Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          f96lG4T7TnxVG6AtaucIwttyfW9eHYSThAL/NPclmnY=
Subject key identifier:   9A:C3:80:92:18:2C:B3:03:3F:BA:12:CC:AF:F2:F6:18:25:CB:AE:47
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       01A0D07F6CA3FB7F773BB18D4F4440612C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          1A72
Signing time:             Wed 23 Sep 2026 23:00:06 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:06 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:06 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: G3IyVYpLdr3tGqmVzegxRNhflE05BfEuaL5pBFYMlYE=)
                          2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
                          3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
                          4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
                          5: klEMb23dXP9uu-TDOiKli7hNty8.roa (hash: FLiEWfLtfUugEAipWZ3eK7tJPfoBV08kfh4jDSGYtIY=)
                          6: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:6c:a3:fb:7f:77:3b:b1:8d:4f:44:40:61:2c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Sep 23 23:00:06 2026 GMT
            Not After : Sep 24 23:00:06 2026 GMT
        Subject: CN=9ac38092182cb3033fba12ccaff2f61825cbae47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:eb:a7:25:16:03:aa:5d:24:b2:c4:b4:17:
                    d5:cb:e7:97:7b:79:84:78:d1:ff:d8:2a:d2:7f:1a:
                    4c:7a:8e:df:9c:4f:ed:6e:02:f9:2a:fe:dd:f0:34:
                    68:05:da:88:16:1a:a4:e1:19:68:38:01:21:de:10:
                    bf:05:14:4f:f5:95:70:42:9c:ba:63:fe:4f:7f:17:
                    81:c6:d6:1c:77:0a:a3:b0:68:84:38:65:0b:90:54:
                    29:83:26:8f:2c:c6:5d:b3:70:62:54:bd:0f:72:72:
                    c0:20:ba:9f:8a:a2:a6:9c:1a:b7:6c:b4:47:ac:34:
                    11:19:a1:75:5a:f5:b0:3e:a3:6d:82:33:d5:62:5f:
                    ba:e4:b6:0b:1c:07:37:9d:d8:b4:a4:99:3c:38:c9:
                    e5:5d:96:77:cb:1d:0c:bd:41:4b:13:cc:65:35:6e:
                    0b:55:d7:68:ec:00:4e:50:56:f2:c4:3d:44:88:ef:
                    f4:04:38:47:44:d3:a6:a8:3b:96:76:63:b5:5d:49:
                    e8:63:c5:1f:51:9a:62:7e:17:24:40:f7:84:23:a4:
                    6a:1e:38:87:55:27:01:17:ed:60:15:e4:0e:1a:53:
                    c9:a9:b4:8e:69:18:2e:42:34:37:09:3d:a2:a1:29:
                    a4:0b:70:21:7b:53:4b:6e:31:ac:cc:f4:36:3a:2f:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:80:92:18:2C:B3:03:3F:BA:12:CC:AF:F2:F6:18:25:CB:AE:47
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:2a:ba:82:20:71:99:dc:54:da:58:cf:a1:c9:ce:83:0e:
         4b:e3:10:7a:76:39:d5:2e:29:93:ed:d6:77:f2:ea:17:98:f8:
         5c:82:90:83:ee:91:48:fc:6b:78:e9:58:eb:64:2d:ea:c2:fb:
         55:f5:e0:08:84:87:c9:3e:52:10:1c:e3:ef:f4:17:ee:f7:ee:
         55:cc:e9:77:b8:54:c6:ae:ad:b9:c9:f1:45:99:ff:54:32:b9:
         5a:1c:f9:5d:9d:d4:a2:e4:3f:21:04:a3:ec:cc:e9:e0:a6:f6:
         8e:a0:13:1f:ce:dd:01:2b:77:20:af:92:c8:fc:f0:7e:fe:fa:
         59:16:4d:37:b7:e2:6c:e9:62:17:b1:a2:4c:2a:ff:25:74:08:
         1a:40:7d:47:66:49:5f:2f:e8:3c:6b:2e:45:09:b1:4c:8e:2f:
         87:bb:61:fb:10:67:15:69:42:71:ad:f0:be:4d:d0:ed:16:29:
         a7:c9:25:ea:81:36:e2:2f:f6:2d:a8:13:81:83:f5:21:c8:3a:
         5e:4c:5c:11:22:c1:23:e8:28:42:65:ce:10:b4:b4:14:ed:97:
         1a:9b:90:73:ab:5b:8e:ea:dc:ea:e2:19:40:3e:fe:57:8d:66:
         d6:a5:17:4e:41:a3:07:6a:42:b4:06:64:c2:3a:a8:17:24:9f:
         92:00:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:58:16 2026 by rpki-client