Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File:                     xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier:          q9wuC5AAylqOqayo+P1SOFVP0ymJA5YtLaFKQ796M7I=
Subject key identifier:   33:83:A1:F1:0F:33:06:C5:BE:2B:5F:09:A2:56:1F:3F:9E:11:00:FF
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer:       /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial:       01A1005A968B589D0B1FB09E12B0318FD175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number:          06DF
Signing time:             Sat 03 Oct 2026 06:01:39 +0000
Manifest this update:     Sat 03 Oct 2026 06:01:39 +0000
Manifest next update:     Sun 04 Oct 2026 06:01:39 +0000
Files and hashes:         1: pb-lBwDqlSmnNVzT0O2a9dM1v3c.roa (hash: PcMUmv8WKPh2OK3L7FgHiU6l2RZvrYC/Zg6sCOjcgac=)
                          2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: OuZKUjDs+UnxLhN5+0WSzjPqs88xbcUH1jKgcEMM4Gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:5a:96:8b:58:9d:0b:1f:b0:9e:12:b0:31:8f:d1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
        Validity
            Not Before: Oct  3 06:01:39 2026 GMT
            Not After : Oct  4 06:01:39 2026 GMT
        Subject: CN=3383a1f10f3306c5be2b5f09a2561f3f9e1100ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:16:82:21:70:67:36:b0:6a:6b:1a:c8:b4:
                    07:9d:0b:53:0e:97:4b:30:fb:20:b7:74:e9:36:5f:
                    2e:4b:71:d1:ce:2d:9b:1e:5e:14:a8:f6:9e:0a:6e:
                    c1:c4:1d:96:bc:38:21:c9:e6:71:82:59:c9:38:69:
                    be:bb:1f:2f:e5:22:c7:21:4e:2f:d2:87:68:bf:da:
                    8a:86:f9:f4:d3:c1:42:6d:4f:ef:37:30:c2:08:ae:
                    ee:46:07:df:9f:3a:8a:29:cb:7c:6b:43:9c:e6:0e:
                    92:f8:ad:aa:4d:8c:fa:41:e1:9d:7c:c5:e1:a5:3c:
                    a3:2d:a6:5f:14:93:da:45:bf:92:36:8f:7a:d2:10:
                    84:b0:f2:d8:97:9f:b2:8e:87:1b:05:c2:52:81:af:
                    f1:07:1c:ea:fb:93:ca:e6:6c:9e:47:bc:56:fd:96:
                    16:b7:24:ad:04:14:2f:93:88:11:26:d2:13:ca:7d:
                    9c:e9:e5:12:7c:38:f1:12:d3:c8:5e:6c:00:a0:92:
                    f6:35:04:23:d8:f3:26:b6:5c:a4:ca:77:5c:69:88:
                    f9:20:76:fc:ac:95:c1:0c:14:b7:55:59:48:72:eb:
                    57:a7:9c:ed:a7:b0:bc:29:d8:78:5c:e5:e3:77:77:
                    6f:c0:a1:d9:c4:37:ea:08:a6:f3:c3:b4:4c:b4:7f:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:83:A1:F1:0F:33:06:C5:BE:2B:5F:09:A2:56:1F:3F:9E:11:00:FF
            X509v3 Authority Key Identifier:
                keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8c:64:1f:34:a2:3a:69:b5:28:43:4c:29:dc:48:ca:17:45:
         df:4f:20:9e:c8:84:35:cd:1e:35:ce:33:08:d2:e5:a4:ea:b2:
         cc:dc:2c:1e:e1:61:0e:6f:1a:19:82:b8:58:ce:6c:d6:58:1c:
         4d:f8:ee:ec:5a:b2:db:a7:d0:ca:82:7b:9f:25:c1:13:19:4e:
         17:3c:fd:dc:e3:b0:d5:96:f3:86:e9:26:0a:fd:15:8a:dd:a9:
         db:a4:d2:e0:36:e3:52:d9:05:72:d3:32:6a:5e:29:26:be:22:
         6a:e3:6c:44:48:97:b3:21:fa:11:b6:43:4f:5b:86:0d:0a:b8:
         26:c0:55:6a:34:10:2f:d7:d7:db:40:b8:68:5a:4f:80:41:47:
         c6:fd:5e:20:6f:42:dd:8f:ba:8f:d5:b5:d4:68:d0:a6:61:79:
         d1:b9:95:6f:83:ef:56:f2:f8:9d:16:71:46:d5:49:af:2c:50:
         b3:f2:e6:92:4c:a2:5c:63:6f:83:02:12:ca:d1:f6:a4:5f:2e:
         cc:8b:ef:36:43:7f:5f:7f:37:f7:b1:7b:17:2b:2f:c2:02:ca:
         2e:90:32:75:09:13:30:05:aa:51:1e:6f:ba:16:f2:02:74:18:
         b6:5a:ff:9d:0b:1d:81:2c:7d:fb:40:88:2a:d0:6c:00:bd:94:
         74:19:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:44:38 2026 by rpki-client