Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          Y5Oj3KwqkGHghZ0+xhghXmPaBsCnR2ChVt8pG92A8uU=
Subject key identifier:   0C:AB:E1:F4:4D:EB:B0:04:02:7B:A2:2C:5F:5D:96:58:B1:41:C3:E0
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       01A0CEFEFA797983B1FE65B4DB076A1F5CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          07B1
Signing time:             Wed 23 Sep 2026 16:00:11 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:11 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:11 +0000
Files and hashes:         1: EdRGRNAOunRYG7-_JByQf_-npzI.roa (hash: hCZ1ruXMfJaNp5NsNXemKDBnVae+viS5ZTIr51GpNRQ=)
                          2: On2nk-aByUGs4ZA6emj31XEJdso.roa (hash: DD3HadfYy5dPFXQsNsDN3ezTTc4+paMyIyZQDpChk8M=)
                          3: QmnB2CMIfe5umcxczxRujV0wYEk.roa (hash: lwZAzq1D6hmN+6U+dqklR1EjzUoOQPeBNTMLHAdXkGQ=)
                          4: _o6_wuT7FcaEjWJwYedtzs_IfmA.roa (hash: lgc9U7hguKPPpFqLsGHsfRe1ImiCK2L+5cGosq9k/3Y=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: UObn0M81Vx5dRzhXRLbD8OMRVTm8lHJaBJsvmm9YKD4=)
                          6: tsHmi25vrKfns5kPGhl6myHWaVw.roa (hash: 8MIMAYAM0/jsI9v0uOOSYvki5uUrLoYRmY+NS2ZIDRg=)
                          7: vX_8fXaxigdlWpe1tG-xpUdtIoQ.roa (hash: XxkJj1YMXQmGGy2zQBCP59NASJ3xuWotiNT/aTYNmvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:fe:fa:79:79:83:b1:fe:65:b4:db:07:6a:1f:5c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Sep 23 16:00:11 2026 GMT
            Not After : Sep 24 16:00:11 2026 GMT
        Subject: CN=0cabe1f44debb004027ba22c5f5d9658b141c3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:64:fb:5e:ef:71:d8:ae:03:45:d8:6c:8d:
                    55:54:8d:29:4e:04:1b:01:ed:ca:a7:c8:f8:eb:2c:
                    24:1a:30:cc:2d:4a:53:64:c5:73:ac:a1:43:60:2b:
                    d7:10:ce:0a:5c:54:2e:51:dd:bf:2d:e7:5d:4b:4a:
                    49:4d:d0:4b:19:6d:53:bb:d8:06:68:d3:4b:05:1e:
                    1e:96:95:5b:58:db:19:af:73:ca:d9:f2:4f:b3:e9:
                    1c:70:70:9f:78:86:f4:41:32:b6:4d:ba:4e:97:d5:
                    4b:d4:63:fd:25:9e:cc:5d:cd:32:ef:87:6a:80:e7:
                    87:26:b3:d9:6d:88:b5:d1:bd:ca:46:d9:13:03:76:
                    7c:ed:c6:4b:9d:84:a7:a4:73:23:4b:69:4b:9b:36:
                    a4:56:d6:3d:d1:75:45:1a:79:b8:41:07:16:e4:45:
                    88:9c:f4:8f:5a:d9:a7:bd:65:7b:8f:8e:91:84:3a:
                    5e:97:6d:fe:ee:df:37:77:ab:0c:18:cc:68:35:7b:
                    f0:c4:1c:39:b1:b3:0d:6c:74:72:90:27:d8:3d:e8:
                    ca:70:cc:b8:08:2f:c2:56:87:8f:ae:2c:e3:09:80:
                    67:f2:0b:13:07:bc:85:60:dc:69:b4:25:b1:e0:f0:
                    da:e0:33:0f:b5:17:aa:e3:10:50:3b:14:b9:bf:47:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:E1:F4:4D:EB:B0:04:02:7B:A2:2C:5F:5D:96:58:B1:41:C3:E0
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:2d:fc:11:b0:c3:d0:1d:a2:69:0e:3a:e9:ac:c3:40:26:
         f5:09:ce:be:50:9d:f7:d1:3a:24:9b:4b:27:fa:4a:82:c3:0f:
         37:ae:16:21:55:2d:07:da:d9:10:fd:17:7a:9a:1b:cf:92:01:
         cf:53:ec:07:47:68:65:82:a0:d9:d5:6c:7e:52:f0:90:13:3c:
         46:fa:4b:6f:d2:e1:bf:33:a9:b6:9e:dc:94:fc:7f:00:d1:4c:
         55:57:5c:77:49:20:66:2f:dd:93:73:41:0f:c4:23:3d:53:8a:
         a8:61:de:e7:6a:ba:46:dd:e9:78:de:b8:e9:c7:7d:4e:17:c0:
         b3:ef:1d:11:44:59:0f:b2:9c:36:5b:43:7a:fd:09:ef:cb:20:
         aa:48:d3:1c:38:ad:65:50:4a:2a:91:51:2f:cf:3e:a6:0e:72:
         6c:d0:1f:46:68:1f:79:1d:32:03:f4:6e:74:ff:87:dc:5c:96:
         e8:78:7e:19:db:48:32:cc:f2:4c:23:c0:5f:16:87:58:c9:93:
         c4:c3:c9:40:73:a0:86:8c:8f:f5:93:82:c9:67:e9:ed:3f:6e:
         ea:36:65:3e:b7:22:82:7f:bb:08:9a:01:89:d5:2c:9d:77:52:
         a1:ed:6a:0f:6d:3c:6a:1c:ad:43:52:de:fc:3e:7b:a0:3c:75:
         de:fe:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:46:39 2026 by rpki-client