Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          jQNwfzxnWgeU9fZp3ppsEM8l1jBybMoYhQQZyL+rbW4=
Subject key identifier:   3B:D7:5F:0B:B0:FE:B5:F2:51:B0:31:8C:EF:0A:C8:45:FC:EC:2D:E3
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       01A12053299108A402E22832C57143E17C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          1AC7
Signing time:             Fri 09 Oct 2026 11:01:23 +0000
Manifest this update:     Fri 09 Oct 2026 11:01:23 +0000
Manifest next update:     Sat 10 Oct 2026 11:01:23 +0000
Files and hashes:         1: 03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa (hash: so/wDftuCuhVwNVUjhg5MbT2/4hCaRH4nYQ0u3BjKb0=)
                          2: 4zySZiWhTUg_rSb8KoK0O9QlCnc.roa (hash: gFl6wOPf/Gu9CFX49zoLAcByVCFuRBnN0N7UMDgQVbw=)
                          3: 6okDW562ptIs4iN1y-WMYg-45jY.roa (hash: KaiRGaOivd7uFd01xG4Jps9z07e2u3NUoDlDSh+lkH4=)
                          4: BHlTz3-_hk0tMzZp-IRVezg5RNg.roa (hash: 3CAUKuO6yLGGc6BqD8YXI8xLV+Hesf2PBsRTTbbaRXY=)
                          5: Cw5SfyDzZSwcs1u004-BHBsZJ2k.roa (hash: dTjLGIgHzcuawJEo1z0MGCRL7Fj8URygA4AZ4Hforus=)
                          6: MSWZuKtBI4wlnUe3Uu6905OvveY.asa (hash: ys6e6XNvdIzKyQFokYPssOeUxdzEEaAdl3OSb2J4N60=)
                          7: T7EjLOUNjE599ece2DV4T26b9xY.roa (hash: fsf0dRPygHs9hSe02Kw5kkb/kNnztp8TK8bBIMk8jhU=)
                          8: UlJaOFnMpoO5SgKO7Th_pY-ZAjo.roa (hash: jUSX0KizK2PQI3mj5biaakX23YPg0NJIgDEQv+TXIfQ=)
                          9: WRCnuaJzRXm83oAAxB0GzCKosjw.roa (hash: Zlyy/Icbe5M8aCeFBu4UmwH/OngNWuHDogd3Lscyms4=)
                          10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: zJFFAS3AvCs4Yj9T6oWO5O1w9692q2gHe9pwWIm2F8s=)
                          11: b24MgnJElk0t0CZYGUPCS0WiBxQ.roa (hash: cWHhW2paDx5FRXzehDQT7p6siSal6c3Aqs94Jvc3VHg=)
                          12: f9ERBjEpHbN1pfhl_nyFiocjtUM.roa (hash: eOOBr7U1g+HNywPWJzzBaEPCZoT5835M09OomcowoyQ=)
                          13: fZO1V-C0cXhOHVvlHXa0vUYnHZ8.asa (hash: cgi6TIEFIyrc5AnWcFBoC5eGLvx0L0ViQ+5+kfaeFOU=)
                          14: hAf22SRJwgs0SWkdAxUs95Fa0v0.roa (hash: 7vak+mJ/sIQOwdjrAkPrbLJTSGMQ1rFuipgFbAcPiHo=)
                          15: jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa (hash: 0xPjFQyLdMuqT+l7cmEhhj8WC9rilD8CahSrHUjkdaE=)
                          16: k09qltBTafYPaN8mKEjySL8ft6A.roa (hash: MFuya8B+MwfIjFnhNi4ZBDH/cZzScHZPkCXENvMvREQ=)
                          17: nkrV5tLs-lefafrDVBSQgulDPOI.roa (hash: 9SSFucsxAfajh5jClHvePjClBs0ArUj4EcuwFRS1hBA=)
                          18: q7ejmoUa5CLp8FjjBu9-Afywcr0.roa (hash: g5mShwr6G9nNz1wO7zkLNb/6wzwAilrCOEifz/cQvrY=)
                          19: wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa (hash: DtOCWrW/1nLce+oLk7kSY37T9S5ZLMhN/Uio3q7OELI=)
                          20: xI9niScPVURzbD2atpgMk7GVunU.roa (hash: wBTDsm/pz9hBwb3Vy+BwrclzAnI72KZbmuOWlENCDso=)
