Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File:                     iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier:          XaIVbKgfk8QZcW/XG5t0k56mupzC0VKdABIkdjUj9p8=
Subject key identifier:   99:82:67:1D:02:31:62:47:C6:01:05:94:18:94:1A:7E:38:A7:61:AE
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       01A0DCBBA80E31E6D9A07CF9A2FCE94A3BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number:          03B8
Signing time:             Sat 26 Sep 2026 08:01:20 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:20 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:20 +0000
Files and hashes:         1: 9CW7PS1O-yaGQw798fnARuiUrJY.roa (hash: pJA5oJPC8LVm68jDybSlz7FMMO+yc+xxykw7/S2Fs08=)
                          2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
                          3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=)
                          4: Jf0IiUw2yxEGHU21X5UBjTTFsPw.roa (hash: iznEwndgoL7LQZ3si+t9hPfxRdTHhoHEK3Tm2NJNWr8=)
                          5: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (hash: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=)
                          6: UsGhEaTVOTKiKiirGjznuF2Gaak.roa (hash: F1w1woKo1BbT5Id/y5MMOZaDCzO3XoS91p9xrahgbXo=)
                          7: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
                          8: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: ZqE1JvTw83CsQdARg0/f/rHUE1JYXvhnJv/z7kFvvZA=)
                          9: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
                          10: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
                          11: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=)
                          12: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bb:a8:0e:31:e6:d9:a0:7c:f9:a2:fc:e9:4a:3b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: Sep 26 08:01:20 2026 GMT
            Not After : Sep 27 08:01:20 2026 GMT
        Subject: CN=9982671d02316247c601059418941a7e38a761ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:f6:11:bd:4b:62:f8:56:d0:83:0a:64:78:
                    92:23:96:5b:40:57:c0:5c:b8:e1:5b:a2:7d:bf:93:
                    79:76:a6:ef:1f:0b:6a:7c:1a:82:c4:50:0e:68:f3:
                    c9:0e:9e:7a:6f:7d:df:e2:4d:ab:23:f6:d0:5a:f7:
                    a8:4b:46:1d:ad:e1:e9:71:79:03:64:92:a2:93:c2:
                    b3:9f:a2:96:3f:45:64:1e:bf:08:84:3a:57:96:9d:
                    45:0a:0e:27:a0:fd:63:f3:d1:e6:a9:b1:71:06:a8:
                    13:ab:a6:50:0e:d0:1c:1b:75:e0:55:b3:71:bd:4b:
                    a4:9e:94:bc:78:40:14:77:fb:dc:cc:f1:7c:89:9c:
                    66:0b:c7:2a:86:e9:cc:c5:2c:51:7a:01:d8:4c:86:
                    0d:c3:ed:b0:c5:7e:e1:fe:2f:d8:f0:2d:4f:0a:b2:
                    1d:9e:f3:85:e9:50:f7:83:55:02:33:b7:45:68:d6:
                    3f:02:07:e6:68:bc:04:31:3d:9a:2c:d4:f5:73:b9:
                    8a:94:c6:35:08:ab:9f:85:89:3f:31:9d:78:d7:26:
                    46:56:67:ef:00:23:95:bc:15:49:53:38:87:b5:fd:
                    8b:68:f2:82:80:0a:fd:ba:81:93:db:0f:d8:6b:e0:
                    65:87:38:7f:b6:32:c5:ed:39:b1:de:8b:fc:76:cb:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:82:67:1D:02:31:62:47:C6:01:05:94:18:94:1A:7E:38:A7:61:AE
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:6c:3d:99:ea:08:95:8b:63:46:25:76:59:49:a5:36:51:
         08:58:d5:6d:db:05:80:03:5d:07:1d:91:d6:c4:97:98:f2:4b:
         8b:2a:4f:c0:f2:08:6e:e6:3b:14:f6:5c:d3:87:73:98:83:25:
         d2:65:c3:fb:31:f0:a7:b5:cd:e7:99:99:ea:de:d3:ad:52:4b:
         4f:66:15:a1:fa:cf:69:2b:86:ae:d5:78:50:c7:5e:50:a4:fc:
         43:45:86:ea:f8:94:b9:f0:24:bb:49:65:db:b3:ed:2f:e2:f9:
         33:5a:62:f6:f6:e6:df:25:d0:28:d8:41:10:48:a6:2d:a3:3e:
         ff:54:4b:c6:9c:d3:7a:ce:7b:78:17:04:84:8f:ea:74:e2:ba:
         94:d5:81:27:73:f5:02:2b:c7:cd:bf:b0:c6:01:05:cc:26:e0:
         16:59:b1:c0:1b:a8:ee:9c:db:b1:25:43:a5:cc:52:e7:ad:8e:
         f5:3c:54:91:c4:bb:13:55:00:8b:0f:0f:b8:99:db:5b:8a:3f:
         3e:11:a2:dc:d6:b5:ae:9b:a9:0c:72:0f:a0:12:f8:f8:51:63:
         39:c6:89:1d:be:14:52:0d:24:d9:7b:0a:cc:44:00:ed:0b:1b:
         90:d3:39:67:ee:ef:1a:51:84:b5:b2:07:2f:a1:43:50:9c:55:
         e6:26:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:48:44 2026 by rpki-client