Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
File:                     ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json)
Hash identifier:          vd7nPlAmSVJ50yRRMa9M/SifVB+qgusJYtBIdXDYXXE=
Subject key identifier:   CD:09:B4:1C:37:DF:71:70:75:D5:5E:2F:06:52:46:BD:31:B7:55:5E
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Certificate issuer:       /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial:       01A0CF6D89FD13053A5500495A60FFC03C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
Manifest number:          152D
Signing time:             Wed 23 Sep 2026 18:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:57 +0000
Files and hashes:         1: OsQF4LR-higoyelo-ttowfnvNqw.asa (hash: BTfdP72xThz8M5YvTEhjQREOJTMFxM6tranMNVmN+N8=)
                          2: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: 7fuinA94/1a4taoGbXLM6wFduQF6vSJD5h7zqcHOSlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:89:fd:13:05:3a:55:00:49:5a:60:ff:c0:3c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
        Validity
            Not Before: Sep 23 18:00:57 2026 GMT
            Not After : Sep 24 18:00:57 2026 GMT
        Subject: CN=cd09b41c37df717075d55e2f065246bd31b7555e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:21:6f:0d:ec:c5:cb:ce:20:8f:52:aa:59:
                    16:23:d8:06:7c:a0:0a:ea:a0:48:bc:a5:85:41:80:
                    f6:ba:2a:43:44:28:6f:aa:ab:98:d9:96:7a:11:08:
                    1b:09:44:bd:bb:ea:59:cf:ad:22:74:6b:17:29:1d:
                    14:a7:7d:94:43:2b:5c:2c:ce:04:e7:6b:65:e3:67:
                    de:a6:1f:20:0f:09:97:bd:03:96:05:1e:4b:7c:a6:
                    0c:04:a6:2b:51:1f:fd:6e:86:19:b2:13:07:ee:58:
                    cd:83:53:7d:90:c9:93:21:12:30:a7:ba:a2:e7:c7:
                    36:7d:a7:f5:00:04:a8:30:01:f7:64:5b:3e:58:7c:
                    22:84:f7:78:dd:0b:58:58:30:12:5f:05:2a:a5:8d:
                    d5:e6:24:12:30:9f:28:16:63:86:66:41:a9:80:14:
                    ae:d2:e1:1e:6a:ce:73:48:15:9e:49:ba:6b:de:70:
                    df:ca:6b:c0:61:fc:ce:fd:7e:50:2c:2e:3f:44:af:
                    e7:fd:de:06:02:8d:45:f1:1c:c0:f5:8c:11:3e:55:
                    89:2c:c5:12:df:77:7c:a7:f2:a6:73:69:cb:ed:9d:
                    e2:57:84:0d:73:fc:0d:31:03:b8:e8:e6:4a:2b:35:
                    51:9a:7c:52:95:f5:48:b2:6a:fd:f0:89:fc:ba:f4:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:B4:1C:37:DF:71:70:75:D5:5E:2F:06:52:46:BD:31:B7:55:5E
            X509v3 Authority Key Identifier:
                keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:90:74:0d:29:de:68:6a:62:5f:37:b0:6e:1a:18:cd:93:fd:
         c9:6a:cd:c5:10:4b:6e:7e:44:65:6b:ad:0c:2c:93:c8:87:20:
         2d:b0:c1:40:e6:f1:91:28:df:a3:aa:90:51:6c:a0:cb:f5:4f:
         07:85:d4:e9:21:dc:11:1d:db:2c:1b:31:82:af:b0:9e:31:93:
         fb:c9:f8:da:0d:b3:78:84:a9:73:89:00:a3:bd:09:17:f1:39:
         c1:9c:78:cb:2b:28:6c:7f:01:06:aa:b2:f6:8d:22:ec:8a:3e:
         53:91:36:6b:b4:d3:14:59:51:5f:ae:83:6d:c3:23:0d:c0:65:
         2b:08:c4:1b:57:c0:53:f7:bc:bc:9e:ac:2c:a7:5b:65:dd:2a:
         47:4a:20:88:b5:61:ec:ae:32:51:7e:3f:0d:f6:cb:cb:f9:df:
         b5:be:ee:79:fe:fc:97:15:0e:86:78:20:a8:81:07:59:d9:07:
         9d:73:d5:da:f7:67:b4:20:85:a1:ce:b3:89:41:7d:66:56:81:
         45:46:c9:70:3b:bd:19:65:22:57:28:75:f8:fc:67:dc:cf:e1:
         76:47:09:6d:63:6c:ff:e6:82:09:a1:51:e8:00:ee:ce:83:a0:
         48:ff:23:b6:ef:3d:23:6c:a9:5f:bc:24:0a:f2:1d:07:93:4d:
         ef:f2:13:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:07:25 2026 by rpki-client