Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File:                     Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier:          w624yk/l9hGmZzl1noyS8wIN0SVPUVLTKms+A2++uN0=
Subject key identifier:   E6:E0:78:D0:61:AA:B5:3F:E2:FA:96:90:EB:72:E2:32:50:EF:9D:48
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer:       /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial:       01A13B5BCA2BE29313C1BD6422B8B52F3366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number:          02EC
Signing time:             Wed 14 Oct 2026 17:00:33 +0000
Manifest this update:     Wed 14 Oct 2026 17:00:33 +0000
Manifest next update:     Thu 15 Oct 2026 17:00:33 +0000
Files and hashes:         1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: T7LrWE4FClzBJE3NN/RwdfnFqChAObY1uvdy+WW1zWc=)
                          2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:5b:ca:2b:e2:93:13:c1:bd:64:22:b8:b5:2f:33:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
        Validity
            Not Before: Oct 14 17:00:33 2026 GMT
            Not After : Oct 15 17:00:33 2026 GMT
        Subject: CN=e6e078d061aab53fe2fa9690eb72e23250ef9d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:27:26:04:30:a8:14:9b:60:39:fc:9b:b7:
                    f7:ab:d0:0a:06:1c:50:40:90:13:26:1e:08:96:90:
                    5b:6f:64:99:a6:95:b0:d1:ab:ae:e1:47:c5:8c:ad:
                    20:03:54:21:f4:3f:7d:e8:be:a4:32:80:3f:75:03:
                    94:4f:00:2e:e0:71:27:35:0c:9e:74:a3:8e:f7:07:
                    7d:31:ae:07:50:04:a9:8e:57:e1:6f:76:fb:3c:77:
                    73:07:20:a8:58:67:37:4f:dc:6a:1c:8c:d5:a8:ad:
                    f8:29:c5:48:00:18:ae:f5:88:ed:63:ce:70:75:78:
                    55:b9:9c:b5:af:e9:a9:a3:0b:a0:80:23:f1:2d:59:
                    45:4f:90:a5:2b:9a:e8:f5:5e:88:99:3f:b0:9e:47:
                    3a:73:8e:5d:08:5b:77:b1:e5:0f:13:1e:72:72:69:
                    f6:10:64:af:b2:5a:94:e8:d1:b8:32:0c:c0:7d:c2:
                    9d:7d:cf:2a:e3:23:05:7b:0b:57:92:22:2e:d9:e8:
                    6f:77:bc:4b:54:1a:a7:ef:35:4b:64:7e:4c:50:60:
                    e8:e7:3f:3b:4f:d4:99:9f:48:0f:8e:1c:e4:d7:0e:
                    77:94:48:c9:8e:43:29:5a:2d:dc:54:d5:a5:6b:86:
                    a0:c1:2a:38:dd:fe:d8:19:14:5a:6d:45:82:03:71:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E0:78:D0:61:AA:B5:3F:E2:FA:96:90:EB:72:E2:32:50:EF:9D:48
            X509v3 Authority Key Identifier:
                keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:ca:7d:cb:cf:31:43:3d:21:3d:2d:f8:52:7f:27:ff:da:
         5d:80:ef:80:45:a1:e8:3f:dc:f8:60:ca:59:1b:9e:85:ab:5a:
         6e:dd:5c:1a:e8:f9:37:8f:c4:af:68:e0:ec:f8:73:fb:d6:68:
         87:03:56:82:b5:3a:62:4f:e4:4d:30:f2:1b:5f:e1:df:93:c8:
         b2:6b:77:5c:85:ad:e6:01:8a:aa:db:63:3b:0e:43:f6:83:d8:
         29:47:28:27:b4:0b:d4:f9:fc:0e:18:02:8c:dd:0a:f3:06:f6:
         4d:a9:62:23:4d:d6:a6:10:aa:4d:a6:2c:a7:ff:46:91:11:7a:
         28:0c:b2:8a:ae:98:27:e8:82:4d:fc:61:90:e7:c1:6d:80:46:
         ef:36:bf:10:51:63:1c:94:72:f9:4b:77:7c:56:ed:33:b5:92:
         0f:db:f5:00:be:d4:91:51:33:01:0c:c2:06:84:87:ad:8f:bc:
         2d:d7:0c:93:15:2c:db:cc:7f:7c:98:1e:9c:7c:8f:ec:3e:4c:
         30:7d:84:66:07:b6:a4:4e:0b:fd:9a:67:05:4e:33:52:47:21:
         7d:86:cc:ff:36:cf:62:2f:dd:7f:c7:7b:65:c1:2b:6b:32:0a:
         09:57:4c:b1:d8:bb:56:e1:fb:70:3d:d5:9b:bf:d0:2e:c5:29:
         a1:82:b8:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7W8or4pMTwb1kIri1LzNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2QyM2ZlMmY3MzhlNTNlNzM1MGMyN2MxMmUzODI4NGJj
ZGE4N2QwHhcNMjYxMDE0MTcwMDMzWhcNMjYxMDE1MTcwMDMzWjAzMTEwLwYDVQQD
EyhlNmUwNzhkMDYxYWFiNTNmZTJmYTk2OTBlYjcyZTIzMjUwZWY5ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4donJgQwqBSbYDn8m7f3q9AKBhxQ
QJATJh4IlpBbb2SZppWw0auu4UfFjK0gA1Qh9D996L6kMoA/dQOUTwAu4HEnNQye
dKOO9wd9Ma4HUASpjlfhb3b7PHdzByCoWGc3T9xqHIzVqK34KcVIABiu9YjtY85w
dXhVuZy1r+mpowuggCPxLVlFT5ClK5ro9V6ImT+wnkc6c45dCFt3seUPEx5ycmn2
EGSvslqU6NG4MgzAfcKdfc8q4yMFewtXkiIu2ehvd7xLVBqn7zVLZH5MUGDo5z87
T9SZn0gPjhzk1w53lEjJjkMpWi3cVNWla4agwSo43f7YGRRabUWCA3FJ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObgeNBhqrU/4vqWkOty4jJQ751IMB8GA1UdIwQY
MBaAFCM9I/4vc45T5zUMJ8EuOChLzah9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2Et
MmU0MTU0ZjM5NTBkLzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2EtMmU0MTU0ZjM5NTBk
LzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABs7KfcvP
MUM9IT0t+FJ/J//aXYDvgEWh6D/c+GDKWRuehatabt1cGuj5N4/Er2jg7Phz+9Zo
hwNWgrU6Yk/kTTDyG1/h35PIsmt3XIWt5gGKqttjOw5D9oPYKUcoJ7QL1Pn8DhgC
jN0K8wb2TaliI03WphCqTaYsp/9GkRF6KAyyiq6YJ+iCTfxhkOfBbYBG7za/EFFj
HJRy+Ut3fFbtM7WSD9v1AL7UkVEzAQzCBoSHrY+8LdcMkxUs28x/fJgenHyP7D5M
MH2EZge2pE4L/ZpnBU4zUkchfYbM/zbPYi/df8d7ZcErazIKCVdMsdi7VuH7cD3V
m7/QLsUpoYK4ag==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:54:41 2026 by rpki-client