Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          wTcNbV0MHMQ5dPK6iFBPr/NCKcZW7/QYKo+1E8tHysE=
Subject key identifier:   67:9D:B4:EC:26:A3:4C:52:88:5A:0C:4B:E0:33:5C:90:11:C9:96:0A
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       01A0DD60BBBBD419A9F45F7DB8E294A78CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          1A76
Signing time:             Sat 26 Sep 2026 11:01:39 +0000
Manifest this update:     Sat 26 Sep 2026 11:01:39 +0000
Manifest next update:     Sun 27 Sep 2026 11:01:39 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: Ts4n5qCK0jFi6dWkW00rkbKgvMcq4mekWejKhPAQYoc=)
                          2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
                          3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
                          4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:60:bb:bb:d4:19:a9:f4:5f:7d:b8:e2:94:a7:8c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Sep 26 11:01:39 2026 GMT
            Not After : Sep 27 11:01:39 2026 GMT
        Subject: CN=679db4ec26a34c52885a0c4be0335c9011c9960a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:a6:b6:41:8b:24:b4:c3:88:9b:5e:51:99:
                    28:82:0d:41:95:7e:c8:03:8d:49:77:c4:f5:05:17:
                    7a:80:ba:52:42:1a:c3:d1:3a:40:6c:6e:81:23:08:
                    ae:54:d7:c7:ae:02:7c:47:00:b8:bb:af:93:7a:46:
                    dc:75:af:5c:99:3a:9d:62:33:48:1c:6b:ed:d3:29:
                    37:a9:15:17:34:ab:37:f1:30:16:00:03:aa:36:7c:
                    7b:50:cf:71:8e:e0:88:00:67:ec:36:dd:27:32:4d:
                    82:2d:8f:29:2a:41:6e:b9:90:d0:11:62:6b:f4:69:
                    9d:23:4f:ea:85:f4:d5:dd:85:7d:91:91:9b:df:7c:
                    a5:81:4d:81:cd:b8:c0:34:99:09:5e:72:88:5c:30:
                    ab:f0:8a:5f:04:39:9e:2a:37:64:e8:25:65:69:62:
                    20:fc:41:06:d8:b4:8e:9d:81:82:95:8c:3a:97:8d:
                    92:c6:5c:2b:6d:47:de:52:52:ba:87:de:fd:be:4c:
                    0d:b5:45:fc:55:03:d0:05:51:f3:81:db:6c:a0:3f:
                    10:8c:c2:1c:ea:d2:a3:74:b7:7f:70:39:21:02:e7:
                    04:e3:8a:f9:5f:e4:09:fe:53:9a:31:3e:95:0d:54:
                    c4:24:9e:3c:19:3b:8d:b2:17:0c:9c:df:77:25:e7:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9D:B4:EC:26:A3:4C:52:88:5A:0C:4B:E0:33:5C:90:11:C9:96:0A
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:09:a1:72:a9:a6:5f:71:79:6e:af:ba:4d:f2:94:a0:4e:95:
         ed:c5:cb:89:4c:fe:b1:9a:b5:ef:d2:46:13:1c:28:a9:e4:b7:
         a9:80:de:02:a2:65:e8:93:29:b7:55:20:af:6c:be:3c:f6:ac:
         8e:3e:6a:78:2b:fe:9c:2c:5f:51:6b:b0:7a:27:f4:ce:bc:49:
         39:d3:01:54:44:c7:1c:26:15:84:26:8d:2b:c4:b4:00:6b:13:
         b4:18:82:9e:da:30:e3:29:97:c6:63:2f:04:31:d3:5a:5c:69:
         ad:79:ed:4c:a9:26:60:69:7b:56:ff:ea:97:b3:84:7d:f8:92:
         07:96:58:ad:a8:18:56:6d:69:1b:7a:d9:58:7f:df:11:21:2c:
         a4:ed:b3:78:e9:bc:f3:bb:33:fb:55:bb:4b:cd:1c:10:ab:35:
         51:ab:95:f8:f6:87:d8:68:20:dc:17:df:ae:15:f3:10:cb:2f:
         1b:89:9c:a0:30:69:fe:7c:13:f7:bb:31:63:5c:a4:54:fc:42:
         d6:60:3d:e4:60:26:67:c9:96:59:87:cb:99:a7:11:f8:a2:59:
         8e:7f:84:12:c7:38:3c:28:0a:35:71:03:f6:3b:5f:d9:f7:86:
         f0:07:75:88:d2:bd:22:d4:4a:26:97:11:bc:4c:ae:dc:af:af:
         fa:b2:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:30:29 2026 by rpki-client