Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
File:                     iCdfXxLHVuoJSy-iztIXc9aa6JY.mft (raw, json)
Hash identifier:          7ln7SvU2e/adDnH4ZKD0aLK0d8XtF4J0jJm4QbONL3w=
Subject key identifier:   9C:64:1F:FF:88:0C:0A:14:C5:C9:84:00:1A:2F:69:0D:0B:CA:9F:2D
Authority key identifier: 88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
Certificate issuer:       /CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Certificate serial:       01A0CB5A0F3888C308AFAFCF2A2BA76DD1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
Manifest number:          E3
Signing time:             Tue 22 Sep 2026 23:01:11 +0000
Manifest this update:     Tue 22 Sep 2026 23:01:11 +0000
Manifest next update:     Wed 23 Sep 2026 23:01:11 +0000
Files and hashes:         1: 19Dn9N6dl9oiU6iQGyDjjizh__o.asa (hash: W0qSPQc+lFKsKuaIgxN97z+JpoLSaaJRLrE264hXbQM=)
                          2: B1z4xoRxZ4h1nuQU7fiGHIusmcs.roa (hash: AH8e1SFxP7mwVEgpLVC0rJF7pyGIB69p63iAMsbetvc=)
                          3: CUsD8lt5-lXh9LkZsJ6cPOX6hsc.roa (hash: vpk8KShRqahOvvvQQ5KHNcIKAntGCFPSkwmHDUnFRTk=)
                          4: iCdfXxLHVuoJSy-iztIXc9aa6JY.crl (hash: aZeSyGHyTFkcYvp0Qr6/SARVTho8tb6IIwduLTNR9fw=)
                          5: wRv9fBJmvre20xMdwIU9laC5e10.roa (hash: PtCj3wS6CUonUfFeQe3p1omlsL2UMohFubS3Dus/vvU=)
                          6: zSxXam422uceBcDgVTQwKML7HzQ.roa (hash: GpllbBF29LkUDq+WEWLkHp5EqGZXeUURJtYTQzOT19Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:5a:0f:38:88:c3:08:af:af:cf:2a:2b:a7:6d:d1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88275f5f12c756ea094b2fa2ced21773d69ae896
        Validity
            Not Before: Sep 22 23:01:11 2026 GMT
            Not After : Sep 23 23:01:11 2026 GMT
        Subject: CN=9c641fff880c0a14c5c984001a2f690d0bca9f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:54:bc:c1:1f:8b:5c:e5:19:09:cd:48:c5:
                    2f:6c:fa:13:b5:84:b2:77:35:86:d7:ac:32:19:8b:
                    68:36:ca:18:0a:e3:72:e0:c7:e9:34:07:dc:4e:cb:
                    19:2c:e3:1d:92:e7:3a:0f:96:b2:e0:3b:84:ab:9a:
                    34:8e:06:84:10:5d:37:c6:e3:3d:47:1c:10:cf:f4:
                    18:2a:e5:23:9c:74:ce:16:a0:dd:03:a9:ae:43:62:
                    6a:bf:7a:41:58:5e:b5:d1:5f:a6:8f:06:08:59:f7:
                    a7:95:f6:24:7d:42:ae:b1:3f:8a:c5:69:1d:bf:db:
                    c8:90:0d:49:c9:4c:94:19:eb:73:6a:7a:21:55:63:
                    08:b3:4b:20:94:bb:11:b1:2c:67:72:8f:76:08:d1:
                    b6:3c:ce:d4:ec:0b:6e:10:b9:2a:92:8f:65:1b:93:
                    4e:d3:f8:22:d4:1b:ae:9c:55:78:fe:49:e4:20:0c:
                    13:d0:25:5a:51:4d:b3:d2:ee:a7:e7:9a:f2:77:8e:
                    38:15:e6:8e:ab:43:69:26:c6:9c:b1:d7:d5:7b:e4:
                    8b:a3:59:cb:62:9c:d1:69:21:75:1b:f8:4b:23:f3:
                    36:93:57:50:8e:4b:95:15:06:56:42:89:d8:f2:3c:
                    68:4f:c6:dc:0b:a7:b6:bd:27:99:3d:69:db:6c:cf:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:1F:FF:88:0C:0A:14:C5:C9:84:00:1A:2F:69:0D:0B:CA:9F:2D
            X509v3 Authority Key Identifier:
                keyid:88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:76:91:7f:fb:de:a8:dc:59:a5:db:57:e8:3d:29:68:57:
         fa:90:31:5b:04:be:b1:07:59:33:10:3c:65:c2:45:c5:cb:12:
         05:cd:27:38:9a:f0:6f:d1:e3:f7:1f:00:65:69:81:a9:88:b0:
         5c:f5:ad:99:e2:50:f1:c4:12:ba:32:4c:ce:e6:c9:79:b4:ae:
         48:0c:72:d7:0f:bd:ee:4d:4e:25:94:75:75:dc:b5:b8:ec:2c:
         b3:87:63:c5:4d:84:09:cb:9a:1e:34:11:24:93:cd:77:ac:fa:
         1a:c6:f3:24:56:d1:8b:3e:64:06:4b:81:c0:ad:00:b1:9d:97:
         d3:a6:81:02:c8:fb:7c:e4:3d:49:6e:a9:ae:7d:3e:71:1e:9c:
         4d:44:c5:71:1a:26:88:02:4e:a6:da:6b:da:f9:0c:bf:d6:24:
         eb:5a:b7:78:06:51:3a:c3:f9:b6:b3:1e:ef:30:0c:1a:c1:f1:
         00:e9:bc:59:1c:88:f1:e3:58:34:e6:71:2b:db:dc:52:96:45:
         57:cd:fe:c9:7f:59:aa:3a:37:ab:fe:76:7a:66:52:73:be:cd:
         a8:0c:1f:8a:56:48:51:e3:cd:b2:16:4f:5d:16:76:61:32:3f:
         ef:f0:52:2f:04:69:df:73:2b:83:bb:11:52:5d:69:31:58:8b:
         a9:48:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:28:40 2026 by rpki-client