Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File:                     iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier:          yG9ZOrNeNB8Hy5mYCaPnvZnZhWZVCSVd19jdMR3I/9c=
Subject key identifier:   61:5D:7C:42:AE:5F:B8:5D:F3:D0:34:30:88:72:7F:70:D2:D9:F7:75
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer:       /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial:       01A0EBC0F5A2D35134E7E3202ABDFAE459CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number:          16AE
Signing time:             Tue 29 Sep 2026 06:01:26 +0000
Manifest this update:     Tue 29 Sep 2026 06:01:26 +0000
Manifest next update:     Wed 30 Sep 2026 06:01:26 +0000
Files and hashes:         1: 0POn4eiSe4D7lLX8DICoyCNVffg.roa (hash: IuTOIfnYnKgQ1QMnujowbH+xUlcXahzENOK89qB7q6Y=)
                          2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: /a1fpWGx9IsvXGLslzsfzXr1weiibDKIZCm4BfwJs18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:c0:f5:a2:d3:51:34:e7:e3:20:2a:bd:fa:e4:59:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
        Validity
            Not Before: Sep 29 06:01:26 2026 GMT
            Not After : Sep 30 06:01:26 2026 GMT
        Subject: CN=615d7c42ae5fb85df3d0343088727f70d2d9f775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:75:79:1e:4f:19:5c:40:14:7a:54:58:6b:
                    63:68:f9:17:49:7e:b8:eb:a1:1c:bf:ad:3c:0e:ec:
                    f9:b5:e7:12:d2:f4:02:10:c7:fe:24:ee:26:a8:f6:
                    6c:99:44:19:ad:cc:19:bc:48:e4:3b:c8:04:be:58:
                    12:37:5a:d7:30:b5:0a:8c:e3:1c:a8:56:1d:89:f0:
                    d5:cc:44:c9:d0:fc:05:23:7c:4f:2e:12:50:d4:d1:
                    86:79:39:03:9b:5a:0b:ed:de:f4:5c:00:ff:03:b4:
                    d3:3f:ba:e7:bb:39:8e:a2:13:63:ee:19:16:36:7e:
                    d4:8f:2a:61:75:71:95:4c:fe:b7:46:ee:e0:fa:d9:
                    b0:a5:cd:8e:f3:eb:5c:b2:8e:db:94:36:c1:05:ef:
                    8b:cf:c1:de:94:46:d3:1e:ff:4c:91:04:c5:71:7a:
                    2f:69:1b:05:83:53:f8:c5:c7:24:c1:ab:d0:c3:fa:
                    8f:a3:25:7f:5b:8f:b9:88:af:bb:0e:e7:93:a3:2c:
                    cc:a4:f9:14:98:dd:5b:1e:88:11:33:a3:cc:46:85:
                    6d:f6:d2:63:6c:ca:6d:dd:08:ae:3e:e3:3a:dd:01:
                    cf:57:2a:c4:64:0e:15:da:6b:94:ec:75:ed:38:94:
                    a0:d5:51:eb:c2:ac:33:e8:c4:d7:77:5b:9a:24:33:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5D:7C:42:AE:5F:B8:5D:F3:D0:34:30:88:72:7F:70:D2:D9:F7:75
            X509v3 Authority Key Identifier:
                keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b5:27:15:a9:c3:1f:3a:ef:62:ca:ce:be:5d:11:c1:df:7a:
         dc:43:b9:95:30:a5:92:28:d6:af:5c:77:c7:48:6d:74:f4:b4:
         04:29:a7:0b:93:23:39:b5:e9:bd:e6:d2:da:52:db:46:da:ff:
         41:2a:da:28:c4:95:f2:61:f9:39:75:61:df:c3:1b:d6:87:20:
         7d:77:a0:27:b6:d3:b3:30:7e:cb:29:84:c2:a7:f3:cf:04:0e:
         07:02:56:22:c2:bc:9c:e8:f9:d8:31:a8:3e:65:48:79:59:9a:
         d6:0e:6e:dc:e0:05:a2:1b:e5:a3:b8:6c:8d:c7:8c:d5:f6:be:
         83:5a:88:bb:e5:bc:66:85:00:c6:18:4f:be:be:a4:cf:74:e9:
         1e:e5:09:0f:7c:37:4a:17:da:d5:56:15:6f:37:0d:ef:a0:96:
         e8:88:77:9e:0e:45:ae:e7:e4:ed:96:4c:da:bb:70:b6:ed:a0:
         1d:5b:4f:18:d3:9c:04:e9:35:df:e2:5c:4b:1b:57:29:8b:11:
         33:69:51:17:51:01:32:97:60:b4:0e:58:24:c5:de:3e:68:55:
         0e:28:e2:e0:31:ac:05:a3:c1:06:36:bd:40:5c:b0:84:ec:2b:
         a0:e3:d3:d9:d1:e0:89:b6:36:2a:42:39:5d:d8:88:a3:34:9b:
         06:93:82:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:27:39 2026 by rpki-client