Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File:                     X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier:          ellZv6zogXnnKIkYBdUsQBE5PLQpjVITUn1TPwoT2UU=
Subject key identifier:   7D:34:AB:D2:A8:33:0F:99:EB:61:0D:86:15:47:E1:3A:D7:D1:FB:EB
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer:       /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial:       01A10F5F06B3C14005D3FC6FA26F8FA5C71B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number:          162C
Signing time:             Tue 06 Oct 2026 04:00:48 +0000
Manifest this update:     Tue 06 Oct 2026 04:00:48 +0000
Manifest next update:     Wed 07 Oct 2026 04:00:48 +0000
Files and hashes:         1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
                          2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: sa60XNSDa4pFOa32WCjy98L2rTaAltZcQPHAechc82E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:5f:06:b3:c1:40:05:d3:fc:6f:a2:6f:8f:a5:c7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
        Validity
            Not Before: Oct  6 04:00:48 2026 GMT
            Not After : Oct  7 04:00:48 2026 GMT
        Subject: CN=7d34abd2a8330f99eb610d861547e13ad7d1fbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:c5:37:c0:56:e1:18:58:85:10:ec:39:db:
                    43:6c:6c:e7:d2:ff:50:e8:b3:2a:58:13:7f:88:f4:
                    94:c8:34:b7:21:a1:5b:10:23:8a:01:5a:12:7b:9f:
                    25:fe:40:4a:c3:21:8a:93:f7:87:2a:97:8c:51:dc:
                    09:02:5a:da:57:cf:71:16:9a:52:d1:a0:b1:42:70:
                    19:13:39:18:3f:d9:27:ec:18:c4:a9:7e:8a:9f:12:
                    91:ff:8e:8c:ec:6e:a0:7d:e1:16:95:cd:cc:0b:be:
                    a6:e9:f8:43:67:79:fd:7d:c6:e9:d3:37:2c:33:1d:
                    b0:5d:c0:c4:17:e3:d9:60:91:1a:32:a4:f6:29:cd:
                    52:0a:2e:4d:7c:61:fd:69:2e:08:75:54:5e:0d:46:
                    b1:14:5f:4d:3c:ed:99:8b:96:24:e0:f1:90:79:3a:
                    fb:6e:ad:0a:d7:6b:14:c2:73:6f:74:9b:2e:92:f2:
                    be:7c:bd:1a:1d:dd:e6:44:75:c0:19:2b:75:b6:0f:
                    3c:2f:cf:93:1d:d1:bf:41:fb:aa:2b:ee:f6:82:8c:
                    a7:c8:3e:4c:f5:ae:7a:3f:ca:8e:0c:9c:43:81:0f:
                    b2:a7:af:ac:0b:ba:92:49:eb:6e:60:20:1c:31:fd:
                    24:80:40:d5:43:f7:5b:15:c9:c3:7e:d8:3a:9a:e9:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:34:AB:D2:A8:33:0F:99:EB:61:0D:86:15:47:E1:3A:D7:D1:FB:EB
            X509v3 Authority Key Identifier:
                keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:29:80:c3:f3:eb:bc:3e:b6:26:4f:23:56:15:c5:9e:c5:
         b1:7b:ea:74:e3:63:03:83:bf:1b:14:8d:1f:ab:ff:12:b1:16:
         37:66:bf:ae:cd:d8:e0:9c:af:19:7c:7b:3d:d3:f9:cf:fa:f7:
         5d:dd:e2:9a:26:5e:8c:99:ed:63:e6:a4:18:7a:2e:24:bc:c7:
         1c:eb:9a:8b:ea:30:e3:6b:c7:49:ad:f9:c0:a7:a4:fd:9b:91:
         58:9c:64:25:03:2c:b0:e1:c2:9e:fb:47:e9:77:e3:84:e5:29:
         92:63:5d:7e:35:55:e6:83:b5:83:78:0a:28:44:26:1b:85:18:
         7c:cd:be:66:b4:3e:c8:82:08:f9:47:b4:88:53:0c:72:2d:02:
         33:27:76:4f:50:ca:82:9e:32:57:c3:5e:fb:e9:cf:d4:67:12:
         f8:f2:21:50:30:09:dc:4f:c8:49:2d:9d:a2:cc:d1:a7:6a:d0:
         16:0d:f8:66:18:9a:24:2d:45:ed:4e:41:c5:08:2e:ca:2f:a6:
         d5:65:55:15:16:78:de:8a:82:66:6f:c1:43:d2:eb:3a:3a:cf:
         b3:17:fb:08:9f:ff:3c:ce:b9:a7:fb:6a:cd:49:c1:cf:41:c4:
         e5:28:98:f7:fd:e7:94:63:8e:5c:18:03:cf:17:48:cf:d9:a3:
         a4:d0:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:26:47 2026 by rpki-client