Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File:                     xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier:          RqaVTiZ2k8WZY7zgV4CoXTJnVAnEuUGQIZ7wZiZ2HOM=
Subject key identifier:   C9:E0:F4:81:2F:98:D0:A2:98:A5:7D:B5:D3:2C:DC:F0:DB:53:9D:AF
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer:       /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial:       01A1298D264F3D37F8533A43591C8CCE18C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number:          179C
Signing time:             Sun 11 Oct 2026 06:01:18 +0000
Manifest this update:     Sun 11 Oct 2026 06:01:18 +0000
Manifest next update:     Mon 12 Oct 2026 06:01:18 +0000
Files and hashes:         1: mAjzWoi04qK6NnjPrTZ48XaGykQ.roa (hash: P8midNKI0EeB3alRGfjHU2gINYYSKmlfTyo7mKM/3qw=)
                          2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: s4Z3MCMCaYQbL27cUmhbk9Au741V/MuLcRWpqmgiTbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:8d:26:4f:3d:37:f8:53:3a:43:59:1c:8c:ce:18:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
        Validity
            Not Before: Oct 11 06:01:18 2026 GMT
            Not After : Oct 12 06:01:18 2026 GMT
        Subject: CN=c9e0f4812f98d0a298a57db5d32cdcf0db539daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:51:45:20:97:58:6d:dd:c6:7a:dd:0d:53:
                    4a:dd:97:be:60:d1:4a:00:46:1d:3b:48:19:cf:8b:
                    31:17:bd:cc:c7:06:cf:93:60:cb:89:57:a6:ad:43:
                    0e:1f:45:b4:28:d3:13:40:5f:a0:3f:9b:31:78:1c:
                    97:ca:0a:5e:0e:69:a3:70:17:46:30:3d:1d:d3:db:
                    c6:ed:d1:e4:7f:f4:67:16:12:7f:e0:50:f2:57:a3:
                    9e:b1:d5:55:48:b7:ef:b3:ec:7a:da:4a:b2:9a:74:
                    19:9c:a2:25:64:cf:96:6b:ce:10:c1:8d:10:ea:46:
                    4b:34:f7:3c:0b:33:54:0b:50:82:12:6d:51:e7:e2:
                    fa:e6:d6:76:e6:99:43:1c:a1:52:fe:0f:0a:34:82:
                    52:cf:9e:64:b3:d4:2b:8b:ac:9b:1e:26:6f:c9:24:
                    a6:1a:6a:0a:20:f4:00:ed:c5:4d:2b:76:a4:ac:3e:
                    5a:1a:3c:df:8e:28:26:27:06:05:c2:63:5c:82:30:
                    21:3c:58:2c:99:c3:f6:c7:f4:f3:cb:7d:be:cc:dc:
                    d9:25:54:33:24:42:39:67:be:22:ba:8e:cb:81:bd:
                    fb:d6:6e:24:5c:c0:ab:1b:4a:47:bf:2d:91:80:cf:
                    3a:6f:32:0d:55:b3:21:34:ca:ae:03:56:ed:bd:05:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:F4:81:2F:98:D0:A2:98:A5:7D:B5:D3:2C:DC:F0:DB:53:9D:AF
            X509v3 Authority Key Identifier:
                keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:73:5b:78:66:13:68:e8:c4:08:3f:cb:71:03:bf:4f:02:dc:
         f1:d8:b4:c2:5c:22:58:22:4b:7d:fc:75:32:e8:8f:40:f0:9a:
         26:ca:fb:52:69:c8:58:74:0b:23:2f:9c:57:e6:99:92:4a:35:
         e3:bc:ae:5f:20:c4:8f:5c:c7:07:f1:d2:1e:5d:ea:54:1a:e7:
         23:ac:05:a4:44:dc:62:3a:36:b2:8d:c7:90:42:2b:42:80:e1:
         e1:ec:0f:06:97:11:8a:f8:f8:37:9d:49:b4:fc:53:e7:66:02:
         24:ef:80:4a:93:6a:32:9d:17:03:27:ba:e9:08:f3:f4:e5:b6:
         60:24:64:80:c5:79:ca:c1:5b:19:71:05:25:17:d8:52:d0:3e:
         c6:62:4b:83:c8:a2:f8:c2:7b:ea:f6:43:cc:4d:74:69:9f:68:
         d9:44:1e:b0:5d:b3:6f:b2:7b:d1:cb:c3:fb:32:41:0d:ee:6b:
         de:ea:05:0d:96:f1:bb:19:58:72:20:2d:35:90:31:82:77:6a:
         27:81:a3:b7:03:67:f2:91:b0:6e:6f:6c:5e:69:0d:ad:1e:4c:
         ab:a2:06:70:d5:0c:1c:50:2c:34:ec:db:cf:9b:5a:b2:64:ee:
         b9:ef:af:1a:9d:b5:22:db:b5:27:bf:17:4a:25:0f:bb:d3:2d:
         1b:52:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:24:15 2026 by rpki-client