Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          kMUHxe5Kf6gsTbg7Ub39kv9OxLotJpVJAv+vJ4JNohA=
Subject key identifier:   A3:C4:05:F6:8A:A2:46:52:C0:BD:86:3B:61:54:CD:D2:EF:C5:77:3F
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       01A0D0EDCABEBF3533EFC78404D758E9AFD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          09E5
Signing time:             Thu 24 Sep 2026 01:00:39 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:39 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:39 +0000
Files and hashes:         1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
                          2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: gxeUSxy0ei9SXabDNbjm2FWKnJYFPP1gHhB5ymQ0QAA=)
                          4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
                          5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:ca:be:bf:35:33:ef:c7:84:04:d7:58:e9:af:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Sep 24 01:00:39 2026 GMT
            Not After : Sep 25 01:00:39 2026 GMT
        Subject: CN=a3c405f68aa24652c0bd863b6154cdd2efc5773f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:b5:ef:bf:a7:47:1b:5f:46:d8:4d:23:cc:
                    35:62:c0:9c:6c:30:c3:dd:32:50:74:f4:d5:46:ef:
                    f0:87:0e:ae:b6:41:44:72:5b:36:c6:4f:48:6c:be:
                    e7:c6:4a:25:83:a9:88:c3:96:31:a1:4b:49:29:ec:
                    03:12:c4:89:ac:6c:03:b2:68:f1:9f:fb:84:75:62:
                    46:4a:9b:9f:bf:a9:3a:3a:26:bc:ff:c4:bd:12:8f:
                    7d:97:28:0f:04:c4:d1:15:de:6a:89:d0:7f:e8:d3:
                    aa:60:34:80:8a:b9:6d:f9:25:91:fa:67:71:e9:ae:
                    98:4c:41:05:dd:9f:ce:69:91:85:46:4a:b5:c0:3b:
                    2b:93:27:6b:74:76:c3:11:3d:5e:8c:03:9a:b3:78:
                    a0:c8:26:70:f8:57:ed:62:1a:64:12:71:1c:1b:0b:
                    93:54:e9:ca:66:11:04:44:4f:4f:96:51:95:5f:f3:
                    7d:13:ee:1d:63:83:25:4a:1a:13:ba:cd:b0:64:d7:
                    a0:8e:50:ea:58:a0:c3:86:a3:a4:cc:a1:42:b0:c7:
                    67:8f:f5:85:9f:3e:59:0c:1b:4b:51:69:86:ea:19:
                    03:76:5c:5a:b9:1a:e3:11:96:29:bb:96:e5:28:af:
                    e4:cf:c1:de:cb:0b:40:bc:5e:18:96:61:8b:79:d9:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C4:05:F6:8A:A2:46:52:C0:BD:86:3B:61:54:CD:D2:EF:C5:77:3F
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:2b:18:f3:9d:f0:d3:bb:ea:b2:03:e7:f7:74:ad:3f:ac:
         df:77:59:d2:34:5e:43:e4:bc:9d:e1:06:35:39:5d:e5:1f:d5:
         31:7f:17:66:77:6a:ea:99:30:79:b4:db:6e:5b:97:50:7a:96:
         15:a9:d9:4e:3c:fd:05:21:6e:26:64:a7:48:6b:84:51:af:8d:
         eb:c8:25:06:d4:9a:13:eb:d3:1d:a3:fb:67:29:e9:7d:6a:c3:
         e8:d6:cb:63:b7:19:70:96:59:33:b0:9d:60:18:d5:b8:33:3a:
         44:ba:05:69:ba:ee:79:67:e0:ae:54:18:52:a1:78:b3:07:0f:
         c7:60:d0:76:47:8b:4f:94:ad:d2:30:92:e9:66:2d:4e:67:f7:
         4e:68:5c:e6:a5:0c:07:93:6a:2f:65:d6:ba:b3:f1:80:c4:3a:
         f8:7b:bd:ae:76:c8:67:5d:5d:fd:5c:65:70:a3:21:f3:33:7a:
         a4:0d:4f:33:b0:03:5f:8e:19:dd:a1:1b:b2:de:db:25:33:dc:
         7a:6c:17:91:60:ba:3c:42:de:97:ca:12:95:d6:c8:50:31:73:
         0d:53:84:aa:50:5b:3f:c6:01:b2:aa:4f:29:7f:1d:01:0d:0e:
         70:45:bf:7c:74:7a:70:cf:f2:76:1c:bc:eb:ff:a5:4c:3a:75:
         74:17:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:29:37 2026 by rpki-client