Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File:                     XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier:          28pqP5hGZWZbsiVAL4YVbaRtFg1VYCadfOcHEMsQ2lA=
Subject key identifier:   7F:E3:24:D0:BB:34:8B:FB:35:69:14:5C:7A:A5:BE:F9:01:64:65:9D
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer:       /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial:       01A14A61A91722A8F36F83B36419317BE25F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number:          0E93
Signing time:             Sat 17 Oct 2026 15:01:16 +0000
Manifest this update:     Sat 17 Oct 2026 15:01:16 +0000
Manifest next update:     Sun 18 Oct 2026 15:01:16 +0000
Files and hashes:         1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: P9rnxb173uZJfBm/OjXLmUO71pJoOQmripUcGiUGai8=)
                          2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:61:a9:17:22:a8:f3:6f:83:b3:64:19:31:7b:e2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
        Validity
            Not Before: Oct 17 15:01:16 2026 GMT
            Not After : Oct 18 15:01:16 2026 GMT
        Subject: CN=7fe324d0bb348bfb3569145c7aa5bef90164659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:28:3f:2d:1b:79:23:49:85:91:26:11:78:
                    30:c3:1e:20:e7:ee:cc:86:b2:48:5f:b3:d8:84:eb:
                    f1:8e:55:64:2d:80:df:53:fa:a8:7c:a7:d3:72:52:
                    38:a4:24:bd:29:08:b6:c2:0e:b4:7d:1b:1e:c4:4e:
                    bb:ff:43:14:f3:0d:e2:36:5a:1e:67:13:d9:3e:8d:
                    70:17:05:5b:a1:11:8a:d8:39:98:6e:f7:72:a4:28:
                    72:85:cf:ce:17:61:d6:0f:f0:d7:2d:28:04:da:d2:
                    ea:df:dd:ba:e5:55:af:0a:1d:d1:bf:e0:dc:c8:18:
                    b0:34:84:3e:76:64:82:8a:8d:cf:31:88:fd:a9:71:
                    af:d7:d4:32:46:9e:fa:2c:76:90:6d:86:f4:31:c3:
                    7a:03:ad:b4:4e:ab:7b:12:04:f8:50:2a:0c:4f:48:
                    7b:90:20:f5:4a:a9:2f:ac:78:dd:f5:09:cd:82:e7:
                    1e:d2:72:de:4b:35:0b:6b:ec:54:bb:65:8c:4b:8c:
                    8b:a0:60:37:3f:76:ac:f7:6f:e4:c0:ed:6f:21:7e:
                    30:4b:2d:2b:ee:57:dd:10:d9:38:1e:01:03:20:70:
                    48:61:62:d1:b5:70:4a:b8:94:97:ce:36:c4:32:42:
                    a0:f3:3b:43:d8:00:f0:f4:51:90:6b:99:9d:7d:2b:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E3:24:D0:BB:34:8B:FB:35:69:14:5C:7A:A5:BE:F9:01:64:65:9D
            X509v3 Authority Key Identifier:
                keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d5:48:47:4b:9a:3c:a3:92:d1:28:5d:ec:8a:e2:83:ab:58:
         eb:ef:47:51:e5:30:4f:86:2d:eb:38:ff:69:c5:08:0e:9f:20:
         b7:91:13:c9:1f:ca:32:c5:0b:59:fd:60:10:ec:b6:b1:2a:38:
         96:1b:98:69:42:fc:35:4f:da:45:1e:cf:bd:4a:8c:07:7f:65:
         d9:f8:0e:6d:98:cb:7f:75:b9:36:76:6d:27:15:e4:39:48:55:
         6d:0a:24:c2:3d:02:12:b8:50:ce:e8:33:93:4a:a2:67:b1:f4:
         b8:5f:b5:34:dc:36:af:06:25:5f:a6:f2:72:08:30:43:0e:16:
         e1:f4:58:22:98:20:c5:86:70:a6:6e:53:2e:f7:b9:13:1f:84:
         46:c3:38:5e:f1:77:b7:f5:aa:6e:27:59:5d:c2:bd:85:9d:83:
         86:df:70:52:55:07:89:21:6d:f9:a5:eb:e1:31:53:f2:d8:af:
         ad:2c:89:6c:26:8c:67:bb:68:03:81:ca:dc:87:97:42:de:45:
         cd:e0:f5:26:1e:d9:d9:89:d2:d7:aa:81:12:98:ed:a7:84:1b:
         ab:3d:2b:2b:69:2e:9b:dc:07:eb:5a:2b:c9:53:ff:92:09:62:
         83:44:6a:00:b1:93:b8:da:9d:68:c7:85:4e:ed:f0:21:11:a1:
         ef:1c:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 00:44:51 2026 by rpki-client