Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File:                     xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier:          mmk87NGlu22MDqRgadN29c2GNiEJKIfIr5qKgH7PM1M=
Subject key identifier:   A6:D3:F3:96:EC:91:BB:EA:2A:D4:EA:0D:87:A6:6B:BE:A8:00:89:76
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer:       /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial:       01A0DD9723AECD94956DF801EEC9486409BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number:          0ED6
Signing time:             Sat 26 Sep 2026 12:01:04 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:04 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:04 +0000
Files and hashes:         1: fzBvwE7sX01y4kB6SSgdE7n9ysI.roa (hash: qCcHE+EY0A9msSwDHW5P3s9hKxDDBKeiCJ6eljce7Pg=)
                          2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: k3x4LVYfzZVfGNJ9CZQurWZ2XhAoctrmtl51fTcsa9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:23:ae:cd:94:95:6d:f8:01:ee:c9:48:64:09:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
        Validity
            Not Before: Sep 26 12:01:04 2026 GMT
            Not After : Sep 27 12:01:04 2026 GMT
        Subject: CN=a6d3f396ec91bbea2ad4ea0d87a66bbea8008976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:36:04:8f:fa:f4:f4:79:1d:34:0b:f3:96:
                    96:e3:8f:47:ee:57:11:a1:72:51:8a:f4:8d:ff:03:
                    b1:4a:49:9a:28:a7:46:b0:32:4d:d4:c4:0e:88:8b:
                    e0:f1:c2:0a:be:60:5d:5e:1c:59:78:f7:3d:a6:f1:
                    d3:eb:ef:7a:fd:78:0b:3b:ea:9d:78:39:a0:ba:b4:
                    ea:da:6e:d5:ab:7b:3d:b7:02:27:04:dc:26:b3:eb:
                    81:00:73:7d:2f:40:95:07:f8:4d:b7:02:25:45:94:
                    af:f3:70:88:c2:56:4e:00:d0:7c:b4:5c:79:94:b9:
                    16:b3:dd:f7:e6:6b:fb:6c:33:5b:23:ed:f4:02:67:
                    32:d7:c2:04:da:de:27:2a:f3:ad:e9:45:0b:ea:a3:
                    91:bd:19:1d:55:c0:76:65:78:a6:eb:84:9d:47:7a:
                    24:c6:60:6e:d2:bc:22:21:ad:f3:b6:ba:69:f3:1c:
                    8d:e3:3f:21:93:89:bd:dd:ec:ff:f1:f3:c3:73:34:
                    a1:cc:44:04:bc:61:db:fe:5f:5b:98:e5:bc:48:d6:
                    42:a4:5d:47:7d:19:55:0d:4d:a8:34:2d:e4:d4:bb:
                    38:79:51:35:0d:e5:8d:f5:ad:5f:fd:fa:36:99:4d:
                    fd:d4:fc:ca:4c:7e:66:d9:1b:00:79:3b:3a:15:61:
                    92:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D3:F3:96:EC:91:BB:EA:2A:D4:EA:0D:87:A6:6B:BE:A8:00:89:76
            X509v3 Authority Key Identifier:
                keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:53:2a:b1:f7:46:7e:74:12:c4:6d:ee:0c:89:78:a6:86:
         c4:8b:d2:fe:33:32:60:17:f1:b9:78:a7:28:a1:3d:f5:7c:79:
         dd:b1:21:19:55:09:0b:95:8b:2a:c4:c4:10:ad:a5:39:80:83:
         02:42:d7:c8:c0:0b:6d:9b:25:2e:87:dc:1d:86:3a:5e:c6:d3:
         a6:e4:21:f3:5c:ad:19:66:89:70:b8:7f:56:d4:c4:73:f5:cf:
         32:4b:e0:3d:cc:71:61:b9:8a:7b:6e:f1:70:e6:c4:ea:5f:b9:
         c7:a7:db:73:4d:5b:0a:95:ed:b9:97:b4:96:7b:0b:13:0c:2a:
         54:ec:0c:d4:ca:ec:f7:de:c2:b8:98:cd:d1:6c:c3:86:fc:49:
         3c:9d:c9:59:8b:a4:43:54:4f:a2:eb:33:2d:1c:bf:2a:61:0c:
         0a:29:c2:41:79:f8:c0:25:c0:8d:ec:cf:73:60:54:c8:31:ce:
         19:68:66:8e:4b:a9:94:f8:11:21:62:ff:ed:7b:fb:29:67:f8:
         9f:60:38:eb:56:8f:b6:96:b9:02:1f:40:01:bc:f8:ef:1d:92:
         41:b4:cf:88:56:92:16:5f:3e:f5:25:5c:10:69:d1:1d:0d:e8:
         10:ea:6a:76:dd:b1:68:03:02:9b:e3:18:18:07:56:a6:70:75:
         2d:ce:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:37:28 2026 by rpki-client