Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File:                     iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier:          GB6kVfC/RKXqxcsMkKcx4FEaJ3bZAgL/T8OS8Ky7BUs=
Subject key identifier:   9B:B4:00:26:A9:8E:08:B3:20:92:40:A6:D4:D1:E7:84:CE:AE:E2:FC
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer:       /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial:       01A10B8226543420F464F32568375F5B3A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number:          0E98
Signing time:             Mon 05 Oct 2026 10:00:41 +0000
Manifest this update:     Mon 05 Oct 2026 10:00:41 +0000
Manifest next update:     Tue 06 Oct 2026 10:00:41 +0000
Files and hashes:         1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
                          2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: Py9Buwczk6aACno3vPf21snvLCTNWFfzTIWWhEbzoTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:82:26:54:34:20:f4:64:f3:25:68:37:5f:5b:3a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
        Validity
            Not Before: Oct  5 10:00:41 2026 GMT
            Not After : Oct  6 10:00:41 2026 GMT
        Subject: CN=9bb40026a98e08b3209240a6d4d1e784ceaee2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:4b:91:12:f5:92:1a:4f:4a:69:40:c2:1e:
                    e2:12:eb:f0:3b:43:fb:3f:4a:09:1c:13:ea:fb:8d:
                    72:d7:12:e4:d4:1c:a8:cc:40:c5:38:4f:6f:02:bd:
                    43:e1:a2:13:71:62:e9:64:56:1d:47:ef:1c:b3:e1:
                    b3:c4:2d:f6:c6:83:12:8d:06:cf:fd:d3:8c:a1:37:
                    51:65:dd:72:92:5e:e2:96:ae:63:0f:cf:10:84:7d:
                    a1:0d:24:68:16:bd:5a:d7:1b:03:08:cf:bd:cc:45:
                    45:ce:7d:6c:66:58:18:39:1e:a4:44:01:ed:32:f8:
                    5c:71:be:e8:31:3f:d5:0b:fb:8c:bc:06:55:ac:d5:
                    18:d5:97:48:d3:d7:8a:28:7c:aa:c0:10:52:b4:85:
                    a1:6e:29:a8:36:f7:43:ce:32:0a:9d:db:09:79:82:
                    66:a9:75:08:9b:6b:ea:91:a7:05:6b:8f:c9:11:cd:
                    19:bf:31:87:18:a0:d2:b6:c5:10:36:d7:89:ee:38:
                    5e:4b:61:e7:0e:2f:47:1b:66:a8:47:04:d2:68:d3:
                    69:99:d4:bf:f2:df:aa:d7:21:43:67:3d:a7:d3:21:
                    9d:a3:f2:24:d2:19:18:79:72:0b:3a:9e:ec:c6:92:
                    c2:e3:5d:35:76:07:10:d4:0a:68:e2:0f:24:6b:b2:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:00:26:A9:8E:08:B3:20:92:40:A6:D4:D1:E7:84:CE:AE:E2:FC
            X509v3 Authority Key Identifier:
                keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d3:59:ba:6c:62:86:33:a4:95:27:52:75:44:2b:5c:b5:1f:
         20:85:77:e2:e7:f5:51:8b:1f:c2:fb:7f:94:f6:c2:57:b5:c0:
         79:e4:6a:f3:17:30:69:3b:e2:fd:00:7b:04:db:1e:1b:12:2f:
         bf:e5:d1:01:b5:9c:59:55:81:c4:30:31:2d:bf:dc:5a:8d:d3:
         c1:70:ef:e5:b7:cf:52:af:c1:95:0b:26:ad:c4:c0:ba:9c:0d:
         df:5b:49:9c:67:0b:1b:77:a0:92:a4:97:bc:af:e1:75:ca:56:
         c9:d4:b9:f2:50:58:b8:01:e3:64:86:08:56:28:f0:84:9d:a8:
         e2:65:fb:e4:a3:bd:5b:4a:76:17:13:47:a1:b1:26:ef:e0:89:
         aa:7a:f3:b8:22:46:c7:4d:b1:a0:10:49:e8:8f:09:1c:b4:5f:
         6e:cf:60:e1:e2:2b:64:33:99:bc:eb:4f:e5:64:16:07:58:2c:
         6e:18:53:20:a8:19:57:b7:ed:c2:cf:36:66:77:7c:6e:dd:63:
         dc:87:00:c6:68:dd:18:93:ea:40:3e:cd:36:98:4d:28:7b:ec:
         57:75:8f:d5:52:39:04:2c:55:b8:cc:b4:f1:f7:7a:f2:28:af:
         83:4d:aa:09:3d:39:5a:32:e6:e5:72:f9:0a:f2:2b:f4:15:bd:
         aa:00:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:02:14 2026 by rpki-client