Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          YZRIGZNJMbtbEhgeltNwGTVg2IWCSwc0520+HSLQ55k=
Subject key identifier:   08:16:15:E1:47:35:89:77:F4:21:98:E6:0F:30:E3:90:AD:BC:74:A6
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       01A0D15C01358299E5693A13F53A82BAEF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          1235
Signing time:             Thu 24 Sep 2026 03:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:02 +0000
Files and hashes:         1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
                          2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: WXVMO9JrRBFBbyT8g2FWQR2tjryVsBwXUVm7wAbV2dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:01:35:82:99:e5:69:3a:13:f5:3a:82:ba:ef:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Sep 24 03:01:02 2026 GMT
            Not After : Sep 25 03:01:02 2026 GMT
        Subject: CN=081615e147358977f42198e60f30e390adbc74a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:23:b7:60:9c:87:c8:4a:98:65:09:ad:35:
                    9d:af:86:f6:1b:5e:c4:1e:3c:18:06:c6:7e:ed:7d:
                    a4:fb:c6:15:c4:54:2e:8f:22:fd:5c:22:c1:68:f4:
                    a4:bb:83:ce:31:72:fb:59:32:9a:fe:3a:fd:9f:96:
                    ae:05:f9:7c:6a:c9:e9:2f:87:a7:8b:08:f2:d1:24:
                    b4:d3:99:a6:83:30:ba:4c:93:07:a2:8b:ad:48:1f:
                    38:c3:6d:80:9d:ef:a8:5c:50:f6:29:dc:ba:20:3a:
                    be:e1:02:68:66:4a:f1:54:dd:4d:8a:63:fd:48:9c:
                    21:89:f4:93:f0:66:45:a1:0c:2c:ea:26:40:82:49:
                    6b:29:62:73:85:d3:7b:9f:f9:a2:87:64:32:fc:ca:
                    43:fc:62:ab:5b:30:6e:6c:f8:3b:19:e0:d4:88:4a:
                    f8:8e:21:a2:c5:dd:40:be:8b:ad:47:2e:7d:95:ed:
                    6e:39:8e:ef:f7:64:11:2e:00:5d:dc:df:63:a8:e1:
                    89:fc:10:26:b0:f4:ef:e6:1c:1d:65:09:d2:aa:24:
                    7b:a8:44:9b:95:93:37:23:29:68:2d:95:9e:52:a4:
                    ab:72:15:39:6f:4d:f6:60:55:09:da:7b:95:e0:95:
                    ed:06:8d:fd:be:e9:d4:65:b8:1f:6c:de:e0:e9:d6:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:16:15:E1:47:35:89:77:F4:21:98:E6:0F:30:E3:90:AD:BC:74:A6
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:9c:08:46:be:89:c8:e7:eb:c2:dd:a9:73:11:2b:5d:c7:
         37:fe:73:54:71:5b:78:4e:7b:28:70:df:65:d3:99:08:e6:aa:
         fa:5f:20:07:09:7f:91:29:fc:1f:77:cd:71:59:d6:2b:4d:8f:
         6b:57:ef:d6:09:f6:60:bd:e5:88:b2:97:45:8f:37:8c:e9:31:
         78:b2:9b:c3:79:1e:10:9a:9b:fa:63:62:f1:9c:89:0a:a2:56:
         9d:ad:39:8d:26:ad:22:21:98:04:6c:2c:b4:f2:c9:04:e0:87:
         52:c2:25:eb:60:fb:58:59:d6:90:3a:8a:0e:fb:f4:a7:bd:02:
         c3:36:7f:9a:a4:67:6e:a5:87:40:13:56:4c:51:5f:1c:a8:6e:
         af:6e:00:81:c3:05:21:e1:c3:65:42:87:f9:a1:ab:2b:3a:aa:
         87:a0:2e:98:90:46:61:21:2d:ee:8d:4b:ad:60:00:2a:cf:8f:
         f7:66:a8:d0:16:92:5d:60:b9:80:a6:4c:e8:6a:3f:5e:6e:73:
         d5:3e:9d:2b:6b:77:b7:9e:e8:0e:ba:51:ab:90:ee:da:64:97:
         ff:89:6b:c0:be:3b:f5:6c:7f:1b:92:2f:87:7e:60:fc:12:63:
         78:54:4e:2d:47:70:3c:a2:72:9d:19:43:d1:41:f4:13:e8:ac:
         be:6f:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:06:08 2026 by rpki-client