Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File:                     X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier:          TdhL1sgtcUARhcT/DjZN595+ZmUhw/EOzisNorU5Tm0=
Subject key identifier:   D0:28:4A:27:1E:A8:34:E9:95:C9:60:E2:A3:61:A9:D3:66:62:DF:AC
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer:       /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial:       01A0EC66519D13FE35E80D7943304F54D2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number:          0C9D
Signing time:             Tue 29 Sep 2026 09:02:03 +0000
Manifest this update:     Tue 29 Sep 2026 09:02:03 +0000
Manifest next update:     Wed 30 Sep 2026 09:02:03 +0000
Files and hashes:         1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
                          2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: 7zyFr8IkkNQWMjtQZBG17LHQ/LlVE0jeD0TsNTSCvIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:66:51:9d:13:fe:35:e8:0d:79:43:30:4f:54:d2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
        Validity
            Not Before: Sep 29 09:02:03 2026 GMT
            Not After : Sep 30 09:02:03 2026 GMT
        Subject: CN=d0284a271ea834e995c960e2a361a9d36662dfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:58:a6:7f:a5:a6:fe:d8:47:ea:68:85:7b:
                    3b:b7:9b:26:6c:ee:03:d7:9b:38:d8:08:9b:8b:0c:
                    02:e3:23:17:14:43:08:5f:16:03:2a:0c:ee:4b:30:
                    50:77:c3:5f:af:f6:f0:4b:97:ca:31:7e:27:d6:7d:
                    e4:30:30:34:e7:c9:3e:89:11:ee:67:09:d0:c0:2a:
                    64:d3:c7:1c:9e:cb:bc:63:e9:c4:4e:af:39:5b:ae:
                    6c:63:88:0a:13:1e:27:99:f3:6e:ec:ff:cf:3d:c4:
                    5b:f9:9f:6f:1a:13:98:cf:08:c2:ae:33:1d:e9:23:
                    c1:a4:9e:20:05:f5:c0:39:6a:ef:36:d7:38:2e:15:
                    e4:27:d8:b2:07:cc:fd:03:9a:6f:b5:12:33:f7:38:
                    98:0f:11:71:fe:b0:ff:a1:2d:a3:16:94:39:70:ea:
                    37:7c:7a:1d:3b:34:d3:07:0d:f1:4e:98:64:43:4f:
                    72:55:49:07:76:2d:46:59:cc:45:ae:f8:32:03:87:
                    7c:a5:4c:f9:42:03:86:30:1f:91:b9:d4:65:98:54:
                    e5:1b:ff:b0:c0:aa:e3:d3:81:51:f6:43:78:a0:3d:
                    30:91:22:88:56:38:60:3d:a9:c1:83:b7:46:17:08:
                    67:4c:4a:a3:e8:38:c3:f9:86:04:63:cf:08:11:53:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:28:4A:27:1E:A8:34:E9:95:C9:60:E2:A3:61:A9:D3:66:62:DF:AC
            X509v3 Authority Key Identifier:
                keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:90:2c:c6:60:55:19:72:4c:46:12:32:1e:d0:d7:1f:3a:04:
         6b:92:95:13:10:8d:5f:09:53:1b:5f:6a:bd:7e:00:b1:bf:d4:
         a5:36:23:3a:62:3a:06:ba:ee:41:3e:ec:f7:c8:a7:7a:93:e9:
         d9:16:2b:25:57:8d:f0:cf:be:1c:83:ea:28:50:69:31:c8:d3:
         f2:47:e1:ee:10:4a:dd:3f:3a:e0:76:24:8c:bf:ad:52:09:ed:
         1c:4c:ee:49:27:26:c9:b8:d5:07:a3:50:3c:bd:cc:38:cf:a4:
         8c:dd:4e:88:8a:2a:54:3f:ef:35:66:ef:06:9b:5a:e7:d9:77:
         a5:2f:08:07:86:1b:8a:9a:aa:af:28:4d:e6:b7:b5:e2:4c:d2:
         07:b6:e1:76:eb:aa:ef:4c:78:23:2f:75:92:80:e5:c6:21:e0:
         77:64:50:10:3a:26:ac:96:a3:11:ac:b0:01:50:73:d0:86:41:
         bf:e8:88:b7:f0:14:c7:62:8c:4a:43:bc:08:5e:10:0f:e5:7c:
         ff:5d:82:58:bf:aa:83:31:ea:85:c1:73:2a:12:09:92:02:90:
         0c:3d:21:ed:06:45:15:e1:82:a9:27:45:58:76:f9:81:b2:ed:
         ad:bb:74:6a:ea:eb:9a:de:5a:2b:15:2d:01:63:4c:f7:0c:b9:
         a8:1e:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:44:38 2026 by rpki-client