                          21: yNIYxMnUO5naybwPyNyh5ewSWWc.roa (hash: JUSRTIxpmqX2Md1pS2aFTtzHv44wRgNWsPuej9W1PDw=)
                          22: yTtc9_cvInn7yvfcK78WqTzFBDM.roa (hash: GZqbLQNtSwfpqv55KNnGoj2TZ2D+L4eB5ErF2hLFt3Y=)
                          23: ztKZKXz5sSSd9mxS9EgI0poqAYg.roa (hash: nBdrQf8RxLCFFDAly/9t+zuqKEqOGBMYF3lSM61ag10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:53:29:91:08:a4:02:e2:28:32:c5:71:43:e1:7c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Oct  9 11:01:23 2026 GMT
            Not After : Oct 10 11:01:23 2026 GMT
        Subject: CN=3bd75f0bb0feb5f251b0318cef0ac845fcec2de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:a7:ae:00:fb:dd:0b:4f:39:d1:ec:da:75:
                    e9:e2:e3:68:7e:ae:00:0c:45:68:84:b8:d4:55:20:
                    0e:03:0d:5f:0d:1f:e4:1e:33:18:31:56:8d:ad:ee:
                    24:8b:14:2f:b6:bd:21:90:a6:49:01:ee:9b:fc:37:
                    99:ff:ee:55:1b:42:fe:c9:d6:53:37:ca:02:82:a3:
                    60:b9:40:ee:bc:34:04:1b:de:34:fe:28:c2:85:4f:
                    46:4f:8d:dc:0a:70:2b:fa:35:84:84:23:a7:cb:3d:
                    88:78:2e:c1:e5:f8:6d:a0:bc:e6:d8:88:a2:dc:2c:
                    61:74:5b:8b:56:a2:a2:ff:da:dc:d0:e7:b3:b8:af:
                    0b:28:ec:8a:53:83:00:fb:44:b1:93:00:90:64:aa:
                    66:eb:57:68:c0:e1:ad:c3:b2:fb:2d:ce:b5:c8:5d:
                    21:e5:f0:c0:39:68:59:23:24:a4:e0:e4:b5:69:35:
                    99:06:3b:ef:c7:09:e3:ff:b9:51:ee:eb:28:c4:ad:
                    9c:27:fb:42:88:9e:33:39:ae:49:53:30:40:f6:65:
                    b9:b8:90:cf:52:04:94:43:7e:be:cd:3f:d0:0a:45:
                    4a:62:d8:cb:96:2f:e4:1f:ee:e8:ea:f7:1d:3c:be:
                    9a:6e:2c:c8:26:27:05:af:2d:74:cd:27:d5:a4:df:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D7:5F:0B:B0:FE:B5:F2:51:B0:31:8C:EF:0A:C8:45:FC:EC:2D:E3
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:47:c5:a8:08:d7:0f:1e:38:5e:09:5b:fc:81:d1:c8:3f:
         fa:ef:b1:07:ba:75:d7:3c:f9:32:03:cb:e4:d3:0f:f8:61:6e:
         75:0c:b7:8e:48:5a:f6:5d:9e:67:01:74:50:c4:1f:75:5c:6a:
         d4:07:2a:01:c6:1a:b0:10:de:ac:e6:c5:56:77:e3:7b:84:17:
         17:02:c5:97:e1:d1:7e:31:ab:35:fa:d8:26:34:da:f6:72:72:
         af:65:f5:a6:45:59:f3:ea:26:a4:02:29:14:f2:af:1c:43:33:
         9f:04:f9:16:7f:92:f6:8b:35:6d:f1:31:2d:08:6a:54:c8:bf:
         f0:99:85:32:78:10:42:86:10:8c:72:53:83:2b:b6:dd:f8:ac:
         4a:8a:96:a7:b4:95:58:9c:37:79:c7:cb:51:f9:d2:85:9e:f6:
         84:52:5a:66:4b:a0:9f:c4:dc:7d:17:ce:b8:f2:c1:bb:09:f1:
         74:79:f5:61:73:b1:91:86:6d:1f:75:92:0c:55:00:6d:13:5e:
         52:b2:c1:8c:f1:20:00:60:c2:c7:b4:60:06:78:59:ff:61:bf:
         6a:3a:68:5f:73:bc:7d:84:23:b6:e8:66:7c:f8:2a:29:6b:98:
         dd:d4:45:3f:2d:6f:f1:33:b0:46:30:4a:81:58:5b:b1:4f:e5:
         62:0b:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:10:31 2026 by rpki-client