Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File:                     Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier:          83gsPl+NZDuMLieqPb8GIno3q9NsfuETHzOjWPDAzAw=
Subject key identifier:   A5:15:77:4F:A5:AD:02:28:E7:92:15:21:9B:46:11:41:13:71:DE:BB
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer:       /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial:       01A1073866E4478523913A029CA9D3B582F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number:          173D
Signing time:             Sun 04 Oct 2026 14:01:39 +0000
Manifest this update:     Sun 04 Oct 2026 14:01:39 +0000
Manifest next update:     Mon 05 Oct 2026 14:01:39 +0000
Files and hashes:         1: 7iD4K1gccNErcwUL56fdA_X6dFo.roa (hash: im8taFI4fIVJ8hCEmSfog0Wq6myLmqj/L7AJRggXUII=)
                          2: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: cnusBo0Lg1PZ0R2rOL8pq1rj5oT3+Wd7BCbJnz5x7E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:38:66:e4:47:85:23:91:3a:02:9c:a9:d3:b5:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
        Validity
            Not Before: Oct  4 14:01:39 2026 GMT
            Not After : Oct  5 14:01:39 2026 GMT
        Subject: CN=a515774fa5ad0228e79215219b4611411371debb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:04:37:5e:6c:98:70:8d:5c:b2:4e:79:6b:
                    47:a3:d4:15:6a:0e:05:17:3b:76:c9:9b:ca:f2:82:
                    54:d9:64:e6:c4:b3:fa:f9:0c:17:cb:54:35:3d:46:
                    4d:ff:62:50:8c:9b:5e:93:18:0d:c0:0d:76:be:41:
                    75:ac:bf:da:5c:74:cf:3c:61:3e:77:b2:0a:d2:3b:
                    67:66:3c:5d:53:e2:3c:4a:3a:2b:c2:69:d7:ea:13:
                    d4:25:ac:cc:5b:fc:7c:e7:aa:7b:87:a7:53:70:16:
                    be:fa:bd:6f:d5:17:eb:68:8c:cc:04:61:42:c4:18:
                    f3:0c:06:4b:d8:a4:a8:f5:7e:36:8e:06:8f:ea:e5:
                    82:e6:8f:b6:26:6f:f5:35:90:e2:ee:96:23:87:2c:
                    64:92:f0:07:d4:ea:c1:09:0a:47:74:cc:d4:1c:77:
                    68:92:c1:27:a0:57:b3:c6:fd:a4:80:25:ff:77:4a:
                    ba:06:6b:40:96:e4:3b:8b:88:8a:8a:a5:24:d8:42:
                    18:b4:94:e7:e3:a0:15:d6:e0:f2:aa:29:b4:e5:9d:
                    39:91:51:9e:74:c9:35:b9:d6:f0:e2:ca:bc:c5:6b:
                    28:f8:8c:5e:9d:34:fa:cc:1e:9e:59:ad:dc:cc:51:
                    61:63:02:a3:9d:15:dc:e5:f3:71:9f:ff:a1:61:89:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:15:77:4F:A5:AD:02:28:E7:92:15:21:9B:46:11:41:13:71:DE:BB
            X509v3 Authority Key Identifier:
                keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:83:2b:82:90:c0:11:b1:fb:6a:9a:e1:da:e9:f8:55:0e:f0:
         71:eb:91:c5:0f:30:91:a2:69:00:5d:11:b9:04:09:6d:98:dd:
         61:7e:db:16:7e:b0:c1:29:a9:bd:b7:a5:5b:56:0d:83:a6:ae:
         dc:5d:b3:73:10:c1:ae:85:8c:b0:22:22:51:fb:10:24:23:ba:
         de:0b:3e:cb:f5:f0:ae:35:ef:84:0a:0a:73:03:cd:42:7d:44:
         83:0b:50:7e:de:16:1f:b4:90:d4:da:07:b7:6e:eb:44:f2:f0:
         c2:e9:29:ff:b1:76:22:4b:a7:b1:20:90:13:f7:f6:15:64:12:
         84:14:63:05:09:ae:3f:0e:cb:5f:99:6f:ba:79:6c:c2:af:a8:
         6c:0e:a8:63:de:9f:70:77:d8:0e:73:5d:4b:2f:97:2b:1c:a8:
         de:d6:1b:0e:d8:56:21:b6:88:7f:19:23:83:48:67:44:a2:7a:
         1d:02:57:14:06:06:8c:dc:d7:1f:6e:20:68:de:7c:f0:11:d1:
         39:b6:4d:a4:b4:e1:c8:84:66:99:59:c2:ff:3d:79:30:95:f6:
         6c:09:2d:b1:e4:2f:85:7b:c5:48:5c:f0:50:7d:45:b9:6d:7c:
         78:0f:e8:03:24:b9:ff:69:b8:6f:cf:28:c9:44:15:80:16:7a:
         98:81:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:14:31 2026 by rpki-client