Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File:                     igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier:          cc+dyGGhBREJ9v+dZWDaMorkCN+kxhNH1Fn0c8368Gk=
Subject key identifier:   45:D0:D6:8C:F5:6C:FD:03:E9:D4:3E:0C:3D:1D:3D:31:1E:84:A8:DB
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer:       /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial:       01A0D983B75A87E3C723DE5D385709306AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number:          0E08
Signing time:             Fri 25 Sep 2026 17:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:22 +0000
Files and hashes:         1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: Xt2AJ5n+ZGK/Ei3XObxj+VoJzPIkAicPTcyJ9pm4who=)
                          2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:b7:5a:87:e3:c7:23:de:5d:38:57:09:30:6a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
        Validity
            Not Before: Sep 25 17:01:22 2026 GMT
            Not After : Sep 26 17:01:22 2026 GMT
        Subject: CN=45d0d68cf56cfd03e9d43e0c3d1d3d311e84a8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:b3:ab:b7:d0:1a:58:fa:a2:15:5f:5d:7a:
                    76:fd:ac:90:c6:c8:06:43:4a:74:6c:05:9c:f3:d0:
                    8d:9b:7c:59:b1:6c:14:46:3c:d6:e5:3c:2b:cd:10:
                    c5:6b:72:6e:d8:ed:a7:21:33:4a:75:c4:3f:f3:a4:
                    0a:52:b1:e0:fb:24:fb:57:f1:d1:92:17:91:77:64:
                    d7:b4:d4:7f:90:b4:ea:ca:88:94:96:37:56:e1:18:
                    7d:5f:92:3b:d9:6a:e1:11:fc:65:08:87:11:fa:c8:
                    88:91:fb:cd:f3:5a:9e:b5:44:2e:e0:e8:db:c7:6d:
                    80:df:29:04:b7:99:97:97:3f:74:09:05:46:82:7b:
                    30:76:3b:e4:71:95:0d:3f:18:8d:4c:23:0c:c2:ba:
                    7a:0a:0a:ba:eb:47:19:82:70:2e:7b:6a:fb:b2:ed:
                    13:56:0d:60:85:bd:28:50:93:f5:73:44:04:1d:f5:
                    0a:c3:6f:4a:aa:ad:1e:64:51:47:50:da:d0:5d:35:
                    69:05:81:a8:80:0e:f8:4c:f0:ce:f5:17:38:22:5a:
                    2f:e6:54:05:7b:08:83:71:06:85:7c:08:02:5f:55:
                    ea:19:2f:d8:b3:60:90:bb:b4:fc:4d:02:2c:3d:90:
                    6a:58:c6:7c:4e:86:3b:eb:63:2a:c5:b2:4b:85:67:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D0:D6:8C:F5:6C:FD:03:E9:D4:3E:0C:3D:1D:3D:31:1E:84:A8:DB
            X509v3 Authority Key Identifier:
                keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:51:ac:da:98:7d:02:cc:7f:41:8f:eb:9d:a2:42:c7:c0:53:
         94:79:68:4b:b8:82:5b:29:ff:77:52:a2:3c:3b:fd:b7:ce:f0:
         0f:4e:da:21:11:cd:28:bf:6b:e6:e7:33:3c:93:d5:4b:ce:dc:
         76:3d:e8:1a:2d:8f:9e:9c:ef:cc:7a:71:48:cf:52:71:d1:e5:
         b3:6c:22:4f:c5:7e:73:64:03:a3:8e:6b:0f:0c:0b:d2:3f:b1:
         1f:05:0e:88:aa:0d:95:31:f3:27:fd:a2:0f:4a:9f:d6:34:89:
         50:4f:32:08:a4:bf:e8:56:57:fd:db:22:85:e6:55:37:c9:f8:
         eb:1a:1a:04:1d:01:f1:a1:da:3c:20:e6:b0:52:9d:c3:20:2e:
         e0:e3:52:27:21:98:5e:fa:b3:d7:e5:aa:96:e3:d1:06:1d:de:
         db:0a:31:22:7b:05:93:aa:f8:83:69:d5:63:18:0d:d5:92:d6:
         1f:31:f0:19:f1:5b:af:a7:23:13:23:ab:05:d3:41:22:3c:e3:
         2f:f1:5a:47:4d:71:86:04:ba:74:d5:12:68:96:d5:2c:8f:02:
         d7:d8:05:dd:04:fd:60:77:4d:41:99:5b:c8:b2:70:a0:77:c8:
         fd:fe:82:e0:4d:53:92:e0:eb:91:51:3b:39:29:75:c5:78:bb:
         2a:32:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:31:50 2026 by rpki-client