Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File:                     ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier:          eZmfTxR4WJlizr/37MQ+4VEm3uCwGHkME10/ofvY76A=
Subject key identifier:   E8:3D:0C:07:F8:D7:41:F7:66:4E:CB:14:CF:2E:6C:F1:80:C1:31:87
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer:       /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial:       01A100232509FEC6F4E8DB6ADA236AF8BCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number:          1A99
Signing time:             Sat 03 Oct 2026 05:01:05 +0000
Manifest this update:     Sat 03 Oct 2026 05:01:05 +0000
Manifest next update:     Sun 04 Oct 2026 05:01:05 +0000
Files and hashes:         1: 1-lkGZhIuyoLc-xdILurzrx5fcUA.asa (hash: APoM994M8OUix1Q1A5wwIVp1ItNTgJQaQCCwGYmbLkI=)
                          2: Tn7Pc__H_TUg_32ubkt6NJOEaYg.asa (hash: AN7Na+UF8ieY7ZxLnQVVQNOsUynIOsLl+t6+Vp7i4NQ=)
                          3: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
                          4: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: UK4eFFKF8WLzhASkDyB+jiMfA/MihdGUc02PZ6Z8tQk=)
                          5: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
                          6: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:23:25:09:fe:c6:f4:e8:db:6a:da:23:6a:f8:bc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
        Validity
            Not Before: Oct  3 05:01:05 2026 GMT
            Not After : Oct  4 05:01:05 2026 GMT
        Subject: CN=e83d0c07f8d741f7664ecb14cf2e6cf180c13187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:a3:66:a0:d2:dd:7f:7f:7d:86:5b:4d:7e:
                    88:4b:27:7b:6a:72:b4:b6:26:4b:a4:4a:68:67:1c:
                    ba:ca:1b:8c:fb:c2:52:bd:47:38:2a:04:a5:69:13:
                    94:16:16:c8:d6:32:fe:5d:d5:f2:ab:d7:89:21:37:
                    e1:ad:c4:83:c9:13:81:76:14:6c:2d:5b:b8:b6:64:
                    45:dd:a7:2f:f3:91:3c:21:77:62:da:f0:88:8c:38:
                    a1:04:56:c7:4d:cc:ae:9d:d1:c1:15:7f:10:16:9e:
                    37:51:ec:b6:70:f6:35:ad:ff:55:79:c0:aa:14:d2:
                    d2:02:55:36:c8:f0:39:92:f2:70:07:3d:10:23:a1:
                    9c:48:cd:44:00:31:68:3d:96:35:61:f3:3c:47:a6:
                    97:ab:34:a9:e4:da:04:65:ae:18:65:c9:a2:a3:9e:
                    b0:ed:f5:ee:1a:b4:df:ae:1b:f9:63:eb:68:e0:01:
                    5e:37:33:ae:4d:a4:5a:20:88:49:47:30:75:7e:6e:
                    db:b6:59:b2:db:01:9c:79:8c:e6:07:7e:f5:7d:54:
                    fa:01:78:7e:08:0d:75:16:22:38:a8:d7:52:1c:ed:
                    d7:9c:6d:62:b4:c7:f4:4d:d3:c2:30:22:23:a6:e0:
                    98:65:8a:cd:e7:c8:78:67:7c:c4:f9:98:79:e1:fe:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3D:0C:07:F8:D7:41:F7:66:4E:CB:14:CF:2E:6C:F1:80:C1:31:87
            X509v3 Authority Key Identifier:
                keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:fc:0c:f2:f3:27:36:e5:fd:75:0f:c5:03:50:a1:e2:72:
         46:a3:ba:29:83:d0:76:63:4a:31:94:88:af:3d:cb:7d:b8:fb:
         ff:ff:8b:17:2f:2d:17:3b:13:57:22:6b:e2:08:90:f9:55:5e:
         09:00:1e:16:a0:eb:5a:8f:31:7b:96:56:68:b6:45:1f:34:d5:
         a6:53:b9:1e:d1:f3:a7:82:8a:e2:38:a2:d6:11:ae:43:b7:11:
         84:cd:49:f8:9e:e8:e3:de:28:04:8e:a6:a7:f4:fc:78:68:98:
         35:bf:64:e9:66:2f:e0:7f:52:3e:02:b8:62:4b:a1:8c:5a:f4:
         b3:ad:7b:6d:9a:02:60:f4:28:52:bc:30:8c:99:f8:86:36:b6:
         61:fd:93:bc:e7:69:b2:cd:89:67:8e:59:d9:f2:8c:d0:78:81:
         40:63:75:49:11:ab:5f:5a:d5:72:f1:5c:66:f5:9b:5e:cd:b3:
         0f:aa:95:ed:11:57:63:9f:1b:b7:03:0d:05:8b:e7:30:44:c9:
         a5:12:26:ca:12:78:0b:95:47:10:21:27:7a:c6:48:20:34:04:
         5a:a2:ac:c6:d4:a1:b5:3a:dd:ed:3f:8c:81:03:fd:03:2a:07:
         c7:eb:0e:9b:13:02:99:7b:5a:1f:b4:58:81:32:67:8f:9a:f8:
         54:09:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:01:11 2026 by rpki-client