Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File:                     XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier:          NPEPv3FdBRmCmr8dwGGMgHG+mPwwPdSSMfq4ibrl0g0=
Subject key identifier:   97:02:0F:35:40:7A:30:63:45:90:5E:5B:D9:0D:BB:92:55:BC:35:D9
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer:       /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial:       01A0D45D167D9176387DB0BACD45A743860D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number:          0261
Signing time:             Thu 24 Sep 2026 17:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:05 +0000
Files and hashes:         1: LiklnKyGrQ1N8swmJUP8MTgMhcs.asa (hash: YnfSS7Rq+wWXwWH2x0GgIjhpjhncpiH/Ro2Xlq96x7Q=)
                          2: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: LC3sk6Fv6ks8v1DnDvVAka3hbfDRqT48uDcUbJ6eLuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:16:7d:91:76:38:7d:b0:ba:cd:45:a7:43:86:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
        Validity
            Not Before: Sep 24 17:01:05 2026 GMT
            Not After : Sep 25 17:01:05 2026 GMT
        Subject: CN=97020f35407a306345905e5bd90dbb9255bc35d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:3b:2b:af:ee:74:b4:59:35:fa:4f:b4:d5:
                    cb:f6:18:11:5c:57:e1:47:f3:18:de:e9:25:83:07:
                    76:35:05:7b:ba:6a:30:ea:ad:04:85:8a:c7:f6:5b:
                    44:89:3b:e2:8c:98:68:e1:be:53:96:fd:ec:35:d6:
                    f8:21:c2:a4:ae:25:bc:a4:2a:a0:89:42:6d:b5:26:
                    d3:f3:40:af:f5:de:51:3b:03:97:04:18:55:98:1d:
                    6d:32:e6:31:96:32:7d:b5:cf:39:de:1d:f0:e8:bf:
                    57:b6:65:b0:bc:2f:77:f7:e3:bf:1b:f9:eb:63:45:
                    0d:39:91:ec:aa:43:d4:f0:0e:eb:29:12:6d:24:b4:
                    31:fc:b0:60:06:21:3b:8b:ea:e4:9f:18:a1:98:f8:
                    3b:25:61:97:c6:84:d6:b9:4d:8e:0b:41:9d:94:67:
                    aa:35:00:be:11:d8:ea:88:e7:65:62:d7:20:5b:78:
                    2b:ec:ab:de:70:e8:fe:25:ff:5a:34:81:05:2b:99:
                    b5:5f:9a:39:a8:2f:ca:c7:76:ae:c9:14:34:be:2b:
                    62:9e:a2:4d:ab:ce:03:f6:73:62:fa:ad:e7:e4:80:
                    1b:35:fd:dc:9a:4b:fd:99:28:f1:e8:1a:60:07:65:
                    d5:e0:f6:88:3a:b9:38:78:ee:cf:f1:3c:dd:ef:cc:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:02:0F:35:40:7A:30:63:45:90:5E:5B:D9:0D:BB:92:55:BC:35:D9
            X509v3 Authority Key Identifier:
                keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:35:a7:55:63:d3:53:13:40:5b:98:a5:f0:5b:89:5e:97:ed:
         e1:44:11:f0:2e:8e:69:5d:73:cf:71:70:ec:c2:ed:d7:5f:32:
         a0:e3:14:e5:cc:5e:38:78:0a:e3:39:7b:4f:43:e1:51:9f:9e:
         3c:5c:c8:48:e8:c6:4a:ba:59:97:8d:74:70:69:b2:05:a5:98:
         e5:7c:51:ed:25:ad:06:b5:d4:7f:69:17:52:e0:9f:de:89:1d:
         bd:5c:18:51:ca:e1:34:56:b8:62:b2:96:e4:9c:b6:f3:d6:21:
         45:8b:89:4a:01:64:8d:11:c2:61:f9:a3:be:07:c5:7c:a5:5d:
         d1:fb:7d:32:b6:94:c0:d1:1b:cc:0d:1c:e5:96:78:ba:51:e4:
         d8:88:a6:c0:54:0c:26:d5:59:38:1f:a7:8f:29:c8:5e:10:be:
         37:29:7d:95:79:0e:04:bb:48:24:51:32:28:6f:ae:76:6d:ae:
         72:76:f5:44:b9:dd:80:cc:47:5c:1b:7e:bd:7e:f0:d4:02:b5:
         80:86:b3:8c:7a:29:9a:37:84:34:ce:0e:b4:97:84:b6:a6:d5:
         e3:b3:4c:6d:af:2c:43:2f:b0:d8:1f:37:77:4d:76:8f:3f:72:
         0e:15:93:dc:0f:f9:8e:65:73:b8:b1:bb:da:e2:97:e3:92:47:
         64:02:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:20:50 2026 by rpki-client