Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          53VVzYveebalJDQmYxrh/+6Jlr7MThJvy58Rq8sHpVU=
Subject key identifier:   A6:97:49:48:E8:97:68:D5:F6:24:74:55:F2:54:62:72:9F:E4:D1:80
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       01A0D012B20B1E9B6551484A80CC237F85B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          08AD
Signing time:             Wed 23 Sep 2026 21:01:21 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:21 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:21 +0000
Files and hashes:         1: 0-9sd-qmadUujczOz2WkJX2kNQA.roa (hash: GjNrMaOgADYzx542miG7jXCQg7xlwiNJxr+8IrSPpjc=)
                          2: AseCw-Cx6ezC6H7Qv_I1tR4Ip8I.roa (hash: gUy59gatZE9by6rU4gxGRzBS3ZQ/USUckizwien/R8k=)
                          3: W8vZ8aoRVKjvxUVny_OfYjJN6yo.roa (hash: FSZFedNs1YnxbjhewAgdDVFznFYlPK2O05FcBLwFtyk=)
                          4: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: TU4YW/ptOk1aa+w/xqwYxUbkXt/A0iB9MJSyJWIHjxE=)
                          5: jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa (hash: EV9l1WgVc2rsgYc/+T8QGA8A2PJD5mEc20rAUOjgeu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:b2:0b:1e:9b:65:51:48:4a:80:cc:23:7f:85:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Sep 23 21:01:21 2026 GMT
            Not After : Sep 24 21:01:21 2026 GMT
        Subject: CN=a6974948e89768d5f6247455f25462729fe4d180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:3b:a5:86:19:92:1a:33:be:ec:34:38:19:
                    bb:41:69:29:37:b8:9f:d1:5c:b4:59:9a:fe:80:1f:
                    7b:e6:d8:61:e9:3e:a1:d8:94:58:07:bd:c3:49:a8:
                    40:fa:67:b3:b9:34:99:fc:83:c0:16:16:11:60:67:
                    06:d0:f5:84:0b:3a:ec:3e:a9:51:4f:9d:f6:c5:04:
                    f1:11:a4:1b:b5:4e:c7:ed:8d:23:78:d5:46:57:62:
                    df:18:da:05:4c:0b:2a:df:e6:16:31:0d:8c:1c:0c:
                    eb:e9:32:83:52:99:24:04:c8:a6:81:68:92:07:af:
                    b4:4f:ae:0a:4e:29:37:e7:8f:53:be:ea:a9:51:d3:
                    b8:96:36:07:0e:24:36:29:9a:c7:ef:62:1b:a6:e3:
                    ff:23:9d:b2:37:e6:e7:c8:b5:ac:c0:72:88:3f:45:
                    92:bd:41:1d:a2:5a:97:6f:86:3e:8c:ea:ae:07:c5:
                    a0:8c:a5:d1:c6:ab:cf:91:c8:d0:10:16:34:90:a7:
                    38:87:b6:07:9b:34:75:91:97:2c:66:0c:f1:cb:b3:
                    fa:a0:fb:cb:72:3d:26:22:a0:80:7e:c4:b5:bd:e3:
                    e8:53:cc:5b:8e:1d:ce:8a:bb:fd:26:03:6e:41:47:
                    e3:c9:05:54:05:15:c1:20:ae:a6:f7:21:c9:cc:66:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:97:49:48:E8:97:68:D5:F6:24:74:55:F2:54:62:72:9F:E4:D1:80
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:00:1e:4e:00:d3:74:f3:e6:e4:9f:30:a6:fb:32:3d:c3:
         fc:2e:60:46:46:15:d9:13:8b:88:5d:03:82:3d:86:69:13:38:
         8b:a9:73:a5:ab:52:73:3f:17:57:04:a7:a3:a3:93:fb:8e:f7:
         75:3e:8a:08:2d:b9:d6:ac:09:6c:0d:3c:15:de:5b:24:6e:5e:
         2d:f4:c2:75:e7:f3:a6:7f:23:ca:2e:74:fb:f6:2e:a1:ea:7c:
         ea:21:90:16:66:5b:0b:d6:0e:da:4e:a1:e1:a2:99:19:e7:45:
         75:7f:47:55:9c:c3:16:8a:85:38:77:19:87:65:52:93:de:2b:
         3d:6b:0d:5f:6b:39:cc:fc:c4:02:8e:f4:34:a6:82:e7:e6:da:
         6a:8e:ab:4d:fa:a9:be:e1:4d:df:4f:8b:fe:71:9c:8c:85:77:
         ca:31:03:77:c5:39:c1:2a:a6:27:56:e6:2f:84:53:1a:d1:cc:
         cd:ab:9c:4d:e6:57:53:5d:8a:37:9a:c0:cd:2b:e7:d4:9c:3c:
         15:c3:79:6a:1e:06:8d:11:80:d0:91:47:cb:d1:23:e1:70:97:
         8f:61:c3:5d:50:6a:9e:de:63:d0:dc:7b:da:4d:a3:6c:b2:87:
         79:69:4a:38:22:bf:ed:18:8a:c9:c3:2b:26:63:54:a1:0d:59:
         b7:65:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:57:26 2026 by rpki-client