Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          FaEg9VWp+pwLb1owLSezes50UnZ1EvI5IXBUEg8xhBg=
Subject key identifier:   11:C9:56:B3:97:26:4B:DB:3A:D9:82:A4:B5:8E:07:4D:83:EF:65:E3
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       01A0D8DEEFDBC8DDF429CBE19A9C97B4E8E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          1A79
Signing time:             Fri 25 Sep 2026 14:01:23 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:23 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:23 +0000
Files and hashes:         1: 1-1889f_-iRQYnH3-fqXrOkR2ikE.roa (hash: /z9uTfpjXRCmTc6GwPli+bHZeS9FVw3t6IXyn4g2iag=)
                          2: 4tb80eIeaemuew5fxP0iEI9imgA.roa (hash: e9ASBdL/cxgsl0ZRb+D15EqqF9ntvaIWRU4Syd78R4c=)
                          3: 5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa (hash: wdooR1EonyLTBTWw2tpg6m0I9TSD570lR7yhgwvAcsk=)
                          4: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: toZF9JzII9hg5GpR8IXxlxLHCRxjroTxENe+Ce0lMfw=)
                          5: V6C5S8FHu-VQP7fJy_qJO2TbRW8.roa (hash: ERX1UGNBCgL3/72WnrYeAgNLYeESJE2SSaY/KZ9ee1o=)
                          6: xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa (hash: mElWxlPb4ggRHli9cITYJ0YySn8gxZXbhGQNUFYIVAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:ef:db:c8:dd:f4:29:cb:e1:9a:9c:97:b4:e8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Sep 25 14:01:23 2026 GMT
            Not After : Sep 26 14:01:23 2026 GMT
        Subject: CN=11c956b397264bdb3ad982a4b58e074d83ef65e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:e3:0f:0a:ff:e2:51:f1:75:16:8c:a6:3a:
                    96:c1:87:a5:43:79:10:7c:d4:d1:0a:18:51:fb:5f:
                    9d:c0:ea:d7:48:f7:16:bc:ed:69:04:35:91:6c:4e:
                    e9:85:5b:97:b7:81:3b:44:92:d4:dd:7d:f6:5d:ba:
                    a4:bf:0d:db:af:5e:77:cd:03:2d:38:83:b0:2d:21:
                    ff:23:ad:e0:74:14:ca:4b:46:72:fa:0e:9a:2b:e6:
                    0e:2c:84:db:41:83:74:bc:d8:18:43:8f:24:da:e9:
                    fc:ef:7f:f6:b3:ae:80:d5:33:57:c7:bc:40:67:66:
                    18:35:94:0a:86:97:64:9d:2b:3b:08:8c:1e:cc:ae:
                    a2:62:dd:39:48:b6:92:81:10:30:b8:59:70:f9:89:
                    c5:31:ee:82:25:09:29:eb:4f:1d:61:65:74:f1:ba:
                    ec:69:f4:1e:01:03:c9:0f:ce:d1:43:0c:39:11:ac:
                    82:37:6c:b5:8d:5c:e5:75:a0:fc:7b:b1:ec:d2:15:
                    9f:79:e9:bc:39:36:28:a7:92:c2:e8:19:ad:e2:af:
                    c5:18:a2:c2:8a:cc:3e:20:ea:7c:1b:8f:11:2b:b5:
                    f9:2b:c1:fc:e9:0e:a6:9f:c4:00:09:10:e7:6b:1e:
                    a7:1c:03:67:45:a8:c7:b5:52:80:ea:53:c1:37:00:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:56:B3:97:26:4B:DB:3A:D9:82:A4:B5:8E:07:4D:83:EF:65:E3
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:33:93:ec:9b:9b:67:89:48:67:74:3d:45:23:56:2d:6d:
         60:0a:25:3c:8b:b3:49:20:da:6c:6b:71:c8:32:8b:c1:ae:08:
         70:bd:bb:40:41:ea:f2:53:28:63:21:84:0c:10:c1:d8:8f:ce:
         1a:01:cd:9c:00:2d:fe:cc:bc:2d:34:bd:d1:17:7b:7c:75:d2:
         04:ab:db:b7:7c:87:31:5a:a3:e7:40:e5:d7:6d:b0:9f:09:81:
         e6:67:15:60:5a:1c:f9:d5:78:78:1d:7b:28:92:48:33:15:ff:
         c3:87:ee:85:6a:d1:04:6b:e6:4b:2a:fb:a5:fb:4b:c5:d7:48:
         32:12:2f:ff:8c:db:ff:07:ca:a6:f2:da:7c:e2:69:8a:22:25:
         ff:bc:e3:f6:a5:62:9a:0e:40:50:04:9c:fa:b4:21:13:f9:d4:
         f3:7b:c5:7a:24:ac:d9:fc:9c:d7:f9:3e:2f:75:af:b6:84:00:
         1b:5b:e2:7f:ab:4c:8e:98:28:55:3d:9d:f7:3b:8d:0b:64:1b:
         fa:96:ed:7a:b6:7e:be:a2:c4:a9:a0:c1:9a:12:f5:1a:e7:b4:
         c1:7e:29:3d:6b:f9:1a:ed:88:1b:68:22:12:6b:5e:75:b0:ce:
         ae:b2:0c:7a:9e:17:2f:9f:3b:c7:d9:88:b5:73:6a:79:6c:67:
         f1:eb:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:08:24 2026 by rpki-client