Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File:                     iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier:          vRYlLt57zqCshDlw6Ch54VnylPZv0x2Rq9B58O5+DaA=
Subject key identifier:   1F:CB:6F:36:0F:BC:81:85:3F:2C:74:40:42:1E:84:52:40:4C:01:0D
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer:       /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial:       01A0F8AA0D108DC88CC1225F6406C7874EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number:          1A14
Signing time:             Thu 01 Oct 2026 18:11:29 +0000
Manifest this update:     Thu 01 Oct 2026 18:11:29 +0000
Manifest next update:     Fri 02 Oct 2026 18:11:29 +0000
Files and hashes:         1: _96Euvo05bQiTFxZBzxImx3S1Qo.roa (hash: 8USkhhFs2laMuIgluBHy8qGwUIcnnc8iCXVDlvT0OTc=)
                          2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: A5fROS5J7cEBC7yOlPxAHh4cvEJhzrR1jangHJt8CxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f8:aa:0d:10:8d:c8:8c:c1:22:5f:64:06:c7:87:4e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
        Validity
            Not Before: Oct  1 18:11:29 2026 GMT
            Not After : Oct  2 18:11:29 2026 GMT
        Subject: CN=1fcb6f360fbc81853f2c7440421e8452404c010d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:0f:bb:91:ad:b3:de:00:16:79:f7:7b:d8:
                    1a:d7:f2:65:8f:89:26:a1:4f:dd:cc:d3:be:88:e9:
                    ac:8c:76:9b:66:f1:ec:de:a8:a2:6a:bf:0f:ab:f2:
                    e7:bf:9a:b2:ad:32:9d:a5:d6:50:9f:44:e4:db:13:
                    84:16:55:22:34:2d:d4:b5:53:c4:92:78:41:49:c7:
                    b0:a5:67:80:71:16:c8:6b:e7:f1:53:f0:d9:af:33:
                    1e:5a:a0:fe:01:5a:97:c8:20:1c:91:98:f5:19:f8:
                    44:c8:31:be:0d:67:bc:be:d4:ef:da:74:17:a8:89:
                    21:47:74:aa:fd:2b:91:00:cb:5e:40:66:c3:a2:17:
                    3c:a8:43:04:45:f9:da:77:5c:b4:79:30:2b:31:7c:
                    2f:91:66:6c:9c:70:2a:f0:20:61:aa:f7:60:bc:72:
                    c9:f9:bd:28:25:6f:98:a6:9b:30:a9:34:0d:0e:59:
                    f9:ac:80:1d:c9:97:ac:1c:42:ad:1f:1a:a9:a1:5a:
                    d5:ee:6e:4d:36:1d:21:ef:17:ac:f2:2d:1a:0c:e4:
                    02:f0:18:73:97:30:77:89:5d:fe:44:d6:96:9b:b2:
                    12:4c:52:67:9a:91:48:56:8d:40:28:12:c9:48:60:
                    78:31:a2:79:0e:1e:21:97:d3:2b:63:80:b0:24:8a:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CB:6F:36:0F:BC:81:85:3F:2C:74:40:42:1E:84:52:40:4C:01:0D
            X509v3 Authority Key Identifier:
                keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:23:3e:1b:b0:2b:5a:53:2e:88:64:0d:f8:ec:61:cc:de:b7:
         2e:bf:9e:77:27:93:e1:c8:af:c1:28:b4:ed:a9:21:a6:72:64:
         7c:59:f6:d5:77:51:b3:b3:25:5b:4b:98:21:bd:09:11:e0:12:
         15:ad:5d:17:40:38:ae:1f:32:5c:28:e2:f7:45:ee:32:a2:15:
         0f:31:65:7f:ce:16:93:f1:8e:25:ec:f1:70:19:fe:2e:7b:9d:
         c8:54:51:35:1f:8e:df:55:75:4b:88:f0:e8:ae:da:1a:43:1f:
         d7:03:62:e5:ef:43:45:b0:2b:76:d5:7f:03:62:49:96:45:e8:
         35:e9:88:f1:cf:de:07:f7:bd:44:82:b7:90:7e:ff:4a:97:1a:
         3f:47:15:15:a6:fa:31:0b:6b:f3:a1:55:fa:9b:0d:26:af:0b:
         e5:48:0f:40:3d:0b:68:3b:1d:0e:be:e3:50:2a:e7:cf:58:44:
         2e:28:cb:dc:3a:0d:df:97:2e:88:a8:49:67:cf:50:91:89:6e:
         83:06:86:0c:fa:4a:b5:21:d8:04:13:f1:5f:b5:9d:8e:03:b1:
         95:86:e8:2a:88:e1:58:ee:03:c0:76:69:f0:9b:ac:fa:d7:3f:
         9b:9f:d1:e8:24:df:e8:48:f7:4f:1b:52:be:ec:74:88:45:63:
         9e:f1:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:33:29 2026 by rpki-client