Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File:                     Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier:          BS2WdAQX/IJayPwmD/FAMm+hSkpare0BkL/2Qk0q+BM=
Subject key identifier:   C9:F0:A7:40:89:79:EC:BF:79:DE:B8:B6:8E:A8:FC:8B:D8:CC:E7:6F
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer:       /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial:       01A101DAC317F6228161A5F7CF7D7C25F18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number:          1A97
Signing time:             Sat 03 Oct 2026 13:01:16 +0000
Manifest this update:     Sat 03 Oct 2026 13:01:16 +0000
Manifest next update:     Sun 04 Oct 2026 13:01:16 +0000
Files and hashes:         1: 0K2pCDlU0pkDvqWKO7SJxoZ3lsI.roa (hash: Y26TNiFt+U9/ZCJnbcaya/o2zut2SxPMMS0KeeLWubY=)
                          2: 5bVrHFZm_9x7DsR30S7rosICdW0.roa (hash: TNCtAJMUf4J6FJnN+i2bTj70aWZ+c3ls9gu8xyrRaB4=)
                          3: 8hvOqdm8XRO6sXWDZkcaHc49vsM.roa (hash: rWJpUZIpb36Ggr6bjwKyRkuAjSB5QQdFYyzRQ+KUdsA=)
                          4: IrYzEq2SGCpInCAYd-WJzUfTJq8.roa (hash: ZrYtT3AeUNO4oEbWD6o2i8kmTUrNhOI+3+v73pA+A40=)
                          5: K1hlDg6Jw49-m395W6unv0PmwOI.roa (hash: 8+aK881dnXffC3EyaveeuAhYpPNlDPtqZ8vN3JCL5rU=)
                          6: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: CDQEi4GhqWtyNlwdsW9D76F08zLNZQVHtmQ2r7TEu+s=)
                          7: _ylley7uO-q2SakQqri2IL9Vh_8.roa (hash: 1WOpzM1HXCxDoeeqL/oavgXUUoldzw84YoaeeKakTR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:da:c3:17:f6:22:81:61:a5:f7:cf:7d:7c:25:f1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
        Validity
            Not Before: Oct  3 13:01:16 2026 GMT
            Not After : Oct  4 13:01:16 2026 GMT
        Subject: CN=c9f0a7408979ecbf79deb8b68ea8fc8bd8cce76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:89:b3:bf:64:f8:15:42:52:ce:65:96:85:
                    72:78:5f:92:f3:ce:75:3f:b3:55:61:14:d4:ea:bf:
                    6f:c9:1c:92:42:aa:2f:48:1f:ea:f1:2d:67:ef:fe:
                    8f:f8:e7:ae:56:0f:28:8f:b7:2f:25:bc:25:6d:55:
                    22:20:7c:c5:d8:58:97:05:64:e3:eb:70:81:bd:1b:
                    52:95:14:16:e5:f5:41:0e:d2:c0:85:51:3b:b5:eb:
                    20:00:01:c6:e7:ea:fc:21:57:80:39:29:5d:52:67:
                    fd:97:ac:4d:52:1d:ab:7a:0a:75:66:91:ef:18:d6:
                    e8:31:f2:0d:c7:9f:00:aa:9a:62:bc:62:1c:56:b9:
                    21:8f:2f:5f:3f:4f:51:ba:01:e2:5f:94:3e:54:44:
                    42:e9:48:2e:33:77:8f:db:ad:4f:80:31:e7:2b:e1:
                    ca:54:1d:53:ca:a7:4a:2b:e4:9b:0f:2b:ab:ea:f3:
                    04:06:78:df:cd:ab:ed:28:8d:76:89:b9:79:ca:99:
                    be:a5:c5:22:13:0b:19:28:a0:cd:16:23:b8:12:63:
                    45:ca:a1:28:05:c0:af:04:cf:8c:9c:b3:40:d0:c0:
                    83:0a:4d:2c:50:9d:3a:81:62:de:44:c7:4a:62:78:
                    53:e8:ee:be:f1:3e:c3:b1:19:ed:dc:2b:de:81:99:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:A7:40:89:79:EC:BF:79:DE:B8:B6:8E:A8:FC:8B:D8:CC:E7:6F
            X509v3 Authority Key Identifier:
                keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:36:93:76:a2:ad:1b:a3:4e:d4:3f:f6:8b:57:a6:a3:12:ef:
         37:cc:90:37:35:52:e9:ea:f0:ef:f4:0e:a7:44:f5:30:47:3d:
         f0:bb:9b:e4:95:a8:7b:5f:5c:d5:7c:ea:f2:79:89:26:4a:6a:
         f0:76:c3:cf:9d:e8:83:be:d1:59:03:4d:07:f8:5c:ce:d2:03:
         f9:cf:14:56:99:ec:94:52:77:8e:4e:d8:05:78:38:81:b1:d3:
         8e:75:4b:62:a4:0b:fb:ad:a1:bd:47:64:bb:6d:0f:75:1c:41:
         9d:86:0f:dd:2f:78:0f:27:06:69:19:e9:7f:92:8a:f0:68:fe:
         2c:d8:d3:fe:4d:60:6f:01:03:11:63:76:0e:01:fb:10:4e:03:
         25:bc:72:34:2b:61:b3:e1:3c:1f:87:43:15:3b:2b:81:13:56:
         d5:2e:4f:ae:b8:59:b6:84:1d:dd:a3:4a:84:fa:5e:a8:8a:6e:
         12:72:33:08:af:dc:1c:4f:34:e8:12:22:40:88:e3:8c:c9:09:
         13:e5:75:55:de:65:1c:7f:e9:1a:e9:dc:2b:23:cd:29:26:e7:
         67:5f:41:83:b5:c2:23:18:b9:ca:3e:b0:1d:9b:73:2f:5e:4f:
         f5:65:2f:c4:e0:54:30:d8:d3:aa:a7:ea:5c:45:4f:dc:fb:2c:
         af:9e:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:35:51 2026 by rpki-client