Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File:                     xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier:          FDOqL1l4vRVC3xeZziotHJXu9LgU0Tb+UQEZ2Y4wMNo=
Subject key identifier:   4A:38:0D:E6:8C:9E:AB:A1:CB:8C:33:4E:0C:31:26:F3:D6:CE:6E:F0
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer:       /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial:       01A0D19253E505B39BBB5B75EA9E0F921289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number:          199F
Signing time:             Thu 24 Sep 2026 04:00:22 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:22 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:22 +0000
Files and hashes:         1: IPWrOvsWgguYWB7Nl_gTONIzrpI.roa (hash: K/fllT4qGMJT3KoDnyrWIczoizT4y2FZ0kvxUQY8R7c=)
                          2: LbZzVT40yf25Ha7iF2B6O1RvYF4.roa (hash: f9AuhT5EpMpRv8pZmA+KFqXspnh60tIOSzMIN9FFIDk=)
                          3: pN_P1IlTK7N9Tsyo-7qDne3seo8.roa (hash: 4JuBbaWoHsvx0AsZc9fY1wPJc+hsLORDmTae2tdrxYs=)
                          4: vCRnh4F_lljPYv3DYF0shQI8Bbo.roa (hash: qW582UkFyFw7De0dFAxA/OIbguYJh97E6vsR4Z29UJE=)
                          5: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: TiJBkqdKrjl0m4OAMrrs/ra8B2XmRhfkoq5IQIR3U68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:53:e5:05:b3:9b:bb:5b:75:ea:9e:0f:92:12:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
        Validity
            Not Before: Sep 24 04:00:22 2026 GMT
            Not After : Sep 25 04:00:22 2026 GMT
        Subject: CN=4a380de68c9eaba1cb8c334e0c3126f3d6ce6ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:9d:ea:f1:63:42:0f:49:24:7e:cd:75:49:
                    c1:98:88:f0:c2:84:61:46:cd:94:ab:79:dc:86:92:
                    47:1e:d7:06:36:c0:97:62:42:43:13:d5:6c:db:66:
                    20:86:c7:78:7d:72:47:e2:23:b0:13:41:ce:0f:56:
                    9e:c6:9c:40:fc:f2:5d:87:26:82:5b:53:6b:9e:68:
                    9f:5d:f8:94:d5:da:8b:5d:7b:17:fa:ff:5d:71:c0:
                    b9:30:3d:8a:1e:b0:37:36:bb:95:cf:b3:ff:d6:07:
                    62:de:18:e2:4f:62:ca:f6:a7:54:21:94:0d:c4:df:
                    1c:33:8b:b9:f7:98:0d:0f:09:11:0c:2c:a8:74:8e:
                    d4:2e:f1:51:ba:4a:07:72:4e:4a:82:b0:b5:1a:26:
                    8a:55:be:80:8e:00:ee:60:da:fb:73:ed:8e:54:39:
                    55:bd:f0:45:be:aa:74:c7:c7:af:d6:76:31:08:5b:
                    39:54:e6:8f:3b:2a:97:dd:ba:70:02:76:c0:93:2d:
                    03:72:ca:8f:fb:3a:b6:e5:41:e6:91:e2:cd:1e:b7:
                    30:6b:ba:a1:ca:9a:7c:db:ab:b2:26:7b:f1:29:de:
                    28:17:d1:f5:13:c4:26:42:0d:3c:c8:f0:97:67:df:
                    d5:40:e1:98:ad:e4:1b:d7:06:01:d6:0f:33:9d:99:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:38:0D:E6:8C:9E:AB:A1:CB:8C:33:4E:0C:31:26:F3:D6:CE:6E:F0
            X509v3 Authority Key Identifier:
                keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4e:80:e7:13:9d:c5:18:61:52:a3:1f:df:c0:62:76:51:c9:
         b0:c6:ce:7f:9f:e6:14:b0:f7:ff:68:02:a0:21:6c:ed:85:1e:
         3c:07:26:b4:06:11:a0:35:ba:88:43:f2:b2:53:ea:e6:2a:49:
         9c:10:83:43:c0:ad:da:93:4d:fa:5e:07:ef:bc:d3:53:39:9e:
         00:35:78:fa:a6:9a:cd:e0:8d:92:fa:7a:44:d6:cf:cc:53:0d:
         07:19:00:27:4f:f5:f2:50:91:af:03:7a:64:fd:96:25:d0:10:
         14:d5:99:cd:67:09:18:d4:58:1b:bc:07:fa:3f:4e:ea:23:21:
         19:0d:81:60:1d:6f:9e:ec:38:6c:f6:64:58:38:c6:c2:d4:3b:
         e7:b7:2a:39:28:30:02:19:9c:a1:25:32:ab:b0:99:0a:b7:8d:
         cf:c7:b0:80:ea:2f:52:ea:c4:a7:9b:9a:49:07:ef:53:e8:0f:
         2e:ef:a8:de:ed:41:8c:ab:a0:b7:b3:69:c2:7d:e7:4b:a4:96:
         b0:e9:42:ee:93:27:28:14:a9:be:50:e1:8b:66:29:04:a5:5c:
         f5:52:90:3f:1a:30:fa:3e:fe:ab:bf:d9:33:c3:19:93:f9:6a:
         87:47:a5:64:95:90:02:42:5a:e2:cf:74:6f:5a:c9:37:1a:b4:
         bd:40:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:28:31 2026 by rpki-client