Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File:                     xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier:          hvYdpEQqq1fn0Qn5aCZv3Qf7T75UB9TUUj/FRC6mhik=
Subject key identifier:   26:BD:5F:06:77:48:F3:13:46:D5:CB:83:5F:EC:00:AA:82:BE:50:80
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer:       /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial:       01A0DB040B35C9BBE36E8FC1C19A31F8D54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number:          0468
Signing time:             Sat 26 Sep 2026 00:01:10 +0000
Manifest this update:     Sat 26 Sep 2026 00:01:10 +0000
Manifest next update:     Sun 27 Sep 2026 00:01:10 +0000
Files and hashes:         1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
                          2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: KTVmI8iKMZ2IOrAUfv2c1TF9/2jMyFPmUGq5u5/FaZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:04:0b:35:c9:bb:e3:6e:8f:c1:c1:9a:31:f8:d5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
        Validity
            Not Before: Sep 26 00:01:10 2026 GMT
            Not After : Sep 27 00:01:10 2026 GMT
        Subject: CN=26bd5f067748f31346d5cb835fec00aa82be5080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:90:b1:ca:b5:97:09:4a:14:f4:ba:ca:29:e9:
                    dd:7c:5e:31:08:43:ed:71:e1:8c:27:c1:d3:51:79:
                    81:2f:1f:f6:2a:e6:e0:05:ed:82:d6:c3:17:bc:40:
                    48:a2:59:2a:97:25:41:31:5f:72:63:fb:d9:fd:09:
                    b9:7c:3e:f9:7d:5f:3d:48:a9:06:ab:15:7a:9b:27:
                    54:83:f9:fb:06:1c:f8:8e:06:32:bc:ab:eb:55:8f:
                    a2:96:56:8f:1e:86:f3:2b:f7:7a:6b:78:bb:d6:5c:
                    6f:b0:a2:f0:c7:72:90:50:61:25:da:c4:7a:4a:cf:
                    64:66:61:fc:bb:96:44:37:28:59:13:03:f7:66:9f:
                    55:a2:30:46:b0:ef:3f:6f:00:da:d4:d4:b7:5a:a1:
                    0f:2c:ff:94:38:e5:3a:97:9e:4e:b2:b1:bf:01:aa:
                    d7:51:ad:7d:0c:c9:fa:4a:43:42:38:6e:35:44:8d:
                    12:34:10:75:6b:6b:6a:e1:c5:b9:1b:a8:17:a9:ac:
                    51:45:0b:65:25:ad:f1:4c:c2:5f:74:9d:c7:85:34:
                    e0:f3:86:8c:86:8e:67:ca:0f:63:3e:ed:40:67:bd:
                    ff:59:ea:07:66:3d:49:da:30:ac:e4:e1:11:30:9a:
                    27:1b:bc:ee:01:7c:da:b8:75:17:22:06:05:2f:2e:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BD:5F:06:77:48:F3:13:46:D5:CB:83:5F:EC:00:AA:82:BE:50:80
            X509v3 Authority Key Identifier:
                keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:f2:24:b7:84:4c:3b:14:f6:1d:ae:3c:39:00:ab:d0:09:
         88:ba:60:58:ba:7b:06:78:9c:65:a1:35:63:7f:73:7b:61:b5:
         c3:f6:2f:02:af:5b:50:a9:69:43:ca:37:cb:4d:fa:b7:be:8c:
         eb:6e:d6:28:1c:d0:ae:38:2a:84:c5:a7:41:37:98:35:57:99:
         74:9c:8c:f2:70:c3:07:ca:60:b8:ad:a3:41:89:78:77:25:72:
         c0:47:ee:a6:b6:9a:25:08:5e:ee:bd:1f:4f:f2:e9:a7:23:8f:
         70:10:4b:78:96:01:be:a5:e3:e9:88:6f:b6:c7:7c:b9:26:fb:
         2e:52:c7:2e:61:00:fa:5a:56:27:e3:48:6b:82:9e:aa:1a:13:
         00:2f:cd:2a:b8:12:12:40:71:76:3d:5b:8c:f6:13:4f:aa:fa:
         19:d0:c2:72:f3:36:ec:c7:23:74:8b:cf:04:4f:ed:7c:24:e3:
         5f:4b:be:4a:1d:a1:9a:7c:86:b9:df:e9:17:52:3b:0f:e0:cc:
         29:27:6b:fd:4f:77:53:97:aa:d5:75:72:86:26:39:7b:73:b2:
         08:e5:23:ef:be:e4:53:53:8a:cd:95:4e:bc:44:62:b1:c0:6d:
         06:5a:61:8c:fb:8c:6c:a9:10:8d:6b:34:59:7a:22:1b:d8:32:
         d9:2e:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:57:24 2026 by rpki-client