Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File:                     i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier:          TzxsV6d6c/jivEH5T0vfbP4fSytHjU3vVO7zrD9EuIE=
Subject key identifier:   F0:BB:3E:A9:7C:28:DD:FE:84:A5:9F:56:88:7A:8D:4F:2E:11:92:53
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer:       /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial:       01A0EB89D6641BEEDCFE36DBA800344166C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number:          1A79
Signing time:             Tue 29 Sep 2026 05:01:14 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:14 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:14 +0000
Files and hashes:         1: Ra13SMTFBvpWhxXrpfFnFw-OimM.roa (hash: b0Za2pBFcrD4LJ53MzUO0gNJytzhPTrcz+l8K+RFsRM=)
                          2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: A9nPr0j8DjkHdJWX+hFWhrNlVnvavlkexjWB7QuTL1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:89:d6:64:1b:ee:dc:fe:36:db:a8:00:34:41:66:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
        Validity
            Not Before: Sep 29 05:01:14 2026 GMT
            Not After : Sep 30 05:01:14 2026 GMT
        Subject: CN=f0bb3ea97c28ddfe84a59f56887a8d4f2e119253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:1d:88:21:28:13:6b:39:d7:f9:ab:e9:16:
                    35:e8:f1:a2:89:06:17:a6:e9:4b:0b:e9:4f:ca:cb:
                    9d:1c:d8:1b:24:2e:84:5a:73:21:ce:5d:55:73:f4:
                    5e:d0:b9:ad:0e:c3:0d:41:8a:6c:1d:58:38:96:4e:
                    15:1a:86:a3:34:38:55:10:8c:d1:ce:df:7e:1d:ad:
                    9a:04:ca:00:f1:ab:e9:c7:bf:8e:a4:47:31:70:62:
                    86:ec:fd:2c:cb:1e:45:c8:30:49:ca:1b:e1:46:bb:
                    c8:3d:41:97:48:38:e4:c2:d8:d1:d6:7e:4b:2e:c5:
                    93:5d:c3:d9:c3:63:d6:03:c7:98:49:cb:62:de:ac:
                    d4:8c:29:c8:12:e4:18:f4:26:af:7d:63:b9:13:b9:
                    0d:27:56:b3:b8:70:71:ef:c4:73:ef:80:4c:8a:31:
                    c1:f7:24:e2:80:1d:af:07:d8:cb:1a:9a:f1:fa:2d:
                    01:40:e6:06:20:fd:1d:6c:14:4b:66:0b:26:84:bf:
                    e4:b2:bd:b0:bd:49:4c:90:6a:51:90:53:d3:ca:85:
                    d0:98:b5:a4:18:60:ab:01:b9:a2:25:50:c7:0a:0c:
                    5a:13:ca:8a:fc:2a:81:66:a4:24:3f:70:29:1a:7b:
                    31:f1:a3:de:71:ea:e3:03:d3:21:3f:1c:31:b0:81:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:3E:A9:7C:28:DD:FE:84:A5:9F:56:88:7A:8D:4F:2E:11:92:53
            X509v3 Authority Key Identifier:
                keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:27:b8:c4:08:1d:dd:99:55:02:c5:f0:15:a8:b9:43:ba:
         17:5d:e6:2f:a2:8c:2b:6f:6c:fc:de:d5:4d:c9:82:e1:d4:79:
         10:d1:13:bc:db:65:7d:b1:ae:cb:ae:78:8d:1a:4c:89:a0:ce:
         0d:2f:ce:e1:f8:ca:17:9a:6f:79:99:51:99:89:22:38:8b:70:
         a6:22:fb:0d:bd:80:26:d5:ac:74:8a:89:ee:c8:77:f7:3f:2d:
         a6:21:b7:e8:76:82:bb:7c:28:3e:cd:ae:c8:29:af:85:79:a8:
         b8:8d:2e:73:03:dc:f4:a4:ba:91:b7:c7:d6:79:b9:8f:10:37:
         48:9d:a2:a0:bf:e0:9f:50:37:51:76:55:c1:d4:82:a7:e3:91:
         26:35:be:56:05:68:bd:3f:a4:61:fe:e6:b5:6e:5f:2a:7d:ee:
         c1:19:00:df:70:01:7e:48:3f:29:bd:de:8d:26:e2:08:ff:10:
         ee:76:40:17:8f:02:3e:07:ed:aa:ca:df:37:fc:ef:ee:c1:f0:
         f6:06:a5:5f:e1:4f:d2:64:02:0b:cd:c3:e5:00:09:17:e4:d3:
         d9:d3:ad:ac:81:65:3b:66:13:57:f3:42:1e:53:f0:9f:2f:6f:
         b5:cf:e0:42:4e:39:8e:41:5a:b0:df:d7:3e:36:7b:41:bd:08:
         46:ba:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:46:49 2026 by rpki-client