Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File:                     xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier:          8q/kBk68beCpFs5t6jtWybCtEyoeEA1YRzU6CRZDXw8=
Subject key identifier:   0A:73:9D:76:31:81:91:AD:B5:F7:E4:60:89:07:F4:6F:D0:0E:D3:C6
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer:       /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial:       01A10EBA91F9FDE1CA7025D5B5B2E7F341E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number:          105D
Signing time:             Tue 06 Oct 2026 01:01:10 +0000
Manifest this update:     Tue 06 Oct 2026 01:01:10 +0000
Manifest next update:     Wed 07 Oct 2026 01:01:10 +0000
Files and hashes:         1: TxIZNzzKaH19rbmOUyZ9uXJGBrA.roa (hash: /R4FGOkjkhFDesEVBEJOaS2Lp1AMWloELlEn3WOI3+4=)
                          2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: irKDkfULj0KImlNo7+3W7/f3LP/SXi9VMnyuQFGufdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0e:ba:91:f9:fd:e1:ca:70:25:d5:b5:b2:e7:f3:41:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
        Validity
            Not Before: Oct  6 01:01:10 2026 GMT
            Not After : Oct  7 01:01:10 2026 GMT
        Subject: CN=0a739d76318191adb5f7e4608907f46fd00ed3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:ef:0f:99:c6:41:79:8d:5f:29:3d:a9:7f:
                    9f:47:98:bc:49:e1:a7:9d:c3:ae:65:9e:58:8e:ce:
                    cf:e2:cd:1f:49:95:f9:50:9a:47:93:a6:15:c2:eb:
                    24:4a:08:b6:55:cb:f4:6a:96:0c:8d:f0:04:51:f4:
                    24:44:17:1a:9e:18:4f:40:8b:1b:65:d7:ae:f5:c4:
                    fb:78:44:6d:79:ec:35:74:8b:9c:85:c1:51:5b:85:
                    03:f4:b8:bf:f1:01:38:71:ce:a2:a1:db:b1:79:48:
                    10:4f:ba:b3:71:76:57:81:99:7c:0b:22:8f:ce:bc:
                    ae:6e:36:7c:a6:a0:6e:44:0a:f0:20:a0:a4:96:e6:
                    5d:f6:55:55:bd:0e:96:06:12:f3:6d:ed:ca:13:60:
                    ef:a1:32:38:69:14:a4:da:b1:6a:88:39:5f:57:ca:
                    6a:ad:52:2b:1a:b7:31:71:6c:32:b2:59:02:70:8c:
                    b0:49:a7:66:ba:a8:10:dc:2c:a3:94:a3:a5:49:fc:
                    9b:2c:4d:c5:da:91:57:99:20:0d:a5:fc:d1:34:a4:
                    79:21:aa:27:9a:6e:74:c3:df:ef:01:81:e6:f1:9d:
                    49:2f:a4:fb:d8:03:60:c3:bc:28:1a:f6:5e:b8:24:
                    c9:4a:72:40:92:35:a7:a8:57:81:f3:4e:a2:e4:5a:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:9D:76:31:81:91:AD:B5:F7:E4:60:89:07:F4:6F:D0:0E:D3:C6
            X509v3 Authority Key Identifier:
                keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:37:70:ef:58:58:d5:f2:3a:44:1a:78:ab:f0:a9:48:60:44:
         7f:cb:6f:7e:1b:d3:e6:7d:a7:b6:35:6c:0e:ce:e9:52:a8:0e:
         f2:70:db:44:ff:81:e3:45:22:12:12:d1:f5:55:7c:18:a4:77:
         6f:81:5d:0e:f1:8b:e1:4b:72:f3:f1:61:15:c9:ba:78:19:b1:
         41:4e:fa:2e:c6:db:9f:ae:c1:e4:c1:ff:cf:97:92:b2:5f:3a:
         a9:9c:47:89:37:6d:74:3a:c2:9c:5a:2e:af:42:f8:ba:05:70:
         c6:7d:39:85:d3:13:1e:04:4b:d4:a6:fc:27:f7:1a:c3:fc:9c:
         2a:66:28:23:82:bc:f5:2b:e2:cf:7e:7f:eb:0d:36:48:2e:56:
         44:5e:51:cf:ae:c0:b0:cf:23:5a:82:cc:bb:c0:c8:42:43:3d:
         ab:a3:ab:9e:d5:28:cd:07:f9:54:9e:22:c3:99:e6:4a:d5:1d:
         61:bb:1f:27:3f:6e:ca:88:08:6c:d0:5f:c2:b6:3a:d9:77:9b:
         33:1e:92:09:53:cd:a3:95:28:5e:04:a6:22:81:ad:b6:88:59:
         70:87:85:b9:23:4a:4d:c2:8e:5d:e0:5f:0e:5b:95:47:6a:71:
         ac:18:7f:e5:0e:c1:e2:3e:64:e7:9d:e2:75:87:58:81:e8:a6:
         20:0f:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:14:05 2026 by rpki-client