Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          8g8e666OoXy6pEEfMVLWumnxk0rstvgTMzUd7uCCR3E=
Subject key identifier:   60:13:FD:D2:92:14:F3:97:7A:4B:06:FA:E4:D3:96:D2:D9:8B:2A:AA
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       01A0E173EBFAC0E1244F4B95643DF2DE6782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          0955
Signing time:             Sun 27 Sep 2026 06:01:05 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:05 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:05 +0000
Files and hashes:         1: 7VD9FedHhDKp3jdPS8TH2m8uSuc.roa (hash: xZcVVNzE+1lnqo21oPoTvLeW+I9A4gbqd0xRQIvFm5Q=)
                          2: SIDQ9sVBzRAafOCm9UYDrXMxlh8.roa (hash: kvIxSm7iZMTEjZ77jOpCtNSAajMjFLsT+5gwQRQ5+oM=)
                          3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: Ne9xBbV6dez6cgECTR07LE5XWhKA1o9L9nA+3eo+gds=)
                          4: e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (hash: hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=)
                          5: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (hash: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:73:eb:fa:c0:e1:24:4f:4b:95:64:3d:f2:de:67:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Sep 27 06:01:05 2026 GMT
            Not After : Sep 28 06:01:05 2026 GMT
        Subject: CN=6013fdd29214f3977a4b06fae4d396d2d98b2aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:d8:6d:20:f3:27:ba:d7:d1:d1:ac:76:8e:
                    bd:07:cf:27:c9:b3:d4:e3:b2:6b:f7:76:ea:87:5a:
                    af:5b:e9:76:ac:f2:ee:f2:c5:90:f4:35:e0:6f:f2:
                    86:67:df:84:9c:aa:38:b0:86:6c:54:c0:8b:11:ec:
                    55:2c:5b:87:7c:d6:6a:3d:c3:99:54:43:49:97:6e:
                    bc:bf:d0:25:ff:de:7a:80:3f:4a:e5:b2:5a:52:a8:
                    48:52:86:7f:34:12:4e:92:73:b5:eb:e7:13:e4:85:
                    0b:7a:20:f1:c4:42:ce:ce:6d:05:53:07:6e:4c:56:
                    01:10:ef:98:fe:44:63:5b:45:99:2d:55:f1:5f:c8:
                    5a:3d:78:54:37:b1:91:4a:1a:ec:3b:ba:2a:f7:0d:
                    fd:a7:7b:de:85:20:1d:3e:4a:27:b5:9d:27:f3:ca:
                    53:44:e2:14:a7:30:3a:ae:17:97:b1:b7:59:8a:36:
                    35:c7:c7:0d:23:d7:52:58:69:f3:ca:d2:b4:5d:f6:
                    98:73:c3:1c:fc:3c:94:3d:87:57:cb:5b:dd:41:64:
                    90:56:27:54:fa:2f:09:5c:de:10:fa:aa:43:fd:51:
                    cd:7d:d9:4e:d3:29:2b:93:d0:35:b9:78:de:60:9d:
                    cc:4c:fc:08:d3:11:cc:eb:99:86:0f:07:ff:e8:9a:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:13:FD:D2:92:14:F3:97:7A:4B:06:FA:E4:D3:96:D2:D9:8B:2A:AA
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:40:d7:4e:8b:21:4d:86:96:a1:77:00:a7:a6:87:01:58:d6:
         0b:6e:2d:cb:e9:d1:0e:10:5f:4d:44:8c:17:48:53:1c:ed:90:
         dd:a6:b7:f8:a3:4b:7a:42:0e:a8:ff:80:42:0a:ec:b6:05:2a:
         61:b5:2a:a5:02:8d:31:61:4d:34:00:84:0a:be:c1:a8:ae:81:
         a0:a0:d2:18:72:26:e8:80:7e:21:7e:73:2c:98:4c:97:54:d1:
         18:c7:41:9b:73:e8:d8:cc:8b:0c:19:04:96:49:72:9d:9c:07:
         f8:b4:8c:ae:ae:4d:a9:40:df:2d:a3:28:fd:6c:03:6f:55:ca:
         90:14:08:4e:24:6f:43:5d:91:b9:ce:f6:f3:db:a4:2e:82:8f:
         40:72:44:70:4d:87:95:f6:f5:51:56:f4:74:ad:b1:8b:42:85:
         5f:20:26:ec:22:4b:ad:d6:24:c8:62:07:1e:11:6b:14:24:23:
         31:59:a8:f2:a9:63:8e:bd:df:01:48:27:ec:52:05:71:88:7e:
         48:d3:6c:a1:47:15:ff:b2:c2:86:ba:52:ee:06:98:ca:95:4a:
         be:43:b8:26:cc:69:75:df:1d:a4:8d:b7:4d:5f:78:20:f9:95:
         ba:b2:15:11:2d:58:5d:2e:f5:00:12:7d:b3:22:16:a1:ed:72:
         0d:63:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:35:06 2026 by rpki-client