Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          205NDwXFV3mMN9ZwuMwK/ZBqj0Is/qVA2dS1CyX8l8w=
Subject key identifier:   25:5E:C3:2D:0D:B8:BE:EE:21:0E:2D:DB:00:82:2E:17:20:0D:73:88
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       01A0CC6BF096821F9C890BD21A4362E584F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          11EF
Signing time:             Wed 23 Sep 2026 04:00:21 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:21 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:21 +0000
Files and hashes:         1: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (hash: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk=)
                          2: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: mc9RRp8aDu8mnNaT37UOiYvyRC8pbKaYoJV1TXgOmns=)
                          3: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (hash: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA=)
                          4: Y1T4r7Fs3xLnU467yBjXxVxADek.roa (hash: 2REreg0NGysFv7m8SRA6AFjBorpvVS4eSFiK4h3b/NE=)
                          5: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (hash: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ=)
                          6: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (hash: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6b:f0:96:82:1f:9c:89:0b:d2:1a:43:62:e5:84:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Sep 23 04:00:21 2026 GMT
            Not After : Sep 24 04:00:21 2026 GMT
        Subject: CN=255ec32d0db8beee210e2ddb00822e17200d7388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:f2:99:e6:a1:8f:a5:4b:c6:ce:20:7d:e1:
                    54:bf:5a:d7:65:5a:38:7d:52:40:22:24:0f:f4:eb:
                    c9:72:ef:1b:29:9e:01:c1:03:22:7e:fa:ff:18:26:
                    61:09:e3:b8:b6:fc:88:11:85:27:12:be:8e:b2:cb:
                    b1:8a:52:e9:53:33:b6:0b:e9:c4:83:32:55:f0:de:
                    ad:38:3c:2e:2f:20:b3:eb:0b:dc:24:fb:6c:db:37:
                    c6:b9:05:d5:e7:3f:fc:c5:87:58:ee:96:e8:b1:ea:
                    63:a9:84:f2:48:d3:5d:9d:d5:98:08:96:48:9a:9a:
                    e5:00:2d:cc:1e:15:31:61:9d:5d:ca:68:5d:cc:cb:
                    82:9a:0c:0d:d6:d2:02:14:43:19:85:d3:0d:ef:b6:
                    c2:0c:0a:6f:4c:94:0a:f5:12:fd:7c:48:2e:98:1d:
                    91:99:46:c3:6c:b7:79:97:52:ad:b7:e2:60:45:0f:
                    ee:67:17:67:7c:b9:5f:65:03:6b:45:e6:68:b9:91:
                    6b:42:f8:6a:fa:96:3f:c4:ba:08:01:da:b1:c5:1d:
                    92:72:1b:9a:c3:30:c8:da:49:da:95:8b:ff:46:a0:
                    1b:0d:d2:86:e5:24:5e:7d:a2:d6:77:79:5f:a1:43:
                    bd:e1:ef:f8:d1:b7:f5:c2:03:65:3a:b7:b5:a3:25:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:C3:2D:0D:B8:BE:EE:21:0E:2D:DB:00:82:2E:17:20:0D:73:88
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c8:57:da:40:a6:9c:34:88:67:d7:25:b0:5f:44:d8:27:09:
         85:3e:dc:de:9e:e1:be:f7:c4:19:47:b3:ff:22:21:33:cd:7d:
         87:f3:aa:61:91:2b:90:18:1b:aa:4c:4a:1e:ad:7c:9e:c2:27:
         a3:98:c9:93:64:9b:01:a1:21:ab:a8:89:c9:8d:94:44:79:3f:
         cb:64:a1:bc:72:92:4f:c3:24:10:bd:28:ac:6b:fb:ba:83:e4:
         45:aa:46:46:58:df:89:17:ad:33:9b:a5:ff:32:36:3f:c4:a4:
         70:93:ed:a7:bd:62:ea:df:a9:17:0b:9d:a2:c7:f0:53:df:db:
         21:a0:d9:2c:c3:3a:fe:e4:fc:09:e6:b4:27:48:2b:28:dc:e1:
         ef:11:50:35:ac:25:d2:50:c4:d9:92:cc:61:c5:aa:fc:ac:c6:
         58:d6:74:96:d5:43:ea:11:13:fc:1a:86:f0:94:01:a2:87:0e:
         3f:bf:2f:bf:e8:95:d4:98:bf:85:46:2f:29:30:63:bc:a4:3c:
         c8:c1:b4:d0:e2:16:d6:1e:5c:3b:90:d1:43:89:c0:68:e7:e0:
         8d:df:bd:c9:0c:a4:4e:6b:ad:78:d8:a0:b6:a7:52:4e:2c:cc:
         d4:43:37:fb:d2:02:72:b9:c2:d3:1b:12:94:1e:b3:17:89:30:
         5b:9a:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:09:14 2026 by rpki-client