Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File:                     iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier:          uysX4hMgP7eBRmez5lx2ZDRy4zBM+DctMQnuUkKpfbg=
Subject key identifier:   C3:48:02:4C:F0:A6:E1:B9:9F:27:2E:4D:85:0D:57:73:31:D3:5E:8F
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer:       /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial:       01A0D315364C14609EA99C39B871F0CF7C86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 11:02:57 +0000
Manifest this update:     Thu 24 Sep 2026 11:02:57 +0000
Manifest next update:     Fri 25 Sep 2026 11:02:57 +0000
Files and hashes:         1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
                          2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: iDKlT10r83o4067w061p8ByiiZZWEt28VibpirtiMkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:15:36:4c:14:60:9e:a9:9c:39:b8:71:f0:cf:7c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
        Validity
            Not Before: Sep 24 11:02:57 2026 GMT
            Not After : Sep 25 11:02:57 2026 GMT
        Subject: CN=c348024cf0a6e1b99f272e4d850d577331d35e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:e9:cd:45:95:bf:1c:f7:8b:87:b7:7b:65:
                    ae:61:19:20:92:7c:e1:af:5a:9e:a7:e4:76:6d:a3:
                    37:ab:5d:f9:41:ab:e3:f5:43:82:99:df:16:57:71:
                    56:77:49:35:4d:88:30:3b:26:88:8f:19:3e:c6:96:
                    72:f4:33:fb:83:e3:46:6c:c8:c9:2c:c8:98:35:0c:
                    c7:d2:c5:55:05:c5:fe:50:5a:90:6a:d3:64:5c:4e:
                    64:b5:ca:bf:d6:73:1d:49:1e:57:07:51:9c:42:6d:
                    b3:0d:ab:e5:4d:7d:6c:52:20:b1:cc:8c:28:30:ba:
                    17:f7:39:cb:b5:fa:08:18:73:fc:ca:2f:34:56:36:
                    16:8c:e9:21:1c:87:ce:5b:44:d5:31:18:88:eb:2a:
                    4e:f2:72:b3:13:69:f6:85:4e:a7:f5:e4:e7:f9:6a:
                    9e:78:ae:66:8f:a6:48:40:73:ae:b9:91:cf:c3:12:
                    31:7b:a6:7a:55:a4:ad:e9:31:f9:d2:d8:e3:b3:65:
                    7c:60:5b:7c:50:e0:5d:53:3a:0f:ed:b6:47:52:cb:
                    cb:ee:c5:87:16:6b:78:b8:0a:fe:22:2c:27:0e:84:
                    43:91:ad:3c:ae:a5:df:48:df:c8:e7:49:dd:81:66:
                    3e:2b:2d:d3:52:76:80:e2:69:54:f3:8f:48:40:57:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:02:4C:F0:A6:E1:B9:9F:27:2E:4D:85:0D:57:73:31:D3:5E:8F
            X509v3 Authority Key Identifier:
                keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:10:de:ba:3a:ed:d1:0f:01:cf:ce:0b:48:f7:1d:4a:80:3c:
         2f:02:e8:db:1b:f1:3c:06:b9:ab:e9:3a:32:6d:8c:bc:3b:c6:
         f4:12:d0:06:09:a3:7c:a6:9f:55:6d:34:0d:56:bd:44:94:a8:
         4b:1e:17:60:5a:12:54:16:13:32:49:6f:9d:e8:db:89:6f:fa:
         f9:1a:65:a5:2b:a7:81:f4:ea:4c:bd:09:ec:d0:9c:7b:99:7b:
         2e:8a:7d:39:29:d8:31:5e:91:4f:69:d5:38:f4:a3:07:52:e9:
         d7:00:25:4b:bf:b1:46:5c:78:79:eb:81:06:9b:8e:2f:12:ad:
         e1:2a:b5:aa:e1:72:b4:bd:8c:27:ca:75:f1:eb:e2:ee:d7:ab:
         b4:42:12:8e:b9:df:75:00:76:88:db:fb:fd:98:62:63:43:4f:
         43:7a:00:3d:13:ab:8f:17:ee:83:17:5d:25:36:8c:f6:e6:98:
         4c:b5:ec:06:50:19:e9:3f:36:f8:4d:ff:33:38:c8:7c:c7:3d:
         30:ae:6f:0c:0d:ea:80:de:a0:4c:82:fe:f1:2b:0e:63:8b:d9:
         30:7e:97:06:12:2c:37:76:98:4a:3a:ef:96:95:01:d8:bf:70:
         27:f3:c4:21:f0:1c:2a:88:15:72:1b:e8:8d:ae:ec:26:81:2b:
         ce:57:5d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:20:35 2026 by rpki-client