Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File:                     0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier:          nAX+JXbpvJyhPlm2ivy0xleyojIe31tlqLneVd4uK0s=
Subject key identifier:   97:15:3F:CD:E0:20:5D:D3:17:B5:E5:FA:26:8B:64:4E:BA:CC:5D:23
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer:       /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial:       01A0D56FC06180B5BD6BEB6E9581AA4C94E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 22:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:05 +0000
Files and hashes:         1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: yrRchlBcJTNqi0ida/RhAyvwP9wJ/j5191NiRfB3Lfo=)
                          2: dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa (hash: 4z4Cff5T7C1kMcuabXqlqC9vzDBKDpLEEFDPaDQ1Shs=)
                          3: lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa (hash: aE61BcYLJ+s8wneEHCKlvN2g4ojZACwiHGtJ3iEG3YI=)
                          4: qgZQRIByCSALcE73ENt-q4UPqdY.roa (hash: GR9g1THKzvFcNqQhXU+wmTdELTKbBSkjvvOetVfO1p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:c0:61:80:b5:bd:6b:eb:6e:95:81:aa:4c:94:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
        Validity
            Not Before: Sep 24 22:01:05 2026 GMT
            Not After : Sep 25 22:01:05 2026 GMT
        Subject: CN=97153fcde0205dd317b5e5fa268b644ebacc5d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:4b:0c:b5:4a:26:8f:8d:23:6d:b2:fc:63:
                    2b:dc:32:00:bd:bd:44:9c:57:a7:e9:bd:d3:3f:66:
                    4b:74:d9:fb:7a:cb:36:10:3a:7e:37:0a:09:d4:a0:
                    0a:3a:2e:ac:21:a4:72:72:e5:51:0e:f5:8d:e8:d6:
                    6d:e7:f3:7d:d9:80:31:e0:83:90:6f:da:3b:44:e8:
                    f1:ba:35:ee:7d:46:9c:95:c3:f5:09:16:7f:b4:5f:
                    c8:04:7a:5f:6b:d1:3e:74:65:e3:11:81:76:91:ff:
                    4a:2e:34:e1:6f:c1:7a:fd:3f:15:fe:36:69:43:5c:
                    f8:6e:7e:7e:7f:c7:e5:88:dd:0d:dc:20:9f:f0:0d:
                    9d:e4:d6:31:4c:27:a2:c2:de:43:24:67:4e:da:ba:
                    42:b3:8b:f6:1e:10:06:d1:66:24:c7:14:29:d7:b6:
                    e6:bf:41:d6:5c:54:51:9d:60:ea:6b:a1:ae:85:1f:
                    5a:25:eb:e4:90:3c:a7:83:8e:2e:5d:28:cf:c1:95:
                    b6:f0:16:e2:d2:fa:9c:52:de:61:91:5d:58:5a:0c:
                    a7:0a:20:34:db:62:d0:1c:15:01:84:30:0e:28:a5:
                    16:e5:c4:3e:dd:11:c5:5e:f1:a8:73:0e:ef:99:c8:
                    4d:f8:61:2c:83:5f:60:85:c2:3f:1c:2e:b3:a0:07:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:15:3F:CD:E0:20:5D:D3:17:B5:E5:FA:26:8B:64:4E:BA:CC:5D:23
            X509v3 Authority Key Identifier:
                keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:61:00:70:02:37:fc:64:aa:56:63:9f:10:df:8a:b1:6f:0d:
         92:ca:fd:7a:6b:32:32:95:25:ce:d6:41:fa:b7:47:d5:4a:bd:
         2f:3e:f9:28:52:df:49:6b:a6:e8:8b:f6:68:dc:82:a9:83:52:
         dc:03:8a:bd:05:3b:26:69:91:3e:5b:f6:48:47:34:e8:ce:50:
         50:1e:d8:5b:e2:bd:9e:dd:09:55:65:e4:00:59:86:d7:8e:0b:
         fb:54:e0:14:22:4d:20:a4:8f:bc:f5:74:06:2c:0d:03:aa:bd:
         f7:d2:5e:e6:03:73:ed:bd:6d:2d:e7:3c:81:bb:a1:a9:b0:ab:
         a2:75:10:37:82:53:30:83:7e:7b:28:5f:7e:1a:cb:0d:39:1f:
         13:02:63:0a:a8:7b:03:e2:0b:0c:8e:65:fc:0c:62:5c:66:0b:
         7a:8d:ce:38:ce:17:98:99:fc:3b:7e:31:2f:04:88:0f:a2:db:
         ca:51:5d:90:36:7d:89:c5:4e:c3:f0:cb:da:0c:f8:7a:74:a6:
         56:f4:18:61:84:65:78:4e:9b:9e:2d:bd:ee:d4:16:8d:95:cc:
         44:4f:e2:a9:19:f1:00:b9:16:f3:70:f9:25:cf:7a:f0:26:27:
         2b:3c:7e:d4:d0:f2:96:9d:6f:9c:d2:17:40:ca:38:7c:fe:a2:
         67:f7:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:41:41 2026 by rpki-client