Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File:                     xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier:          HeFTBv427oNcwJE4szVF6Xyexew7FGpot8D1ftNB5UI=
Subject key identifier:   62:53:3B:E6:37:6E:7E:49:24:02:EA:31:2A:CB:20:18:91:FC:6B:1B
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer:       /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial:       01A0DACDBF962C8FF179F89F88FECD2AE089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number:          1A74
Signing time:             Fri 25 Sep 2026 23:01:52 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:52 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:52 +0000
Files and hashes:         1: 0sxkLDFdb4QelHCb0OZcMbO1jDM.roa (hash: 1xnWSoVsnQK8dLyDSxHxSRJdCC9QJVhSYDLS7qz0b0o=)
                          2: AjeR0O3ITsCO65xWw0QykqgxNA4.roa (hash: DgIKpLNUmEsPkrau/sY/HOWPCo1ggWtDwl6wxDzmrWM=)
                          3: JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa (hash: 8yyEuQEPL63uz0pA2x8egSWHyWTxI5pMdw0GJbheT0g=)
                          4: XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa (hash: I7f3HuHYguoVsLgmKIELlpLwLVz1wyD/5cmJZXhghjI=)
                          5: cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa (hash: voL4FK/goy3Ucp4jv2hDvT1VmoRVg+99FBMAXu49zQk=)
                          6: sQNC3PZhtT00aBnksKdxFAVZzQQ.roa (hash: 0L2z2BzNlMPl3E12ZeAaZbBCG9ys89MDIPcvR5FtVNI=)
                          7: tfaKP8IvgQkAwmU3RK8qZmHmzts.roa (hash: hyWKZ+AjnMpt6LR61ItU5+Wmy9Q8i+PxJ269z65RWH0=)
                          8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: B0c5tClmtuUAeQfZ+6OUYKieAlydwTT9DX40mYN7XAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:bf:96:2c:8f:f1:79:f8:9f:88:fe:cd:2a:e0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
        Validity
            Not Before: Sep 25 23:01:52 2026 GMT
            Not After : Sep 26 23:01:52 2026 GMT
        Subject: CN=62533be6376e7e492402ea312acb201891fc6b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:1f:a3:f5:83:0c:18:15:9e:13:46:d5:c4:
                    bf:9c:8e:ea:34:fa:eb:9f:18:90:f0:c0:8c:0a:7b:
                    98:b8:12:26:7f:74:21:99:17:63:b0:59:81:83:d0:
                    b1:9f:1f:5b:6c:3f:8c:f0:d7:d5:1b:82:6f:f8:5c:
                    f8:4f:ea:6a:45:18:1a:4e:c8:b9:af:32:93:78:88:
                    c4:f8:d6:70:45:5d:2e:c6:8d:4e:14:0c:34:26:59:
                    af:38:c3:f0:00:22:47:33:3f:45:7a:38:24:e1:7e:
                    4d:bf:15:ae:9b:96:1b:ba:74:ea:9b:ef:60:8a:07:
                    d6:da:13:c5:ec:fe:90:45:83:96:fb:b4:e4:3e:d6:
                    b4:a3:8c:2a:45:68:32:41:3a:1d:a6:cf:46:5b:20:
                    cd:65:9c:51:f8:a3:db:c4:51:9d:e5:0d:4b:32:ac:
                    ae:b9:66:33:cf:09:be:c0:2b:90:12:58:d3:e1:8c:
                    45:2d:e7:52:85:d9:5e:6a:14:4b:46:e0:8f:77:51:
                    17:3f:b5:28:f4:49:50:17:26:bd:f8:e9:5d:bf:4a:
                    d1:90:4c:71:06:05:3e:30:20:cc:5d:5b:dd:a9:aa:
                    20:fb:e3:f1:03:36:bd:2b:1e:57:be:d2:b8:e9:f6:
                    ec:be:10:4d:4f:4f:16:47:78:10:3e:22:8c:1e:cd:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:53:3B:E6:37:6E:7E:49:24:02:EA:31:2A:CB:20:18:91:FC:6B:1B
            X509v3 Authority Key Identifier:
                keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:50:3b:2d:18:28:1c:eb:c4:44:fa:b9:4b:9b:e6:17:77:93:
         3f:65:5a:9e:97:1d:28:d9:f6:81:70:a9:1b:35:86:f5:c3:23:
         0d:f3:6a:59:55:b1:7a:6e:f2:0a:dc:70:1f:23:c1:5c:26:c6:
         70:94:1d:2b:c3:d3:e8:e6:f3:d6:04:dc:64:2f:15:2d:61:e9:
         50:4b:20:59:13:23:30:ed:aa:1c:22:5d:92:27:fc:e0:62:48:
         4a:28:0b:ea:ca:a5:3e:61:98:50:e0:f4:54:e2:34:4c:25:22:
         2c:aa:fe:58:65:58:9f:7c:a4:ce:4c:ea:94:ce:3f:4e:06:c8:
         9f:9c:3a:80:02:dd:09:72:51:62:45:84:56:57:c8:9c:6b:4a:
         47:cf:2c:78:1f:ea:f5:c5:77:80:5b:f6:6f:53:d4:5d:e4:a4:
         97:20:39:dc:0b:22:66:99:95:d0:03:fd:65:61:42:0a:04:d0:
         6d:b2:76:96:7e:a7:86:44:31:ea:f6:c0:05:10:4e:80:1a:31:
         af:17:3c:be:5a:02:34:13:3e:b2:83:5f:f2:6c:9c:d7:0e:24:
         86:d9:86:4f:ad:15:11:71:f5:87:52:e0:83:69:0e:de:be:e0:
         60:61:6a:df:0d:72:75:75:02:1a:df:e1:29:3e:25:eb:92:30:
         69:1b:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:43:55 2026 by rpki-client