Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          Lnhy0X2JgtQ2U6ljaL+0Q2tIaxVdR5brT8TasaP2K8A=
Subject key identifier:   C5:C8:09:C4:B1:FA:56:38:64:36:BD:D2:E6:B2:E6:00:53:26:A2:13
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       01A0E0617946E638657F04828EFE870C33E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          137E
Signing time:             Sun 27 Sep 2026 01:01:19 +0000
Manifest this update:     Sun 27 Sep 2026 01:01:19 +0000
Manifest next update:     Mon 28 Sep 2026 01:01:19 +0000
Files and hashes:         1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
                          2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
                          3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
                          4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
                          5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: P6XTg8rTsYIll7hbHHjOvAawKahYzeHrMfCT3RQBL+c=)
                          6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
                          7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:61:79:46:e6:38:65:7f:04:82:8e:fe:87:0c:33:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Sep 27 01:01:19 2026 GMT
            Not After : Sep 28 01:01:19 2026 GMT
        Subject: CN=c5c809c4b1fa56386436bdd2e6b2e6005326a213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:6e:9f:c4:94:7e:d1:fa:1c:3d:f5:35:59:
                    4d:93:e2:1f:20:b2:5c:8a:30:c8:c5:13:12:fb:a4:
                    f0:d4:5e:3c:9e:d4:06:b2:d5:5e:3b:d4:42:a6:6c:
                    73:fc:6e:d7:95:a3:23:1b:b0:4d:b3:b1:30:a9:02:
                    52:31:80:63:12:b5:dc:b7:d2:99:86:07:92:a3:d6:
                    3c:73:3c:fb:9d:d5:07:bf:9b:fe:5d:3f:61:70:55:
                    f8:82:f8:83:28:41:78:d9:11:63:51:e0:18:a9:c4:
                    2f:73:ef:43:d4:aa:4f:7e:f9:f0:f2:ce:fc:79:6f:
                    96:19:ad:cb:c1:a1:16:de:ff:0c:57:c5:ad:b4:e6:
                    0d:14:60:bb:dd:11:fb:e7:d6:c1:f3:97:36:97:96:
                    f0:75:11:69:e2:8f:c2:00:53:56:27:ac:c0:20:38:
                    9e:fe:86:af:e8:62:69:16:c6:32:44:33:a3:77:ca:
                    76:2b:d3:63:c3:2a:1c:45:94:bc:a9:e6:1f:b8:ea:
                    53:45:77:ac:f8:64:a6:0b:5a:77:35:1f:91:08:8d:
                    3e:d6:18:5b:f3:26:ed:c8:f7:bd:58:03:c9:6d:6f:
                    49:ca:1b:21:eb:79:10:cc:1b:4f:de:98:30:ef:0a:
                    be:ca:6d:5e:f1:ba:18:07:2e:73:43:e0:e5:06:16:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C8:09:C4:B1:FA:56:38:64:36:BD:D2:E6:B2:E6:00:53:26:A2:13
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5f:bd:44:93:58:65:79:99:53:0a:fe:d7:ee:b8:ea:88:d0:
         04:de:ca:ae:03:04:34:47:76:94:ff:08:76:ea:92:f4:7d:19:
         08:57:cb:07:5d:34:be:7e:cc:db:71:77:f3:52:cd:c1:3a:2d:
         f7:9b:a6:50:5e:49:44:c5:e8:8e:aa:ab:72:14:2a:a9:36:cc:
         e6:62:c3:62:96:31:96:a3:e7:a0:6f:63:ae:1c:29:89:83:51:
         0a:0f:eb:8e:28:67:66:32:42:a8:42:85:01:b4:59:b5:6e:f0:
         c5:6a:ed:7f:61:f8:69:ad:94:cf:b6:8e:3d:71:bd:9f:e6:1c:
         ef:7c:00:ed:9c:7c:07:58:cd:86:b2:65:67:12:eb:62:1d:1b:
         eb:26:d9:3e:98:90:29:9e:65:bd:27:01:09:36:78:ee:dc:75:
         43:30:3c:80:26:a3:63:c9:6b:35:5d:4a:eb:59:1a:b0:13:ad:
         cc:8c:29:3d:d2:a1:68:f6:83:76:90:d5:67:24:a6:43:49:f9:
         5b:a6:ef:6c:63:a8:e6:c0:a9:57:75:e3:68:33:8e:8a:d5:e8:
         87:cc:6e:0a:48:c5:82:2e:4f:6f:26:f1:0a:cd:ce:e9:ab:3d:
         52:19:1c:78:59:69:dc:ca:c0:4f:27:65:2b:1c:a2:68:fd:97:
         30:c6:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:35:59 2026 by rpki-client