Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File:                     igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier:          St+x7xM0FKuE8BoYGppn05CtjIQiAKl9seb0jzKrNcY=
Subject key identifier:   AB:CF:D9:88:D4:C4:55:36:9D:35:E2:48:9F:BE:BD:48:95:08:40:89
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer:       /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial:       01A1DA25847497DD5965869CD9E022A680A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number:          1893
Signing time:             Sat 14 Nov 2026 13:00:54 +0000
Manifest this update:     Sat 14 Nov 2026 13:00:54 +0000
Manifest next update:     Sun 15 Nov 2026 13:00:54 +0000
Files and hashes:         1: 0SxELV1KhrYGOHwr-3zAzwZie-I.roa (hash: +V4FUlI/lOlTfzWpgQ2Op/79+58W2UXvVW2loBhFY6A=)
                          2: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=)
                          3: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=)
                          4: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=)
                          5: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=)
                          6: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=)
                          7: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=)
                          8: RIWe3A9HpFM4IrNz6TvLpGxmwas.roa (hash: n/U9aeKY6Kj/7DhIcr7eQNejsNrorng6d6nCsEVR0G4=)
                          9: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=)
                          10: Ya8UhAbXRHW76CZXydZwDc89luQ.roa (hash: jrko4GgQfGa4fx2XVYs7sNRMDfXWZShssHOvl4TRSgg=)
                          11: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=)
                          12: c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa (hash: U3K1dzpYsUWsqrAD5WtyRGP2OtEEKqHJp0n2MHiucNo=)
                          13: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=)
                          14: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: LmL4MCNdpheIojYgsis0O6QfGGzWdL0t3Mj+pgxcCBU=)
                          15: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=)
                          16: yWXTyKbdzhf70aOdG1K-qa2Vqzo.roa (hash: HsTOFLq2DipgL762bkM6mfxMBIXe/4uYryzBcH67ZcU=)
                          17: zT84CfP8rGwcUl-LnJvvysG3RDs.roa (hash: Aw0N3wl1hspnCnwRNCExdmFlckLliSKtotCpxEADYrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:25:84:74:97:dd:59:65:86:9c:d9:e0:22:a6:80:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
        Validity
            Not Before: Nov 14 13:00:54 2026 GMT
            Not After : Nov 15 13:00:54 2026 GMT
        Subject: CN=abcfd988d4c455369d35e2489fbebd4895084089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:71:0a:2e:22:ad:ad:a1:1a:fb:11:df:c3:
                    0e:65:cc:8f:65:bc:e5:a7:f4:c1:72:f1:33:89:79:
                    d5:90:40:66:de:67:f2:80:8e:23:ad:92:05:96:98:
                    50:e9:64:e8:99:cd:d0:3d:a0:e1:4a:ff:57:af:93:
                    4e:44:0e:2d:6d:33:7c:c2:b7:fe:28:70:d1:df:e7:
                    1c:89:11:08:fb:44:12:a0:db:01:7b:26:7a:e8:1a:
                    75:cc:9c:55:56:8c:2a:0c:41:93:c8:4d:01:30:6c:
                    28:69:5e:1a:02:d7:28:f3:d3:c6:16:46:f9:ac:a6:
                    13:25:ce:2c:12:d8:a0:77:c7:6f:25:05:df:05:8c:
                    2b:a4:3d:e1:bf:cf:7b:6b:09:cf:33:4f:c4:b4:b4:
                    81:db:e7:3a:38:5f:02:50:5b:b2:6a:64:f1:bc:4d:
                    18:f4:b1:e1:6b:0d:8e:02:4f:23:1d:d2:22:19:16:
                    9f:43:dc:4d:12:87:48:0a:35:0b:f7:89:46:4d:9e:
                    4c:1d:59:50:b6:52:8a:b6:94:8d:40:00:06:92:64:
                    be:17:24:73:d6:64:bb:e4:dc:e1:f3:5e:8c:4d:63:
                    2c:67:8a:59:23:21:e2:4e:59:83:e8:dd:f2:33:3e:
                    ed:23:f6:2e:95:42:ee:ec:20:f0:8d:1c:42:92:99:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:D9:88:D4:C4:55:36:9D:35:E2:48:9F:BE:BD:48:95:08:40:89
            X509v3 Authority Key Identifier:
                keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:7e:18:d7:d1:95:75:9d:be:e6:b7:c2:1f:3d:97:a2:f0:
         44:68:6b:3a:bc:84:ce:20:62:40:34:88:95:ef:12:a2:22:a2:
         79:94:0f:8d:07:b4:1d:73:b6:03:d4:60:8e:97:e5:8d:33:25:
         84:86:ac:ca:34:07:79:97:19:c7:40:0b:f9:0f:cb:6c:de:dc:
         96:48:58:ac:20:2f:76:68:21:7b:d6:f7:41:b8:29:4e:db:db:
         57:a8:bb:ec:c5:c8:6c:8b:26:64:49:ea:5c:a3:de:d6:64:89:
         1b:56:bc:f3:c8:a7:5d:cb:82:05:f5:17:80:6b:3c:7e:59:c8:
         e2:86:95:13:c7:c5:46:f4:47:82:96:6d:b7:2f:8a:43:a5:00:
         76:11:eb:5b:99:b0:26:05:e0:e9:c3:8f:84:e0:e9:85:bd:2b:
         76:e6:c9:4d:89:d1:6f:0c:be:f6:68:3a:9e:94:46:45:ee:60:
         a5:7f:a1:5e:46:8e:bc:6f:51:13:1a:f0:e2:09:61:da:5d:29:
         60:b7:68:36:11:b3:6a:e6:16:0b:b2:fe:02:81:7d:62:c9:05:
         96:fb:e9:4a:46:e5:22:b9:52:a3:30:a1:1e:10:2e:e4:75:3b:
         54:96:08:8d:4a:d2:72:9a:8a:c7:53:7e:a9:1a:fb:67:cc:8c:
         00:dd:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:38:29 2026 by rpki-client