Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File:                     xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier:          7/tNw3nhtCj1kzwKgb1kMKuDouXBMdrSDb2KYdqIyXQ=
Subject key identifier:   C5:F5:5A:AA:CA:2A:AF:9B:B9:D5:2A:0A:B5:75:F1:D9:B2:ED:CF:D4
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer:       /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial:       01A0F3435F74D87DC1C6AC9D335B929C2BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number:          1A82
Signing time:             Wed 30 Sep 2026 17:01:13 +0000
Manifest this update:     Wed 30 Sep 2026 17:01:13 +0000
Manifest next update:     Thu 01 Oct 2026 17:01:13 +0000
Files and hashes:         1: 3cbC9vEeA_OfonVqz4nPVMIodpI.roa (hash: IGj7kwjiWovmIKkao+Fqphubf76yFz/hI4+0oTX7zU8=)
                          2: HRkMr8-Sqbu9H440GtqWqBMvrRY.roa (hash: u8W2AOx3ZvteH41TI9EbqMt/z7mq+kc+OzabEJ0zUCM=)
                          3: wemV0d9_X9NASzk5HBev3Xd67ss.roa (hash: xfH5MjrkqijIT96yucgZV5bkcjqDyV5OtrwCabRA68Q=)
                          4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: MVy5fIsnF+M8iXyOJ7M1JNrrkK2CBfizns19g9rVteA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 16:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f3:43:5f:74:d8:7d:c1:c6:ac:9d:33:5b:92:9c:2b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
        Validity
            Not Before: Sep 30 17:01:13 2026 GMT
            Not After : Oct  1 17:01:13 2026 GMT
        Subject: CN=c5f55aaaca2aaf9bb9d52a0ab575f1d9b2edcfd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:39:12:a2:0a:a2:5a:9e:ca:3a:e1:d9:08:
                    d7:a3:f5:f8:b5:4a:ac:2d:61:1f:b6:66:9d:9a:29:
                    b6:ba:c3:71:21:6f:5a:46:22:ae:c7:0e:a2:ac:22:
                    12:27:24:6a:4d:e8:ee:b2:ae:48:cc:57:b3:55:d3:
                    f7:a9:a2:fa:88:a9:96:f1:6c:89:62:0d:c0:1b:44:
                    a1:a9:5c:eb:b1:47:e8:c9:15:51:07:6a:db:37:65:
                    ed:6d:57:c2:8a:55:20:31:11:28:91:1f:fd:ee:dc:
                    27:10:87:cc:4a:ad:a2:aa:65:2b:14:c4:80:b1:cc:
                    0c:9a:78:82:34:28:ca:4c:9a:c8:5d:64:e6:66:10:
                    03:0b:44:5b:11:b9:95:aa:a8:8a:15:dd:f6:7f:50:
                    fc:04:48:60:61:26:8c:b3:eb:b1:75:c6:e9:55:be:
                    9f:70:6d:d7:be:a6:3e:1e:08:b2:5f:5a:ac:14:59:
                    70:fb:bc:69:3a:62:24:62:3f:da:b0:cb:04:8e:6b:
                    4d:dc:25:8e:1b:8a:4b:1e:dc:7d:8c:8e:80:08:5e:
                    17:65:9e:5b:ad:1e:8a:4d:a1:c7:5f:6f:72:41:66:
                    77:15:dd:71:ec:ad:18:cf:0a:75:50:b0:f7:fc:00:
                    60:ce:b2:82:14:9f:78:ee:90:70:57:8e:bd:c4:fa:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F5:5A:AA:CA:2A:AF:9B:B9:D5:2A:0A:B5:75:F1:D9:B2:ED:CF:D4
            X509v3 Authority Key Identifier:
                keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:14:72:45:a1:27:6d:ec:ad:a9:3a:33:86:36:f4:ff:1f:
         be:7a:83:d7:bd:fd:fc:3f:1a:93:e2:0f:03:1a:e9:67:4a:37:
         e0:44:b4:23:5d:60:71:0c:c1:81:7d:41:97:a7:ee:a0:44:70:
         2a:27:0f:d3:c8:19:97:30:a4:f4:b5:fd:fe:15:f2:50:7a:2c:
         2b:52:ab:ac:58:f2:43:04:c4:61:2e:bd:04:2f:de:ed:f0:56:
         ac:a3:0c:bc:fb:a9:b5:fe:7f:28:d8:c6:bc:8f:d4:c9:ea:3f:
         8e:f5:17:be:06:ad:9f:12:96:9b:47:0a:a1:f4:17:ca:53:33:
         67:9e:e5:49:98:e3:da:6a:38:81:98:8a:50:38:ad:41:e8:62:
         6f:2d:99:98:fd:49:a5:3e:10:09:69:69:2c:64:c3:ae:83:69:
         f7:73:c0:25:79:4e:2b:bb:ae:ab:ca:c6:76:58:76:8d:ca:97:
         d7:bd:a9:46:bb:82:f3:8b:08:5a:c3:73:46:9c:58:fa:4c:f6:
         70:86:86:b7:ed:77:e6:8f:05:b8:42:25:8a:16:d5:be:9a:4e:
         ed:46:cc:40:ba:85:45:ea:44:0e:8d:a8:a1:b6:fa:2c:cc:6b:
         ef:cb:c5:b1:15:ef:dc:08:54:e3:1f:ea:91:07:e8:d9:29:c7:
         4b:a1:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:42:13 2026 by rpki-client