Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File:                     xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier:          Dwi8jrt4/9aoP7QBPHdMIA6t1s1wzo1mdxyCifFa1lA=
Subject key identifier:   50:BB:26:BD:B7:37:02:6F:C8:BD:BB:58:ED:AC:81:2A:04:70:EE:F0
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       01A0D57095D990A54DA6D3152CEE940BCEED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number:          1A78
Signing time:             Thu 24 Sep 2026 22:02:00 +0000
Manifest this update:     Thu 24 Sep 2026 22:02:00 +0000
Manifest next update:     Fri 25 Sep 2026 22:02:00 +0000
Files and hashes:         1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
                          2: D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa (hash: ez1YIU6Tx3muI0r5J6f9+6WO/D4t4YugqUqFYhktxYk=)
                          3: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
                          4: RnSc6gSUeDQDtCWXcClmqxy0TiY.roa (hash: +n8JNrN3miwL2GACthuyyp7bhT+soPbrQhQAhrWLdUU=)
                          5: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
                          6: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
                          7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: 5/sca1DEqJdaPV5cxIHBA5HdKeHLk3ckVUlfMC2vV2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:95:d9:90:a5:4d:a6:d3:15:2c:ee:94:0b:ce:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Sep 24 22:02:00 2026 GMT
            Not After : Sep 25 22:02:00 2026 GMT
        Subject: CN=50bb26bdb737026fc8bdbb58edac812a0470eef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:6c:b7:4c:47:2f:a2:30:1c:04:ff:4c:22:
                    87:6f:2b:5b:2c:45:99:5a:00:7f:cf:4e:3e:51:4e:
                    9f:5d:11:54:7f:20:b6:5f:38:a7:4f:84:a0:3a:7f:
                    fa:99:7f:31:52:06:13:61:58:da:85:4f:a8:cc:8e:
                    d1:a9:01:4b:6f:45:88:3d:a2:0c:45:30:74:a8:96:
                    82:a6:76:dc:d2:f4:e1:56:85:25:dd:8e:f7:7d:a2:
                    0a:45:ef:af:df:2c:61:c5:61:4e:57:e6:de:f1:14:
                    b6:e0:4d:bb:94:4c:4b:4e:36:7d:e4:7a:90:b0:6d:
                    27:96:9a:52:cc:d6:0f:ed:ca:11:a0:a3:93:dd:ab:
                    d8:c2:8b:55:b8:30:d7:a5:c5:0a:f9:cb:21:0c:6b:
                    80:8a:5c:e3:a1:1b:48:5f:3d:2a:9c:74:38:d4:09:
                    b1:0a:d9:37:23:10:fb:aa:53:62:64:41:f3:24:6e:
                    97:b6:e1:a7:fa:54:43:99:e8:a9:ff:c7:ae:3e:d5:
                    79:9f:01:2d:93:76:eb:84:4c:fd:7a:a7:45:47:de:
                    78:9e:5f:b5:46:12:94:92:40:d1:a4:cd:15:ec:6f:
                    67:f8:4e:1f:f0:07:83:d8:05:68:33:de:da:dc:5f:
                    4f:4c:62:d6:fc:05:4e:7d:80:3a:ff:80:79:99:53:
                    6e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:26:BD:B7:37:02:6F:C8:BD:BB:58:ED:AC:81:2A:04:70:EE:F0
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9b:19:9c:c5:d4:8f:3a:79:03:06:e1:39:1f:f1:2c:e9:77:
         c7:39:62:cf:a3:62:7c:10:59:17:34:81:75:bc:17:d7:e2:f7:
         66:c2:22:84:1b:7b:33:62:ed:0a:74:fa:a8:91:cc:c8:49:fe:
         31:d4:0e:f6:92:fa:88:fe:fd:cd:3c:98:52:61:18:ea:78:a8:
         f6:9b:db:05:9f:4c:f3:7f:6c:40:e4:55:92:c7:97:46:ab:5f:
         7d:39:a1:89:b1:91:4c:77:ee:c7:2f:58:ac:43:d7:d7:9b:89:
         2a:4f:84:72:d8:b0:e1:81:92:4d:7f:87:2d:36:7b:6e:59:cf:
         60:29:44:cd:5b:6f:a7:1d:bd:e2:83:10:cf:ec:0b:7e:6b:d2:
         69:b7:3c:5e:e0:03:60:6f:fe:7f:0b:5e:30:54:7d:2b:a2:2b:
         9a:2b:2c:c6:52:50:9a:9b:3c:d2:8f:27:50:03:0c:ef:7f:c7:
         3a:7f:a3:3b:4b:99:56:99:c3:1e:1e:a3:ae:b3:ca:01:47:d3:
         0e:b4:dd:fb:e2:d6:ca:f3:c7:56:16:b9:46:fa:f7:66:cd:cd:
         f7:9f:d8:b2:0a:47:bd:a7:65:9c:50:91:a6:03:f0:c1:46:28:
         a6:a5:d0:47:56:73:7e:bd:46:ed:c2:9c:cd:92:5b:ab:bc:be:
         19:a5:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:46:13 2026 by rpki-client