Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
File:                     IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft (raw, json)
Hash identifier:          K1g/YXYdDuw9NT8BO9eilrWMa0+PxAJm3AvWvj5Pfag=
Subject key identifier:   BA:36:4E:E9:39:C5:88:45:81:35:28:2F:28:A2:57:9B:5F:E6:58:34
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Certificate issuer:       /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial:       01A0D8DF729A3FFC5AB377A429B5C210F6DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
Manifest number:          1225
Signing time:             Fri 25 Sep 2026 14:01:57 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:57 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:57 +0000
Files and hashes:         1: 4Kg9NytT8R4x9Vd_vEEuFc15xYk.roa (hash: M2LCXYLEX3b9grh9Bx0Bx9T8hoNsI8LqiGlWoxzR18A=)
                          2: IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl (hash: UVixlbgeshVcuZyobaOSFyLq5yEIXP8UlIoIPCxRFFc=)
                          3: UHhYBwfJii3naOaGRuZDntzyEGc.roa (hash: v1Wwj+whEEtDL3RaA1XzQqeJUUXbVn0Gf3wev1XGAMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:df:72:9a:3f:fc:5a:b3:77:a4:29:b5:c2:10:f6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
        Validity
            Not Before: Sep 25 14:01:57 2026 GMT
            Not After : Sep 26 14:01:57 2026 GMT
        Subject: CN=ba364ee939c588458135282f28a2579b5fe65834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:77:b1:20:b9:4c:52:83:0d:0e:30:59:f4:
                    1c:df:53:62:33:26:bc:aa:a1:9d:16:cc:6e:03:ef:
                    1f:2c:73:fc:d5:82:aa:e5:9a:9f:db:5e:bd:28:f0:
                    9f:e6:39:d4:f7:aa:af:8c:1c:16:ef:06:28:f3:81:
                    41:66:3a:2a:fb:95:a7:8a:77:d6:dc:1d:d7:43:22:
                    29:24:f6:59:c4:f5:1e:ae:49:d3:30:06:6d:05:cf:
                    50:98:e6:7c:67:85:d0:e1:f1:ea:0b:2b:3c:e6:38:
                    f7:e3:69:ba:9f:bb:50:c1:c5:cd:df:00:dc:81:52:
                    a1:8a:f9:77:a3:58:05:62:08:f7:47:cc:c6:74:7f:
                    cb:14:ea:55:95:13:71:0f:5f:bb:56:fb:80:4a:59:
                    cc:c1:4c:81:28:c4:50:aa:37:07:a6:a5:c1:52:38:
                    40:a3:05:5d:9a:85:9f:93:0b:40:8e:2d:08:27:26:
                    9c:55:23:ec:87:7f:aa:c2:08:78:2d:ef:c9:91:27:
                    37:dd:25:0f:48:dd:91:af:ef:cd:49:dc:30:c1:18:
                    b1:d0:e6:63:c2:5d:25:6a:f4:e2:76:e4:fd:f5:ad:
                    a9:a4:2d:4d:c2:31:83:9e:a2:cc:f3:40:45:97:94:
                    60:b5:6b:19:1c:1c:60:6f:e2:73:f9:b7:a8:86:3b:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:36:4E:E9:39:C5:88:45:81:35:28:2F:28:A2:57:9B:5F:E6:58:34
            X509v3 Authority Key Identifier:
                keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:01:a7:be:d6:f8:21:6c:94:54:00:50:16:e4:f9:2f:e9:61:
         3f:38:4b:ce:a5:07:56:96:48:a5:e3:5c:88:e4:7a:b0:c0:70:
         7d:9c:60:30:8c:d6:91:eb:6b:a3:59:19:40:b5:8c:48:21:06:
         d2:79:00:bf:e1:7f:6a:7d:6b:9f:89:0c:39:f4:7b:42:67:67:
         47:91:b0:00:c8:ea:05:12:d1:d2:09:7f:23:98:a4:76:4f:1b:
         f9:b9:f8:47:ae:86:fa:16:d0:25:aa:f3:d2:63:e4:83:48:b8:
         80:b1:77:97:cf:83:f0:be:89:24:b3:51:16:9e:a2:be:5d:da:
         22:75:c7:37:e6:95:58:06:c5:ad:52:26:62:de:c9:f1:1b:b2:
         e9:99:b6:15:a6:81:5d:9a:99:01:71:80:4b:26:a1:8b:d8:3e:
         dd:c5:f8:85:e8:ee:5f:39:a1:18:d2:ad:c5:1e:02:fa:f4:8e:
         3f:91:b4:95:06:4e:cf:ce:a4:40:a3:79:bf:2a:0b:94:db:19:
         6e:44:b8:ab:11:26:37:d2:ef:5d:d4:63:39:b9:14:13:66:24:
         34:e0:96:a8:0c:f4:56:79:78:18:13:90:b4:83:90:64:96:9b:
         72:f6:3d:b2:cd:7e:09:10:de:fa:91:0c:94:14:4d:86:04:d4:
         d4:2b:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:20:02 2026 by rpki-client