Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File:                     XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier:          OTg+CfXaOIYAoQAzzlhMkU2bbm5M4qOXJ9nXhLVWqV4=
Subject key identifier:   11:D3:39:D8:AB:51:2F:39:FA:56:8B:BF:DE:E0:87:9A:45:65:18:EC
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer:       /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial:       01A13559EEFC27F3DA7CFB4EE1DC03A3C61B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number:          08D0
Signing time:             Tue 13 Oct 2026 13:00:48 +0000
Manifest this update:     Tue 13 Oct 2026 13:00:48 +0000
Manifest next update:     Wed 14 Oct 2026 13:00:48 +0000
Files and hashes:         1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
                          2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: /acGtHu41vKkV37Im61SR04gnUzJP0OQfPB+6mREpjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:59:ee:fc:27:f3:da:7c:fb:4e:e1:dc:03:a3:c6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
        Validity
            Not Before: Oct 13 13:00:48 2026 GMT
            Not After : Oct 14 13:00:48 2026 GMT
        Subject: CN=11d339d8ab512f39fa568bbfdee0879a456518ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:ef:77:75:a1:f6:89:d0:5f:91:21:75:d7:
                    10:88:63:d4:ce:df:a5:84:bc:55:e0:34:6b:57:e9:
                    95:d6:17:3d:a4:d6:ca:0a:54:2f:ea:66:51:e0:03:
                    59:d5:91:a7:31:7f:c9:c6:a0:9f:ec:9c:57:8c:4f:
                    a0:e6:b1:6d:d8:3f:fd:36:e4:2b:9b:cb:6b:87:97:
                    cb:1e:92:39:32:48:d6:2f:84:ce:3f:36:d0:22:3d:
                    59:b3:5c:4e:34:18:f0:d6:47:f2:73:41:82:62:aa:
                    6d:40:f9:49:4a:00:32:b5:f6:70:54:c2:fe:67:9e:
                    b1:f3:f2:c6:ba:57:5a:27:16:06:11:78:b1:b2:67:
                    60:8a:e0:f6:cd:55:a5:5f:fd:62:78:99:76:36:08:
                    cf:cf:d2:18:a8:0a:1d:7d:c7:b1:c7:b8:0d:76:f4:
                    87:35:00:a7:5b:83:f9:6d:bf:d2:d8:01:71:66:a6:
                    dc:9d:06:e7:f3:25:61:ad:0f:78:e9:d2:54:83:41:
                    58:14:1d:78:75:b0:c5:37:fd:75:17:d4:ba:2d:bb:
                    e3:27:d6:b8:4c:cf:e4:fb:aa:27:06:b6:d4:2a:c4:
                    8c:db:c2:50:98:1d:ec:e1:f1:07:96:6b:d4:a0:f3:
                    e9:b0:ac:ee:77:1b:cd:4f:5c:32:b0:4c:2b:8b:84:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D3:39:D8:AB:51:2F:39:FA:56:8B:BF:DE:E0:87:9A:45:65:18:EC
            X509v3 Authority Key Identifier:
                keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:76:aa:06:2d:0e:25:14:b3:40:33:49:86:3d:ee:d5:c9:
         d9:fb:db:91:06:38:ce:8b:e0:fc:df:c8:80:0e:04:60:c7:4f:
         fb:cd:f5:71:85:b8:ca:b9:0c:57:94:14:3c:9a:70:8b:72:b8:
         96:fb:85:48:c0:84:06:1a:ea:8b:ef:ea:23:37:04:62:d3:34:
         a7:94:46:04:aa:55:02:95:1f:3c:ee:08:c5:fc:ea:88:17:25:
         cc:e7:6f:92:3c:f7:fd:2d:42:0b:57:5a:46:5e:1d:96:e3:08:
         6b:74:22:23:0a:f4:ce:07:ff:23:f0:a7:1a:c3:5b:b1:0e:f3:
         94:d2:bd:a3:de:9e:a8:4e:e6:64:3c:b8:44:36:65:94:b4:94:
         3e:9b:39:df:df:2c:0a:9d:2c:79:ab:e1:5e:f2:24:04:06:74:
         9a:48:56:8c:c1:bc:b8:16:c6:74:f0:12:3e:e7:54:f2:aa:1d:
         45:29:58:d4:73:c5:85:f6:fa:d4:a2:16:a4:0d:10:b5:31:c0:
         04:c8:da:bc:79:33:68:a1:b7:13:e7:d6:48:c2:98:33:5f:74:
         c9:46:e4:13:c8:56:16:ae:38:00:af:be:f0:fb:e4:38:c1:b4:
         b1:3b:24:62:a6:99:1b:71:3f:91:6e:43:46:a3:7c:58:50:3d:
         f1:2b:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:06 2026 by rpki-client