a:00:ff:75:
         fa:e2:73:23:25:80:1b:95:1b:ea:66:10:7f:f4:7d:22:a9:33:
         f7:20:d8:de:34:e6:b0:6c:1b:d1:37:85:51:06:7b:aa:9f:17:
         da:ba:32:c9:87:ff:02:dd:36:21:9e:aa:55:00:f3:b7:ad:ee:
         e0:c5:0d:a8:f0:26:65:58:9d:cc:69:5c:a6:e8:42:80:d3:67:
         7e:67:44:63:77:d3:9f:8d:e4:17:e0:68:0e:38:ea:0b:6c:3d:
         a0:70:45:35:c5:e4:20:d7:2a:5d:73:45:f1:f7:9c:c4:68:ac:
         5f:9d:be:0d:de:ce:f4:a0:3d:b2:bf:71:e3:31:3c:8f:e2:e8:
         f9:1d:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:56:07 2026 by rpki-client