Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File:                     iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier:          5/c64pTbooOoEGimy8/n162Ponowicq7vOJLgvhvNYI=
Subject key identifier:   4E:3C:0B:E9:B2:6C:B3:D8:EB:8F:5D:08:C5:B4:2B:65:E2:B5:3C:53
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer:       /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial:       01A0D45DA4D312C0FDF0443692F4A333D151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number:          026E
Signing time:             Thu 24 Sep 2026 17:01:41 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:41 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:41 +0000
Files and hashes:         1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
                          2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: gFRCcJcG/klFPXL60H2iVuK9wDG6Aqp4Kdwf9OmWkBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:a4:d3:12:c0:fd:f0:44:36:92:f4:a3:33:d1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
        Validity
            Not Before: Sep 24 17:01:41 2026 GMT
            Not After : Sep 25 17:01:41 2026 GMT
        Subject: CN=4e3c0be9b26cb3d8eb8f5d08c5b42b65e2b53c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:79:4a:26:52:ad:80:06:a3:1c:84:23:a8:
                    d7:00:c2:f8:ad:37:2d:89:31:fa:ef:62:8b:d5:5f:
                    a7:5c:db:a3:b1:27:f5:2e:a3:1e:f3:7a:93:a9:0b:
                    2d:22:4d:de:39:61:07:5a:ab:98:d9:58:9b:6b:3d:
                    ae:10:15:b9:bd:4f:92:21:b3:f9:c7:33:20:30:2b:
                    29:60:81:aa:0f:3c:e2:7f:68:d5:8a:1b:a7:e9:79:
                    3c:3c:38:93:bc:c1:4d:1f:a3:2e:b1:ae:be:0d:ef:
                    0e:99:39:09:b9:70:77:c8:09:e2:69:20:94:c2:30:
                    4f:4d:6d:f1:a5:db:27:b4:3f:a4:fb:60:55:3e:bc:
                    0a:f4:97:19:9f:93:1d:f1:9f:d6:91:82:c6:e1:92:
                    d4:12:db:12:53:6c:d9:21:35:93:13:8e:fd:f9:a8:
                    b1:c9:56:26:fa:f1:55:aa:59:55:7c:33:b1:21:f8:
                    a1:dd:de:06:a4:fb:28:90:28:b4:cf:22:d5:3a:d5:
                    db:77:92:7e:11:25:fc:16:fd:55:eb:93:31:03:c8:
                    b0:f3:db:07:a2:96:0e:20:6a:c5:b2:ce:81:35:92:
                    e7:42:be:9e:fa:ef:90:9b:4f:ae:95:d9:8b:29:9b:
                    f0:58:40:4e:59:40:92:c1:52:48:d6:3e:2f:a0:00:
                    fa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3C:0B:E9:B2:6C:B3:D8:EB:8F:5D:08:C5:B4:2B:65:E2:B5:3C:53
            X509v3 Authority Key Identifier:
                keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:51:40:59:87:0b:b6:bf:aa:53:dc:56:26:f8:48:32:f6:
         12:64:f8:f2:be:3a:2e:aa:80:f9:3f:24:a4:14:0f:9a:fe:7a:
         ce:e6:1d:4e:80:4b:eb:3f:1a:0c:71:0c:97:75:c7:59:09:1f:
         b6:b8:5b:10:d2:2c:bd:8c:de:6c:eb:26:32:4d:8d:13:75:1b:
         31:01:7f:e9:53:8f:52:8d:3f:82:33:da:17:f4:e7:d8:15:68:
         0a:44:c3:10:3e:e1:c1:b8:00:9c:5c:0d:56:f7:bf:f4:42:e9:
         73:16:73:0a:ac:48:05:5d:f8:4b:0a:0f:27:d9:bd:2e:55:63:
         27:01:a2:dd:74:45:63:d2:65:04:33:74:46:ca:92:41:bb:b1:
         56:da:e7:9e:26:23:83:6a:9f:71:7a:da:67:56:bc:df:a4:6d:
         7b:67:ef:d9:87:f6:49:3a:ab:e1:46:ce:f6:05:64:dd:b8:3e:
         6d:43:f9:b4:1b:91:08:84:91:79:a3:c7:09:66:d3:48:4a:26:
         e4:e1:a2:f7:7b:6f:bf:58:69:1b:73:ea:df:80:9b:a9:f0:d1:
         79:e7:49:1f:38:24:af:41:4d:1a:d2:9c:38:07:68:58:03:7c:
         cd:8b:50:79:24:0e:cc:b3:97:94:4c:9f:02:08:86:6e:02:b1:
         5a:b1:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:06:07 2026 by rpki-client