Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File:                     iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier:          8LiBi7MTPnspg2RorC5j+iiXecbO3MlqLcB32U6pvY4=
Subject key identifier:   6F:22:6A:DE:18:70:89:05:4B:14:6A:55:7B:F3:02:E9:94:F2:92:77
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer:       /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial:       01A0F2689D4BC500271A7C13F5D5E928505B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number:          096B
Signing time:             Wed 30 Sep 2026 13:02:17 +0000
Manifest this update:     Wed 30 Sep 2026 13:02:17 +0000
Manifest next update:     Thu 01 Oct 2026 13:02:17 +0000
Files and hashes:         1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: o4b0rI6kynsbTNHgMZmjVeeEqg87L3O8ruJyzJsrMww=)
                          2: l3jaT1bSWorYPTAH0tIKpX9ObJ0.roa (hash: Xv2kbEZdjMxUOGqN/7wXLuOx7RktMUlXqMhlKu4Yx9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:68:9d:4b:c5:00:27:1a:7c:13:f5:d5:e9:28:50:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
        Validity
            Not Before: Sep 30 13:02:17 2026 GMT
            Not After : Oct  1 13:02:17 2026 GMT
        Subject: CN=6f226ade187089054b146a557bf302e994f29277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:31:3d:0a:55:5b:74:8e:b0:57:ab:8c:2b:
                    2e:bc:22:bf:bb:2d:c0:ec:b2:69:7a:94:cb:cc:79:
                    2a:1e:73:e9:eb:90:b7:92:1b:53:9a:ae:62:c4:40:
                    25:04:02:99:d6:9f:13:3c:cf:0c:27:ee:f0:ca:cf:
                    f6:b3:79:ac:ef:c8:a6:ab:99:b2:45:8b:28:9f:11:
                    f7:d1:4d:67:bd:eb:71:80:a0:9b:28:ad:e6:80:ef:
                    d3:0e:3a:a1:d3:19:97:9d:28:b7:ab:71:01:06:fd:
                    40:45:d5:89:97:6f:98:b2:e6:92:93:fd:0c:ea:c2:
                    3d:b1:8f:e9:50:bf:5e:a5:db:3d:45:62:38:10:a8:
                    1d:d4:3d:3b:63:a5:b7:cd:9c:62:a1:2e:19:83:8b:
                    f9:db:58:83:cc:cb:d8:66:7b:36:db:72:4a:83:74:
                    17:dd:9e:76:4a:19:9c:8c:f5:b8:f8:04:c8:b6:26:
                    03:02:a3:c7:c9:1c:8e:c7:b6:8f:7c:c2:3b:a7:1d:
                    50:1a:b4:86:d3:f9:8a:3e:a4:24:c6:46:a4:ad:73:
                    f1:90:7a:4f:7a:06:fb:45:e2:47:5a:1c:be:3c:13:
                    5c:e9:18:7f:38:38:47:0a:dc:59:f1:02:b9:33:41:
                    6f:7d:cb:64:1a:7f:bc:05:48:a1:26:d8:c0:51:a5:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:22:6A:DE:18:70:89:05:4B:14:6A:55:7B:F3:02:E9:94:F2:92:77
            X509v3 Authority Key Identifier:
                keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4b:f9:ac:ea:9d:df:aa:91:5f:72:e2:e3:9d:79:c3:56:52:
         01:22:ca:03:97:30:a5:37:f6:23:dc:98:35:15:22:d9:65:96:
         7b:24:04:af:94:ff:b9:c3:f9:91:12:4d:d5:89:ad:d4:99:b3:
         e1:28:67:f9:d4:75:c8:b3:d1:db:c3:46:35:b5:1f:c0:c2:a0:
         f5:7e:3e:ab:ad:cf:8f:58:b9:86:4c:7a:9f:42:13:92:53:5c:
         32:eb:e1:01:87:79:ed:dc:d1:a0:85:73:f3:dc:4d:aa:0d:e0:
         23:c4:a1:3e:42:8b:2c:af:f0:1f:fe:90:74:d0:99:1e:43:4c:
         2d:85:67:dd:5d:0d:a9:dd:da:57:89:fc:56:4a:4d:88:2b:77:
         6a:28:67:5f:ee:7d:b9:41:27:8e:21:a7:10:a3:32:80:e2:95:
         78:2f:e4:e1:88:92:c1:eb:0d:4a:4f:5d:be:78:44:5a:76:24:
         a0:96:8a:66:f4:a8:27:50:ce:81:09:ec:bd:12:2e:c8:29:a7:
         c1:73:5e:89:fc:04:48:78:23:89:d6:76:f5:d2:49:04:91:64:
         5c:be:a3:7e:46:53:1a:de:a5:ba:6b:30:29:4f:92:ee:6b:2e:
         29:86:8c:57:11:c0:51:3b:90:2f:48:68:c9:79:f3:4f:c5:63:
         cd:25:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:14:52 2026 by rpki-client