Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          RwnPXazkPoOybBYrNXm3SwKlFYullReaR9UnmMBzGKE=
Subject key identifier:   61:0E:DE:51:5A:3D:0F:CC:A0:43:97:CA:EE:37:91:20:B6:2A:35:01
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       01A0DFF3C13F9D94FA66CB9308E990CF2E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0BAE
Signing time:             Sat 26 Sep 2026 23:01:28 +0000
Manifest this update:     Sat 26 Sep 2026 23:01:28 +0000
Manifest next update:     Sun 27 Sep 2026 23:01:28 +0000
Files and hashes:         1: 97z5LT1W4vZYavKPXg_O49_MY-s.roa (hash: gyOyoIXXJi4jWXdpeab8PuMwCqtDwMbIU0Xhxks68Zc=)
                          2: IXIJrAigMS2KyNlGn9SAWS-uqGg.roa (hash: X7AJTqMC9nUdid2/jCikNAnO+sineLkma/nJ09OZfic=)
                          3: sIwtMgSLwoMidXac2nJ71qi4_js.roa (hash: zMSbXlEzGzEvRSISFMw5oU4Wqz6Z/skGDxHBRIE6e+8=)
                          4: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          5: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: +Xg7QC8YnGRKpLA7zq7UrhbL3myppnvIRaYW2tGmdAU=)
                          6: zRSd70TdIvpXG9E317tO5nOGMLU.roa (hash: RYQRkWxOaPRNfKvsAV9YZE5gwnP5mGesOdQB0s+hJOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f3:c1:3f:9d:94:fa:66:cb:93:08:e9:90:cf:2e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Sep 26 23:01:28 2026 GMT
            Not After : Sep 27 23:01:28 2026 GMT
        Subject: CN=610ede515a3d0fcca04397caee379120b62a3501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:b1:99:59:2b:a6:86:b9:e5:7e:a0:a1:fb:
                    25:89:c6:8a:b9:7c:c8:0e:49:07:ea:50:6b:3d:f4:
                    b2:14:b5:2a:1b:fa:12:31:6b:ed:d5:4b:f2:3f:39:
                    2d:e4:6e:e3:22:76:2b:16:90:9e:bf:6d:b7:0a:2e:
                    5c:8b:f6:1b:7f:b0:ec:50:95:de:ce:fa:01:97:10:
                    c3:1d:84:30:90:fd:eb:95:c5:09:32:27:81:b1:8c:
                    69:4e:22:c9:cd:21:17:61:cf:46:65:b9:18:0a:98:
                    7d:a0:e7:65:06:7d:ac:39:da:2c:79:cd:ce:0e:d7:
                    66:02:42:2d:cd:ed:3b:f1:a2:1f:f4:81:d4:86:91:
                    a7:44:5d:96:f5:42:01:d6:21:85:c6:17:be:8e:4b:
                    7e:57:a4:cd:73:69:4e:c6:6a:2c:01:8d:c3:2a:65:
                    b8:49:bb:c3:6b:b7:96:31:40:fd:c5:e8:7a:15:6e:
                    21:45:af:3b:ff:0d:31:b1:24:3e:93:bd:ea:f4:f9:
                    86:6d:af:cd:91:cb:ee:43:14:75:df:f4:3d:2a:c1:
                    79:c7:6b:93:ac:e3:db:10:ff:f3:62:b4:9e:9d:37:
                    bb:8a:3d:0c:e0:46:68:f8:0f:6b:71:18:fc:4a:16:
                    7b:98:2b:aa:93:30:11:74:82:84:a2:4b:80:36:bc:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:DE:51:5A:3D:0F:CC:A0:43:97:CA:EE:37:91:20:B6:2A:35:01
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:33:dc:b0:ea:6e:ef:7f:fd:45:57:ee:91:67:cd:a5:22:64:
         02:a0:a1:45:8f:3b:5e:2f:66:6b:50:f7:16:d6:b2:a0:c3:90:
         74:d9:91:28:b7:a7:e1:f3:50:fa:f5:de:93:6b:ed:fc:b2:bf:
         01:2d:dd:3e:14:47:12:49:af:11:b5:21:23:07:2b:a3:47:2f:
         e1:2d:9b:a9:e9:e1:95:73:d1:68:35:9b:f0:83:b8:1e:8c:8c:
         fa:8b:eb:28:66:91:f6:5e:a5:6a:ea:17:82:ef:8b:8f:2a:08:
         c0:be:7f:7c:8c:5d:cb:06:34:2c:16:5c:9d:b2:93:f2:27:fc:
         26:b4:63:1e:70:79:79:7a:0b:bc:3d:84:a0:82:6c:eb:94:bb:
         a8:b5:82:d6:1d:1c:6c:14:d2:dc:05:ba:d4:54:ab:8d:f9:60:
         e7:52:a7:79:47:ec:0e:6a:2e:2c:6f:a2:f0:06:56:44:e8:98:
         1b:63:c7:40:4f:b4:4a:cd:69:03:35:d7:fa:01:c9:91:53:6d:
         58:bb:a2:2e:c8:aa:96:f9:7b:e7:a3:fb:de:5b:21:3a:fd:1d:
         75:10:2d:04:55:10:9d:42:9b:41:98:e1:89:3c:9f:b5:02:53:
         bb:c8:69:ea:70:7b:dc:52:8f:b8:41:e0:2c:38:4c:cd:56:57:
         b1:d5:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:58:44 2026 by rpki-client