Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft
File:                     IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft (raw, json)
Hash identifier:          STkfInP8qDhUFP0TG/J3j7q+Sy59UkniGQlR/OhCsaQ=
Subject key identifier:   52:C7:89:61:2E:DA:40:4D:A3:FD:FE:01:2A:8A:2D:DB:F0:78:40:A8
Authority key identifier: 23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8
Certificate issuer:       /CN=230992191d853734bd572d61d1a8e3553bedf6c8
Certificate serial:       01A1DB6FE38D4F318F4FE52ED4FF9AF60B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft
Manifest number:          22
Signing time:             Sat 14 Nov 2026 19:01:45 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:45 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:45 +0000
Files and hashes:         1: G0MKWn_d_v5XNei1EkaM5NV36uQ.asa (hash: x0PnvRZe/aaVIcrGvzMZjgaLm1h8hLqrF/kML+ClPcg=)
                          2: IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl (hash: yHmxvzGoKgr/uq4c+nChhp9NEKdakblMwTMHcQdgqpI=)
                          3: cVVcHvol0XGfs5PO_qXFsE_ggSM.roa (hash: vVw8w3A3EnxVF8bYvtAjLZhbAFoqhr6hEKzk2tOCSuw=)
                          4: rmFDE7ay2SaSeY5XInVoJtGaZ9U.roa (hash: p8s3q3sUsUP6aPmFgau2I/opMoqUd0y8QfpLMPcHFxs=)
                          5: vQqPisK4zUL3aAmNsTDcsPeP62A.roa (hash: 95G6GdHymVSsEtltaZIXZ9bnpGcXAWpiJuxJR4/ZfUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:6f:e3:8d:4f:31:8f:4f:e5:2e:d4:ff:9a:f6:0b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230992191d853734bd572d61d1a8e3553bedf6c8
        Validity
            Not Before: Nov 14 19:01:45 2026 GMT
            Not After : Nov 15 19:01:45 2026 GMT
        Subject: CN=52c789612eda404da3fdfe012a8a2ddbf07840a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cf:2f:92:dc:78:c5:66:0c:cf:67:41:eb:68:
                    21:53:db:6f:d6:37:19:7a:f5:e6:6f:11:e5:33:53:
                    c0:07:e1:17:64:2f:0c:47:56:1e:9e:2d:bd:3b:da:
                    d9:01:05:e2:63:18:d9:39:bf:a4:5c:cf:5b:58:2f:
                    92:6b:7d:25:02:ff:24:e8:ed:80:38:57:e5:80:bd:
                    98:b8:bf:54:8d:b2:0d:b2:a9:ca:26:dc:7f:fd:e7:
                    d1:eb:c0:07:a7:bf:4d:81:08:40:37:b8:a6:0e:b7:
                    4c:44:2f:f9:e3:30:9a:ef:86:09:d3:c6:d5:95:e1:
                    b1:ce:30:04:ed:8d:40:7c:7d:6c:d1:2c:89:bf:7c:
                    04:39:3a:8b:46:59:dd:07:49:56:9f:d6:a3:e9:dd:
                    4f:89:85:32:cb:4a:17:62:88:f7:c0:5d:41:bf:8d:
                    b2:99:94:b7:40:1c:99:6a:3b:e3:d1:02:ad:d6:52:
                    f8:a5:c1:3a:c5:6c:f6:a8:cc:fb:c6:81:c4:d5:c9:
                    25:2a:e0:a1:b5:d1:ab:91:63:98:ba:a2:0d:96:93:
                    8a:31:3f:7d:94:7d:13:20:ca:cd:2d:c2:b6:2e:a7:
                    bc:e4:a8:b9:fd:cd:7e:cc:e0:8a:df:a8:7e:00:ce:
                    d1:f5:96:75:36:64:f6:e2:e6:76:fe:e9:ea:c0:1e:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C7:89:61:2E:DA:40:4D:A3:FD:FE:01:2A:8A:2D:DB:F0:78:40:A8
            X509v3 Authority Key Identifier:
                keyid:23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b0:0c:0e:31:98:36:33:8b:50:0a:46:f8:7f:fe:ad:d6:8d:
         04:ab:2e:ce:6f:30:53:e3:3a:ec:99:41:81:62:aa:dc:c0:ab:
         cb:64:06:ef:bc:4a:42:49:e6:2e:f4:af:c5:29:18:4e:5e:1b:
         c7:dd:80:d6:93:49:08:3e:4e:01:e1:a1:79:c0:33:92:cf:2d:
         1f:0e:6c:64:29:e8:48:d2:13:3e:6a:db:16:78:77:26:68:ed:
         3e:20:4e:a3:98:a0:53:8c:9b:19:92:ad:31:de:59:2c:96:a0:
         57:a0:d1:43:d3:85:83:ce:a9:be:11:23:0e:fa:e6:9c:a7:86:
         4a:17:29:ac:f7:3e:bc:c1:0d:b0:f9:43:92:2a:74:cc:40:90:
         2e:34:35:fa:c6:0b:4a:07:66:8e:77:8d:15:2f:cc:ff:8c:49:
         e7:4d:48:ec:56:6a:c7:69:f2:f2:9e:75:d2:12:56:5e:00:54:
         4a:44:74:2d:71:cd:18:da:83:0e:74:46:9e:26:7b:19:fd:78:
         19:31:73:d2:b2:2d:80:70:f3:1c:51:4f:90:37:01:82:1f:7d:
         18:d2:f0:09:73:2b:c2:d1:21:e5:a9:79:18:9e:8f:fb:73:db:
         66:49:16:40:7a:65:17:37:60:4f:40:ea:a8:55:04:9c:10:21:
         17:7e:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:58:52 2026 by rpki-client