Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
File:                     xEBsnAYTL85A7cBG4GmuNFK6aOM.mft (raw, json)
Hash identifier:          JzLLwDOmzcqV0qNAFWGw4VY4EGfD6NJiR0z3wEUROzo=
Subject key identifier:   56:EC:95:73:F6:30:1C:EF:50:FC:F5:96:E6:47:82:FA:85:A1:9E:C7
Authority key identifier: C4:40:6C:9C:06:13:2F:CE:40:ED:C0:46:E0:69:AE:34:52:BA:68:E3
Certificate issuer:       /CN=c4406c9c06132fce40edc046e069ae3452ba68e3
Certificate serial:       01A0E0CF4F6D71A025A7C90C37442A77A40C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
Manifest number:          0237
Signing time:             Sun 27 Sep 2026 03:01:17 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:17 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:17 +0000
Files and hashes:         1: b_C6-vRVgU9-ZGu5iPetXhBiGd0.roa (hash: 2gUqRWsgOMEHr5aKvlRadKgrnBBP2u9PjUCeJ2rack0=)
                          2: xEBsnAYTL85A7cBG4GmuNFK6aOM.crl (hash: QgyZFGspn2eat33nML8v6hA733pA/dr65BDidVgS5ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:4f:6d:71:a0:25:a7:c9:0c:37:44:2a:77:a4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4406c9c06132fce40edc046e069ae3452ba68e3
        Validity
            Not Before: Sep 27 03:01:17 2026 GMT
            Not After : Sep 28 03:01:17 2026 GMT
        Subject: CN=56ec9573f6301cef50fcf596e64782fa85a19ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:1e:c6:a8:15:06:3d:db:fd:aa:62:24:de:
                    81:14:39:47:81:85:e5:c6:38:e5:8b:5b:18:95:3d:
                    3f:29:a3:23:f5:44:15:8f:3b:cb:96:d5:0f:06:06:
                    64:59:83:40:ad:02:7f:a3:9f:c0:91:0c:45:d4:0b:
                    92:3d:5e:0b:4f:42:05:01:e0:ad:00:22:bc:f0:f4:
                    08:4c:23:58:c2:d6:61:30:c2:dc:1a:27:1e:58:2d:
                    d5:a0:69:d3:0d:0f:a0:4e:5d:b7:50:f6:1a:84:c7:
                    8d:a5:59:02:9a:18:91:57:6c:7f:ec:f5:1c:1e:03:
                    e6:33:73:71:36:b7:8e:20:75:3f:bb:52:70:7e:c0:
                    d7:7e:e7:3a:77:32:ce:d9:9d:85:de:ed:82:59:4b:
                    d6:e7:a7:47:c1:62:6d:70:b7:56:13:34:92:67:24:
                    d2:09:9d:b3:6a:c8:56:20:17:dd:00:55:ec:39:17:
                    b6:b6:b3:7b:56:87:68:2c:c2:79:05:a0:52:50:57:
                    7b:cb:25:42:a7:fe:37:81:e9:80:ca:2e:c5:fe:f4:
                    e0:f6:f3:ef:56:ff:6a:42:58:98:6b:28:ec:82:db:
                    7e:e0:c0:ab:39:1c:59:31:d2:5b:0e:f6:fa:2b:20:
                    55:42:5d:60:c7:d1:7a:29:d4:bd:cf:86:4a:0e:a0:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EC:95:73:F6:30:1C:EF:50:FC:F5:96:E6:47:82:FA:85:A1:9E:C7
            X509v3 Authority Key Identifier:
                keyid:C4:40:6C:9C:06:13:2F:CE:40:ED:C0:46:E0:69:AE:34:52:BA:68:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:16:91:f4:16:df:98:8c:01:17:af:21:79:0f:f2:7b:b9:2b:
         c5:3f:2c:49:e9:e5:19:95:fd:09:c1:49:b3:e3:b4:40:20:9e:
         86:79:ad:9c:7a:c4:73:4e:5b:80:58:a9:6a:8a:c5:bb:da:b9:
         24:ad:e0:98:fb:cc:d7:96:e9:a7:6b:4a:cd:f2:15:77:47:4d:
         cb:79:6d:16:d6:9c:fe:85:60:d2:25:47:f4:b4:2e:37:95:57:
         ce:f8:c2:e9:2c:b4:ef:a9:05:8b:ab:05:9b:a8:00:75:a6:57:
         31:4a:5b:7f:f4:4b:d6:55:99:e0:52:30:93:74:55:e5:86:85:
         b8:e5:cc:7c:1a:fb:0a:a7:b5:fd:62:8d:e0:8b:c4:75:2f:bf:
         9d:9a:b1:4f:5d:12:3d:e6:9f:06:e6:4b:01:6b:fd:58:19:58:
         a6:d1:5d:db:be:a8:66:a6:91:e3:ba:6e:ef:33:f9:b4:e1:bd:
         a8:08:f8:05:88:6c:f4:5b:9c:d4:a4:77:08:c5:d4:2c:e4:bf:
         a4:f1:6d:ed:95:5c:0e:9e:5a:1e:e4:58:23:40:48:b1:e5:56:
         0a:c5:0e:b7:c5:33:0f:b1:8a:39:36:db:53:7a:23:4f:31:5a:
         9a:84:32:f8:87:b5:78:9b:ed:1b:20:90:a2:ab:3e:99:58:03:
         01:63:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:11 2026 by rpki-client