Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File:                     X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier:          BwN2GXOBfMwzAdStKzyWaofVDTqWqcZU8PHQLci4xtc=
Subject key identifier:   6E:D9:46:B3:92:FD:D7:2B:9B:81:35:AE:74:2C:7F:68:75:6A:FA:67
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer:       /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial:       01A0CEC8B64009270A867661F9C449A5B4F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number:          1A6F
Signing time:             Wed 23 Sep 2026 15:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:55 +0000
Files and hashes:         1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
                          2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: wK7ujTHuvkEIRRZujIKHhhgXzJ62NQsjosu936wUEkI=)
                          3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
                          4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
                          5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
                          6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:b6:40:09:27:0a:86:76:61:f9:c4:49:a5:b4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
        Validity
            Not Before: Sep 23 15:00:55 2026 GMT
            Not After : Sep 24 15:00:55 2026 GMT
        Subject: CN=6ed946b392fdd72b9b8135ae742c7f68756afa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:af:6d:e4:f0:46:a8:f5:c5:55:57:cc:3c:
                    b0:7c:eb:08:92:6e:38:f5:e0:21:15:00:0a:3b:3a:
                    f1:e1:4e:e4:46:e8:bd:9d:cd:9b:e8:44:06:50:6c:
                    f1:87:7c:26:a7:af:f8:3e:0a:a9:c0:e2:5f:ad:3a:
                    b2:7c:fe:49:84:47:19:3e:1e:9a:86:af:6f:d3:f6:
                    f9:f1:8a:6b:5c:85:be:a2:27:a2:df:7c:c7:56:72:
                    1e:cb:e0:36:14:95:b8:b9:0e:e4:f0:ad:9d:a6:19:
                    a7:88:f6:c3:c5:0e:76:b5:23:b7:e2:80:ea:c4:53:
                    39:5e:9b:32:3d:e2:26:22:8d:ea:9b:b6:4e:2a:cf:
                    d1:ba:22:b3:ef:ff:56:d3:d7:c0:e0:18:13:2e:e6:
                    df:30:1e:2f:8e:f8:83:23:d6:ba:a0:fe:f7:50:1a:
                    28:3e:c1:89:7e:02:80:3b:ef:65:49:2b:49:2c:c5:
                    17:4e:b6:c3:d8:00:bc:58:ed:5d:a1:d7:15:19:80:
                    2a:08:7a:9c:f1:8e:e6:45:11:51:1b:17:06:bb:9a:
                    41:d4:e1:43:a1:e5:50:ab:8f:fa:9e:a9:5c:94:dd:
                    d0:45:d0:af:16:bb:dc:f5:8d:51:0f:4a:59:c6:08:
                    04:f7:d3:13:8a:8d:52:06:15:a3:3b:0d:78:f3:58:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D9:46:B3:92:FD:D7:2B:9B:81:35:AE:74:2C:7F:68:75:6A:FA:67
            X509v3 Authority Key Identifier:
                keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:d1:45:03:c6:68:2b:c9:93:ce:5c:84:f4:d7:f3:f6:b4:
         40:eb:79:b6:44:6a:22:57:8b:7e:db:cb:01:d0:0d:57:f7:bc:
         2e:16:83:e6:4f:61:94:aa:37:a2:1f:f1:61:9d:f9:90:bc:6e:
         19:9a:0f:73:ab:31:db:1e:45:dc:8c:24:15:17:dc:81:5e:95:
         af:4b:89:ed:51:8f:2c:e7:5f:f7:3f:dd:40:74:88:d9:dc:c7:
         0d:f9:2d:29:48:58:87:c7:2b:b6:24:37:0a:5e:44:1a:e2:98:
         f2:94:01:55:15:ff:80:57:46:f4:9f:25:a7:d7:87:49:8a:f4:
         79:70:0a:07:88:1d:a7:d5:42:d4:5e:c5:fb:34:3d:3a:e1:2c:
         b9:7c:e0:ec:d2:19:d5:2e:3e:0c:93:83:3d:e9:81:60:6b:09:
         62:e0:f9:ba:e1:11:96:d2:68:d1:b9:a9:93:5f:f6:69:bd:63:
         ec:5c:73:0b:c0:50:c9:91:2c:82:b5:47:b0:a6:38:79:42:eb:
         22:92:ca:1d:56:6d:3a:a4:c6:67:a3:de:55:4d:d4:a9:2a:13:
         10:af:4b:39:63:76:f3:eb:f1:f6:b1:20:46:a4:ac:3d:5f:09:
         99:8a:a1:7f:34:15:c0:f6:ee:fa:2d:66:b6:9d:b1:59:2c:67:
         28:30:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:05:22 2026 by rpki-client