Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          fFAZu3mzahsazQ/2sMcPw5UlEH0/ba1yzwH+M8tseYQ=
Subject key identifier:   5D:65:7A:F8:65:D5:3D:1E:8C:B8:07:EA:E0:8E:FF:C9:F0:1B:9A:3A
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       01A0D87296EFB8FC46F32D25BB5306DF0A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          1985
Signing time:             Fri 25 Sep 2026 12:03:03 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:03 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:03 +0000
Files and hashes:         1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
                          2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
                          3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
                          4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: 5ntvtqu3fxIsnJlXlaOez3z2R/VzIaUg7HBJPFogldo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:96:ef:b8:fc:46:f3:2d:25:bb:53:06:df:0a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Sep 25 12:03:03 2026 GMT
            Not After : Sep 26 12:03:03 2026 GMT
        Subject: CN=5d657af865d53d1e8cb807eae08effc9f01b9a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:27:e0:69:ae:16:58:59:04:f0:2e:0f:9e:85:
                    8c:c0:06:52:25:8d:a2:99:e4:11:bc:38:a0:ed:e3:
                    83:ff:21:17:d5:3b:c1:1a:c3:06:18:75:99:45:2d:
                    cc:39:82:d4:e9:b7:47:36:5a:68:12:b3:a3:c0:b2:
                    2f:00:41:8a:42:e3:9f:f9:f1:d8:b5:a2:54:a3:e2:
                    c4:8d:ff:46:91:0c:75:03:10:c0:87:33:62:24:ef:
                    3d:b0:d3:bd:c8:36:68:68:a4:86:d5:48:e1:9b:b4:
                    b0:36:25:56:2e:b9:84:86:46:c5:c2:30:57:ff:49:
                    26:78:3d:3c:09:e3:72:b5:21:4b:c3:e7:78:d8:bd:
                    b3:97:ac:9e:4d:d3:17:fd:bd:3c:5d:e5:ef:fd:fd:
                    2a:a5:3f:27:0a:f9:4b:05:e2:25:95:ac:73:ae:bf:
                    62:41:17:8f:59:bf:10:83:5d:d7:ab:08:44:e9:bb:
                    41:17:07:2a:a8:42:a3:43:83:b6:e6:be:86:24:2b:
                    e5:41:31:c4:60:8b:50:95:6c:67:69:f7:9d:92:86:
                    29:b4:0f:19:6b:44:6f:40:d6:24:13:f8:2d:d4:82:
                    e9:44:1c:58:d5:f2:a9:4f:31:72:b2:ff:0c:0c:43:
                    57:e6:5c:7d:37:26:91:46:3f:69:e5:33:0b:ad:95:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:65:7A:F8:65:D5:3D:1E:8C:B8:07:EA:E0:8E:FF:C9:F0:1B:9A:3A
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:86:63:e4:54:1e:7a:6a:7e:0f:0d:b0:d1:c9:94:e2:8c:f7:
         c3:a9:e4:cb:28:d5:22:55:79:d5:c3:de:d9:90:fc:8f:94:91:
         86:50:40:e2:86:b5:bf:4f:45:69:f0:14:25:6e:97:e0:37:d3:
         d0:93:46:d2:ef:33:e5:21:31:a5:ea:3d:31:fb:54:6f:78:ba:
         98:52:96:ab:07:c7:07:2f:f8:3f:2e:ab:4c:1b:12:9b:60:2a:
         26:3b:ab:49:d5:27:ca:19:69:8b:19:a9:92:cb:15:66:04:1a:
         db:92:3f:9a:ed:99:a0:c6:b3:88:1b:3c:66:4b:77:7f:55:49:
         c6:4a:1f:63:51:42:d3:a0:56:97:e3:15:56:ce:48:4d:3f:58:
         99:08:c6:04:22:84:05:e3:86:6d:b5:b5:2f:e5:e4:cd:5f:5e:
         e2:78:34:f3:09:08:67:c4:2a:7a:e7:e3:35:74:f2:b9:a8:b7:
         f2:94:c3:ae:da:e2:35:cf:d4:8b:2b:ed:0c:d2:3e:0d:de:ec:
         23:0a:bc:09:be:a3:e8:04:15:86:80:2b:a6:a3:17:42:31:cb:
         ce:c4:b8:bc:d7:60:52:03:f7:0d:ac:33:18:09:c5:e1:62:8a:
         02:6b:78:9a:af:dd:f8:de:aa:e5:8b:a2:d0:ba:62:df:24:e2:
         91:93:4e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:10 2026 by rpki-client