Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File:                     I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier:          nXrJ+yD8lUmM7UejnGPZwZDJYd3aP5HrmY+IiL3u4Os=
Subject key identifier:   CE:E2:ED:4A:EB:1E:76:83:E7:A3:C6:46:EE:92:AA:BA:EE:63:50:05
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer:       /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial:       01A11DBF44FF31E945FE4EF6ABB6D156F09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number:          19D2
Signing time:             Thu 08 Oct 2026 23:00:36 +0000
Manifest this update:     Thu 08 Oct 2026 23:00:36 +0000
Manifest next update:     Fri 09 Oct 2026 23:00:36 +0000
Files and hashes:         1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
                          2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
                          3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: jk6q+RhWLQX0xSbxM3nl6B/sNP4z0hQpX82o/kCdmis=)
                          4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
                          5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:bf:44:ff:31:e9:45:fe:4e:f6:ab:b6:d1:56:f0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
        Validity
            Not Before: Oct  8 23:00:36 2026 GMT
            Not After : Oct  9 23:00:36 2026 GMT
        Subject: CN=cee2ed4aeb1e7683e7a3c646ee92aabaee635005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:06:59:ae:2d:2c:63:1f:f8:d8:ba:98:10:
                    25:08:fa:85:18:1f:55:b8:15:0e:00:8d:b4:73:49:
                    8e:eb:1e:f2:75:bd:8c:6e:10:5f:ad:16:8e:2d:06:
                    70:1c:e2:6a:ff:c2:b2:45:27:b6:a8:e8:41:46:ed:
                    c0:a4:ca:ff:3b:3c:5e:9d:16:ba:f6:b0:e2:5f:c9:
                    00:f1:ab:72:48:37:01:26:ef:53:94:f8:21:5b:31:
                    f1:0f:ab:e8:61:f6:db:49:00:8d:99:00:14:b3:97:
                    b5:4c:8f:90:3d:36:46:42:6d:9e:64:f4:ae:36:2e:
                    0f:07:00:f4:3f:2f:7e:13:a1:2d:93:96:e6:59:e8:
                    5c:09:53:57:e9:8f:dd:bc:f2:44:18:5b:05:67:e0:
                    54:87:dd:20:dc:db:80:98:4b:d4:f5:1e:b2:2c:57:
                    8f:2b:25:76:c8:13:29:58:ec:4d:f9:a8:2b:79:00:
                    38:8e:93:6b:a8:a8:c7:77:c6:dd:36:5b:96:e8:b0:
                    b5:44:ab:e6:a4:c9:d3:d7:79:eb:11:f4:09:2b:9d:
                    28:7c:3f:07:da:74:f7:15:59:a9:6d:4b:15:06:d3:
                    03:1d:ea:10:66:a4:96:5a:92:6d:16:69:7b:6b:4a:
                    23:de:f6:d4:1d:17:70:00:a1:15:01:d9:48:8b:8e:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E2:ED:4A:EB:1E:76:83:E7:A3:C6:46:EE:92:AA:BA:EE:63:50:05
            X509v3 Authority Key Identifier:
                keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:fe:ed:bb:be:f3:c2:88:5e:00:c7:40:c0:be:53:ff:4f:e8:
         d1:0d:5d:9e:0b:ad:7c:c4:a3:ad:f5:3e:a3:c4:23:5b:d6:77:
         0c:b3:45:7e:47:cf:c6:7e:cc:cc:71:0c:ad:59:40:0c:e9:09:
         0f:03:40:b0:15:86:10:a8:57:38:48:82:c5:d7:7b:61:ab:23:
         09:41:db:98:70:e3:f6:6c:76:54:eb:27:ab:10:27:ae:87:10:
         ad:51:c9:87:1a:cc:04:83:d0:e6:51:69:71:45:f8:68:ce:62:
         a2:54:0d:1b:9b:bd:7a:4b:04:3f:6e:0c:aa:6b:c3:12:37:25:
         c4:fb:88:85:d9:6c:ce:12:25:17:90:5b:91:4b:78:34:00:25:
         17:09:89:98:72:60:f2:a6:36:1d:dd:56:f6:16:32:27:2c:b7:
         f2:62:9e:07:c7:17:93:69:e1:c8:4b:9d:f8:8e:c4:73:36:27:
         be:76:f7:98:2a:49:ef:8c:58:fa:35:f6:9b:b8:d5:69:60:e9:
         12:4c:13:5d:d2:b5:26:8f:da:68:44:8f:30:0e:b6:07:61:32:
         d0:10:a5:7b:e5:b9:ee:16:58:c1:ef:d1:b3:ba:b4:93:0c:f6:
         76:ed:5a:00:bd:b8:9a:2d:b7:95:87:70:e3:76:72:a9:f9:c2:
         59:6f:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:28:16 2026 by rpki-client