Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File:                     l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier:          Z89oGzRvHBeLNntFhhEdBcab1eH/5qXwIeNCeXMn/tE=
Subject key identifier:   97:11:83:2D:D5:D9:23:BE:5A:B2:C7:50:1B:D3:14:45:94:57:3E:17
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer:       /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial:       01A0C9D996262C98FD5D1FDA049EEE46033B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number:          1860
Signing time:             Tue 22 Sep 2026 16:01:15 +0000
Manifest this update:     Tue 22 Sep 2026 16:01:15 +0000
Manifest next update:     Wed 23 Sep 2026 16:01:15 +0000
Files and hashes:         1: MIsbp1kxFIWX0eWKv3mGuqynsv8.roa (hash: qC1LIihT0w6vmPGTbCFgV9ARFX49AGn21fpjcpi2tdE=)
                          2: S9YM-g2WnmeVKMvqwcx7fs6MlSo.asa (hash: b3P+Vt9qPAdwW/UOZpdus/kmkrfhIAwmiOm6TTdFFgQ=)
                          3: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: gTqzYLm/hFlkj+49UeS0smKBYc46BLJZWP1yNTWrUCI=)
                          4: tFoNYgqUc7lOlyJlEHaeuwrNreU.asa (hash: TB8xtH+5ivwYr8/Xx7RZIde5FrCInx9y32IF6KBz+As=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:96:26:2c:98:fd:5d:1f:da:04:9e:ee:46:03:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
        Validity
            Not Before: Sep 22 16:01:15 2026 GMT
            Not After : Sep 23 16:01:15 2026 GMT
        Subject: CN=9711832dd5d923be5ab2c7501bd3144594573e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:ce:37:35:39:27:0f:80:f8:42:f8:d3:81:
                    a8:12:e4:dc:9a:0a:e4:92:5e:7c:9f:46:af:2b:4e:
                    ce:38:30:8c:68:84:f6:58:81:59:e0:af:70:0c:1b:
                    89:68:53:91:7c:9b:46:04:25:c8:a8:77:d1:04:a8:
                    83:b8:58:df:02:1f:ad:4c:95:16:df:da:44:82:84:
                    ce:f1:2e:92:7d:1c:a5:f0:cd:98:38:cb:e0:ed:24:
                    92:42:5a:eb:a2:da:f3:ef:7c:dd:5f:94:dc:d7:82:
                    be:bf:f8:a7:60:18:fe:df:b4:22:15:c2:4a:fc:a0:
                    1b:d1:6f:eb:a0:4e:37:00:62:a3:4f:08:6f:c8:72:
                    74:c3:8f:7d:ce:86:e2:65:0c:67:d3:26:83:2b:ae:
                    4c:69:32:ef:6a:48:82:79:39:58:cb:8d:27:58:b8:
                    14:fc:39:6c:f3:b5:47:60:e4:dd:11:c2:98:9d:af:
                    03:d2:be:30:54:34:1f:1a:26:6b:71:87:94:c9:7f:
                    77:2c:c7:d1:04:d7:9b:bf:d5:2f:e0:ec:50:11:ba:
                    d5:b5:ad:8a:eb:37:0f:40:14:49:2b:b1:74:66:69:
                    7e:78:9b:6e:8d:c1:5d:04:65:fe:a0:1d:1f:c3:7f:
                    a0:a0:40:81:31:ce:a9:21:d0:e6:22:48:f6:b5:a0:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:11:83:2D:D5:D9:23:BE:5A:B2:C7:50:1B:D3:14:45:94:57:3E:17
            X509v3 Authority Key Identifier:
                keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:78:2f:f1:5a:c2:6a:fb:d8:7d:47:ab:32:56:f4:0c:ad:
         83:20:e5:07:59:ab:11:d8:68:8d:f7:c4:dd:06:82:dd:bd:1d:
         1c:0f:d9:24:f9:74:23:66:f1:ec:d6:69:fe:45:d1:53:0b:40:
         5c:8f:fe:12:52:43:b2:ad:8b:4c:7a:40:43:a4:95:6a:e9:20:
         10:8a:80:03:f6:47:db:a1:17:72:b8:29:ba:e7:1d:cd:71:e4:
         13:bc:e7:2a:57:24:fd:8a:6d:1f:c0:ee:f2:d2:e4:f9:bb:7a:
         3a:b3:a8:7b:69:3a:95:0c:b1:a2:b7:24:09:d2:05:d9:83:1c:
         3d:10:37:f6:1a:37:19:6b:de:cd:0a:d3:bd:06:6b:61:d6:04:
         fa:89:50:46:b2:27:8f:6c:e9:52:65:e7:2d:d0:52:07:e1:c1:
         14:65:c1:23:b3:8b:a2:3b:7b:73:3f:ed:c4:1f:53:d3:1f:ce:
         b2:2b:c5:8e:86:64:7a:36:5f:31:52:d1:25:80:d6:2b:de:bf:
         ae:99:a5:cc:36:2d:13:01:7c:6b:dc:01:a6:a9:6f:73:8d:4c:
         81:d5:e3:ed:26:89:d7:bd:c0:2f:2f:b2:9d:4b:eb:04:28:95:
         b7:09:86:db:46:c2:05:47:c7:8f:b0:f7:ed:7b:a4:77:0e:31:
         76:a6:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:15:12 2026 by rpki-client