Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          gAopn/cZvJPk93KjRwxWFty4T8FIBPebLcSJtdZZGSM=
Subject key identifier:   29:10:81:25:FB:76:3C:24:97:1B:C7:1E:0F:D2:32:7B:AE:51:DE:F9
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       01A0D91777C57127FBDF8FE47843A31471C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          093B
Signing time:             Fri 25 Sep 2026 15:03:08 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:08 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:08 +0000
Files and hashes:         1: 8Ljz3seCOU0SNV0gsb7nbyE1us8.roa (hash: 5mxn00L/BkHAVIffiKEwefaUdNGKUinwbPLnGWN/DNs=)
                          2: HTNIDhfSROtaHMuo_vWuWis3hqY.roa (hash: RQQdIjVdjQlrkYAZGuleXhNiBkw7L08DLK2ngoHAF8E=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: ODEQp1pedMNLMvlYksJVioVCFSA+5VtNV5FvEDqNKYc=)
                          4: LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa (hash: Bfa23AAQWStpV7GkB8TThtChQsiaP0XNU0Hs970PLeI=)
                          5: OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa (hash: prRMihbXIXK3A+UL2foFns/7v1HOYLiNh02wiqqOfKo=)
                          6: QWEGxPaeYQn0uBOxZiupBOKlr0U.roa (hash: GLwyZ+wAbuSreUejAWX/k5Bcy9X7pS8PLxayzPw9L8s=)
                          7: fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa (hash: MVq6Psg4hS5MltjuluEalJmzG7hJZP0WRHHEPcHhyK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:77:c5:71:27:fb:df:8f:e4:78:43:a3:14:71:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Sep 25 15:03:08 2026 GMT
            Not After : Sep 26 15:03:08 2026 GMT
        Subject: CN=29108125fb763c24971bc71e0fd2327bae51def9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:d7:cb:fb:79:22:10:3e:0f:09:45:b6:0c:
                    a0:6a:5f:12:4d:48:0e:94:85:57:60:20:c8:36:de:
                    b0:d1:9f:bd:61:6f:56:d1:4e:44:a4:67:1d:80:3f:
                    e9:f3:c2:f7:f2:d8:42:c0:b9:d2:9e:41:29:55:04:
                    9a:29:d4:96:c4:0d:a5:ae:8c:88:9a:f7:98:c1:83:
                    f5:77:86:2e:7c:ee:8a:7c:bf:1b:6d:5e:e7:77:40:
                    79:07:b1:b6:f9:fc:b5:e7:41:51:ab:3d:fc:ca:ef:
                    81:2a:c2:09:48:6b:4d:7c:a8:c0:9b:36:1f:e5:fd:
                    64:fd:91:fe:43:eb:05:2d:e6:27:86:44:f6:18:91:
                    ae:0d:5d:06:96:40:1b:b0:fa:ad:fa:6a:dc:89:b1:
                    6f:b2:76:a1:d9:66:bd:e2:02:44:aa:5d:68:50:d1:
                    3e:ba:c9:35:7b:40:80:e8:c6:11:10:78:71:56:3e:
                    c5:12:0c:aa:09:5f:b7:0b:d1:17:ef:91:34:3d:4c:
                    db:ad:1a:71:e0:44:38:3e:9d:78:2c:58:98:f4:28:
                    8b:2f:87:36:89:44:d1:8c:85:5e:9e:e3:42:62:a1:
                    66:09:8e:29:40:ec:57:77:ce:27:1d:84:1e:6e:eb:
                    3d:52:59:45:22:64:59:4e:6d:dc:95:62:cc:96:c4:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:10:81:25:FB:76:3C:24:97:1B:C7:1E:0F:D2:32:7B:AE:51:DE:F9
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:99:21:19:d4:6e:70:11:64:a1:f0:ca:1f:c3:4e:39:75:11:
         d6:fb:77:05:67:15:25:6d:fd:7c:54:49:e3:c4:d8:ca:9f:a3:
         2e:2b:d4:25:29:d3:40:41:89:2f:c3:71:74:50:fb:f0:ca:dd:
         f6:1a:32:64:1d:89:e4:5b:f7:93:3f:e5:c7:0d:24:7a:6f:fb:
         3c:a4:79:81:40:96:ad:be:ef:98:55:27:e7:96:36:51:17:ca:
         fe:dc:a6:ea:88:ea:59:cd:ec:12:d0:d5:62:55:fd:a6:24:70:
         a6:b9:73:f6:2f:85:dc:d6:b3:ce:22:a2:7b:30:97:7f:92:da:
         f9:01:4e:c5:33:a1:b1:c3:77:b0:99:38:50:6d:00:20:2b:d1:
         29:dd:af:0c:6d:32:6e:c1:fb:7e:d4:10:2e:cd:9d:22:7d:e8:
         ed:34:4c:a4:dd:1e:5c:21:f7:e1:cf:ed:4f:25:27:ae:bc:8d:
         c7:cf:27:f5:d8:a3:1b:7a:81:a0:1c:13:95:b8:b2:a8:d4:f7:
         ba:19:3c:57:e0:91:f1:e0:0b:4f:e7:b8:a6:c3:cf:26:94:b8:
         5f:5b:98:f1:3f:ac:cd:4f:3a:d4:aa:a7:7a:f0:5e:af:66:15:
         cc:a0:72:33:93:36:f6:c3:1d:f6:7b:bf:b8:69:8d:96:12:f8:
         a7:9e:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:41:43 2026 by rpki-client