Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
File:                     IodymNrl1aO-q8oW6S0aFB6Uhic.mft (raw, json)
Hash identifier:          //rZEz92hHgJ+c/iNNa86euZ0JuTRqV2pH+0X9ECt/o=
Subject key identifier:   16:B1:FE:15:71:0A:E1:88:64:BC:E1:3F:CC:A8:A7:C6:C6:5A:8A:17
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Certificate issuer:       /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial:       01A0DB723F29EFDF036AEF4805B0C2C5FFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
Manifest number:          089B
Signing time:             Sat 26 Sep 2026 02:01:32 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:32 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:32 +0000
Files and hashes:         1: IodymNrl1aO-q8oW6S0aFB6Uhic.crl (hash: JaNmuNQmi05U2opKZ4q27RG72VeMPudgjsZ5QgDA1kY=)
                          2: UHPrs3fTWAGncbw93gObHz404mM.roa (hash: Ly87OJ3bcfOFr+MaCdeJuDqxDXCXJ38vySRXLeTObdM=)
                          3: WbG6TcgYWYbVPSXH4DBwBfUrNq4.roa (hash: MEHeYN4zLk7L6gRGwHOucCpdQci+lV7vAs27KrvMVDE=)
                          4: endTU74Pqruhj_u-GscX6eV9TyY.roa (hash: zGjt6sn8OMhgDdwNoCulMYtFuT4HYmb2TRwx99WkTWQ=)
                          5: lRsRyKhA42mUZ8hS2rpLHm_3tDE.roa (hash: 4WHzRlXZtSPth79yxsiKoFHqj8Ld8gxycNtzoxgNA00=)
                          6: spwZIDgAexUv2FMzIVJu6fx4n-o.roa (hash: S+/uYIng1yCaxFbxy+y3ycIp+nBkmnExp9c8EhB5PxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:3f:29:ef:df:03:6a:ef:48:05:b0:c2:c5:ff:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
        Validity
            Not Before: Sep 26 02:01:32 2026 GMT
            Not After : Sep 27 02:01:32 2026 GMT
        Subject: CN=16b1fe15710ae18864bce13fcca8a7c6c65a8a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:d5:69:61:56:81:90:83:ef:90:c8:98:72:
                    a6:74:d5:2e:e2:ab:54:83:98:51:89:e5:3c:4d:98:
                    fe:37:5c:a4:ed:54:d0:3a:9a:56:b0:7f:fa:e7:60:
                    70:fa:e7:81:19:f5:f6:11:e4:77:f6:12:df:e2:7d:
                    be:e4:72:d2:44:2b:9c:5a:57:06:ae:80:3f:19:2f:
                    8a:e9:9e:70:64:74:b5:72:31:f1:8f:8a:ff:fa:f0:
                    1d:c9:b1:49:fa:df:9b:78:35:0b:75:11:5f:4a:89:
                    04:9b:a0:99:80:d8:47:fb:24:63:10:f2:99:73:f3:
                    bb:c4:d8:0f:86:fe:0c:1e:be:cc:b4:08:18:dd:39:
                    88:ff:62:1a:05:22:9e:19:83:47:6b:73:81:e3:f9:
                    ac:d4:50:c9:dd:9c:08:ba:79:d4:1a:aa:65:bb:53:
                    83:54:16:04:e2:1f:79:58:75:24:68:79:34:ce:8d:
                    27:9c:c6:9b:a4:3a:47:70:53:db:ec:f1:84:bf:32:
                    ce:bc:ba:5c:12:6d:97:a0:f5:55:85:13:73:99:b1:
                    94:26:d2:1c:3e:cc:b4:f0:4f:ac:72:43:6c:95:51:
                    f7:99:5b:c5:6f:c0:81:98:44:b2:d7:ea:96:cc:f4:
                    1c:3d:ee:05:bf:ee:2b:a9:18:2e:6f:98:ff:88:8d:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B1:FE:15:71:0A:E1:88:64:BC:E1:3F:CC:A8:A7:C6:C6:5A:8A:17
            X509v3 Authority Key Identifier:
                keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:30:93:a3:34:da:2f:a3:df:07:96:db:a1:d1:0c:2a:b5:24:
         97:7e:90:59:64:f7:b8:3a:22:9d:5f:7e:a3:5e:5b:9b:6a:f1:
         0d:bf:40:a3:0d:0e:6f:c2:ca:11:3e:6e:de:69:fa:0f:46:aa:
         3c:49:95:4a:c4:c9:91:3b:24:1f:5c:a0:67:94:4c:8e:80:70:
         be:1b:a6:fb:19:1d:18:b3:87:a8:68:d4:70:2c:8f:59:cc:b8:
         50:ff:80:93:01:b4:a1:26:a8:bf:c1:09:47:97:73:7e:5f:2a:
         af:8b:07:73:5d:34:c8:fd:fc:bf:4c:2c:4c:59:a3:e1:13:ea:
         65:25:09:a3:b7:67:36:78:64:f5:53:f4:61:52:d9:ad:08:4f:
         e9:ae:92:78:a2:2d:da:40:33:df:5c:2d:ed:d6:e2:7d:ac:a8:
         fe:31:f5:2e:a7:e4:82:da:78:22:c4:69:cb:8e:8d:16:d3:c8:
         8d:51:a6:a1:ea:f9:b3:8a:b8:4d:65:c7:11:42:d7:98:47:75:
         e5:88:b4:73:a2:ac:b0:ca:ac:88:ff:93:b1:4a:71:e6:ae:65:
         09:e3:d8:48:1f:45:61:23:52:53:2c:25:7c:ee:1e:fa:f7:ba:
         25:ed:b5:4b:13:06:1a:0b:04:70:08:2e:cf:d3:77:0b:b7:26:
         1d:fc:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:23:34 2026 by rpki-client